$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/jpVNfQWf1KP899x5vLTnYqJNZmo.cer File: jpVNfQWf1KP899x5vLTnYqJNZmo.cer (raw, json) Hash identifier: tQRR479taiNm5iXsLWOhAwWHPYm3NbTkPt57iaB3aVI= Subject key identifier: 8E:95:4D:7D:05:9F:D4:A3:FC:F7:DC:79:BC:B4:E7:62:A2:4D:66:6A Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 5B47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39012/jpVNfQWf1KP899x5vLTnYqJNZmo.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39012/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Wed 15 Oct 2025 01:39:54 +0000 Certificate not after: Thu 15 Oct 2026 01:30:02 +0000 Subordinate resources: IP: 2001:df0:25e::/48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 09:38:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23367 (0x5b47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Oct 15 01:39:54 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=8E954D7D059FD4A3FCF7DC79BCB4E762A24D666A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:52:f4:02:85:e6:80:02:aa:9b:09:99:3b:be: f0:c2:86:a9:d2:f7:e1:11:a7:c5:bf:80:09:02:a2: 74:ad:a4:ec:01:3e:b6:b8:01:a0:c6:5b:0d:77:bc: 31:8a:7c:c1:67:0e:a5:09:25:0f:59:8b:e4:c1:c5: c8:c7:17:32:04:40:ac:41:ca:7e:d3:9d:58:eb:e9: b4:e1:45:a4:4b:a9:c6:9c:3c:50:f9:2a:01:51:2a: f1:9e:56:48:e2:7e:d2:a2:1e:ae:18:57:ef:f4:4e: 69:40:07:c0:8b:9c:91:72:2c:32:08:21:d9:8e:ab: 03:c0:f1:38:ba:10:27:9f:4c:21:3f:b4:21:45:01: 88:18:42:c0:33:84:15:9b:62:7e:90:14:ac:8f:5f: 19:7c:4b:06:04:08:08:3e:7f:4c:4e:47:d6:c0:26: 68:58:b5:97:5f:8f:eb:ae:00:3e:1b:0f:6c:0b:02: f4:6e:ba:02:a4:46:9e:e8:3b:02:d6:e6:f6:ca:97: 2d:d1:62:1b:77:00:69:5e:ac:94:a0:c1:dc:a0:23: 29:c0:e2:6a:03:5c:b9:23:65:a0:45:16:08:e6:15: dd:88:5f:6e:e8:7a:29:50:2f:37:de:e3:4d:83:bf: d8:b8:c1:54:a8:2f:62:46:44:6c:23:42:20:62:6f: cd:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:95:4D:7D:05:9F:D4:A3:FC:F7:DC:79:BC:B4:E7:62:A2:4D:66:6A X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39012/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39012/jpVNfQWf1KP899x5vLTnYqJNZmo.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df0:25e::/48 Signature Algorithm: sha256WithRSAEncryption 77:44:ea:40:5d:fd:8f:35:a0:87:a2:58:47:e9:ae:ad:24:f9: 6d:81:d3:fc:91:8d:69:c7:28:62:a5:09:b7:b2:ca:3e:2d:05: 63:85:d7:b0:a3:f7:d4:c6:eb:dc:77:9c:35:19:cb:99:e6:e7: 85:07:f3:b0:6c:11:d5:ab:3a:d9:5d:99:d9:01:77:76:0a:91: 70:e6:57:b8:84:c0:86:7a:1b:01:e8:55:23:f7:3a:69:04:36: 62:21:e8:9c:d6:c1:8f:0b:e1:fc:20:1b:94:c7:4d:05:60:b2: 98:34:82:a0:7e:48:a3:6d:f8:f4:24:22:2e:ae:91:a5:49:24: 3f:e3:a8:aa:04:8f:a6:8e:ba:9b:7e:16:9c:df:0c:99:ea:6d: e5:11:e1:2c:34:2b:53:6e:4a:6e:5e:35:8c:77:e3:d2:20:78: 7b:2a:71:f8:e3:e7:cd:78:56:32:dc:9b:95:39:ec:e8:21:60: c2:17:4c:ac:d4:bf:e6:52:f2:0c:c6:97:e0:06:48:51:4d:78: b0:eb:be:f3:f7:9a:4d:4f:c3:77:d6:03:fc:d7:a7:9e:7f:d2: 69:7f:4a:fb:c4:16:10:37:19:21:7b:24:21:8f:32:30:6b:3f: ab:f7:da:d0:e0:56:df:da:84:30:9f:d0:70:6c:52:c0:0d:e2: a7:c7:7b:51 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICW0cwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MTAxNTAxMzk1NFoXDTI2MTAxNTAxMzAwMlowMzEx MC8GA1UEAxMoOEU5NTREN0QwNTlGRDRBM0ZDRjdEQzc5QkNCNEU3NjJBMjRENjY2 QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANNS9AKF5oACqpsJmTu+ 8MKGqdL34RGnxb+ACQKidK2k7AE+trgBoMZbDXe8MYp8wWcOpQklD1mL5MHFyMcX MgRArEHKftOdWOvptOFFpEupxpw8UPkqAVEq8Z5WSOJ+0qIerhhX7/ROaUAHwIuc kXIsMggh2Y6rA8DxOLoQJ59MIT+0IUUBiBhCwDOEFZtifpAUrI9fGXxLBgQICD5/ TE5H1sAmaFi1l1+P664APhsPbAsC9G66AqRGnug7Atbm9sqXLdFiG3cAaV6slKDB 3KAjKcDiagNcuSNloEUWCOYV3Yhfbuh6KVAvN97jTYO/2LjBVKgvYkZEbCNCIGJv zXUCAwEAAaOCAo4wggKKMB0GA1UdDgQWBBSOlU19BZ/Uo/z33Hm8tOdiok1majAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzkwMTIvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzM5MDEyL2pw Vk5mUVdmMUtQODk5eDV2TFRuWXFKTlptby5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAQ3wAl4wDQYJKoZI hvcNAQELBQADggEBAHdE6kBd/Y81oIeiWEfprq0k+W2B0/yRjWnHKGKlCbeyyj4t BWOF17Cj99TG69x3nDUZy5nm54UH87BsEdWrOtldmdkBd3YKkXDmV7iEwIZ6GwHo VSP3OmkENmIh6JzWwY8L4fwgG5THTQVgspg0gqB+SKNt+PQkIi6ukaVJJD/jqKoE j6aOupt+FpzfDJnqbeUR4Sw0K1NuSm5eNYx349IgeHsqcfjj5814VjLcm5U57Ogh YMIXTKzUv+ZS8gzGl+AGSFFNeLDrvvP3mk1Pw3fWA/zXp55/0ml/SvvEFhA3GSF7 JCGPMjBrP6v32tDgVt/ahDCf0HBsUsAN4qfHe1E= -----END CERTIFICATE-----Generated at Mon Oct 20 12:09:59 2025 by rpki-client