$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/l_K0uP4loMDH9Nb9T6G6fK5hKhI.cer File: l_K0uP4loMDH9Nb9T6G6fK5hKhI.cer (raw, json) Hash identifier: rZpodhc1vtQLXxV0/tW1pSoqrZ8nxLhFg4uVflRoya4= Subject key identifier: 97:F2:B4:B8:FE:25:A0:C0:C7:F4:D6:FD:4F:A1:BA:7C:AE:61:2A:12 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 5A99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30260/l_K0uP4loMDH9Nb9T6G6fK5hKhI.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30260/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Wed 15 Oct 2025 01:34:48 +0000 Certificate not after: Thu 15 Oct 2026 01:30:02 +0000 Subordinate resources: IP: 2001:2f0::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 18:23:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23193 (0x5a99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Oct 15 01:34:48 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=97F2B4B8FE25A0C0C7F4D6FD4FA1BA7CAE612A12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:38:2c:56:40:ef:1b:56:45:1a:b9:05:ca:99: ac:68:6e:70:37:ff:db:c6:95:0b:aa:72:46:b8:ef: b3:5f:d5:ba:0e:6b:ba:d6:8b:d7:82:24:9c:34:ac: 57:98:3a:5a:e6:a8:0d:65:2f:75:36:34:b5:5a:c5: f2:f1:12:6c:9e:ea:ac:2f:16:02:5f:e7:06:ba:10: f5:3f:dd:97:57:fd:7a:64:12:99:a7:1f:08:91:f5: 7f:a9:f6:56:19:d5:a0:e7:04:8f:6f:6c:88:e6:a2: 50:c6:27:2e:e6:c1:00:87:5d:f0:13:39:b8:bb:51: c7:b9:39:19:d5:9f:d2:73:a3:15:55:d7:ac:b0:0e: 87:b6:25:17:1e:62:a7:c4:64:ec:a6:87:64:9b:2e: f2:65:44:6b:a1:67:4a:85:fd:44:8c:23:d8:20:58: 11:f0:18:5a:0c:d1:9a:76:28:26:9b:2d:1d:ed:48: 1b:5c:94:01:ce:bd:3b:79:aa:08:2e:75:aa:7a:02: ed:b3:94:dc:5c:67:f3:58:64:b0:cd:6b:80:ab:d2: 34:32:12:c3:08:7d:0f:40:be:a1:22:01:92:89:24: 58:f6:b6:c0:8d:b3:fe:38:fc:0a:0b:b5:41:b8:00: 7f:2a:2c:4f:9a:00:99:58:49:80:08:21:22:3f:79: 4a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:F2:B4:B8:FE:25:A0:C0:C7:F4:D6:FD:4F:A1:BA:7C:AE:61:2A:12 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30260/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30260/l_K0uP4loMDH9Nb9T6G6fK5hKhI.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:2f0::/32 Signature Algorithm: sha256WithRSAEncryption 59:72:d1:4f:bf:45:eb:0a:92:35:cd:18:69:37:c5:c2:9a:77: cc:fe:1c:8f:c5:f6:12:2b:45:cd:62:ed:07:e3:59:63:a9:cf: 59:6f:7f:e6:f4:da:02:21:ba:1e:fe:ff:50:3e:af:a9:42:cd: 34:c4:bc:14:2f:bf:ad:f1:81:c8:ed:95:f8:8f:8b:fa:7e:4f: 52:5d:91:1c:ca:f7:b3:86:68:a9:f4:51:8b:96:54:04:a5:32: 08:50:e6:82:21:5b:0f:e3:c4:1d:63:ec:01:c3:35:1b:4d:8e: 39:a8:9e:da:7c:ed:28:58:ca:93:42:92:96:ca:94:c6:22:0b: bf:b1:ba:7f:4b:0c:7d:9d:46:62:21:11:84:44:02:43:00:4d: 76:f5:07:4c:5f:8d:52:d6:55:ea:e6:eb:e9:83:6b:85:79:d0: 66:2d:57:92:a5:da:81:87:9c:b2:6a:3d:4b:16:23:b7:ef:df: 00:79:5a:56:34:82:54:85:d4:90:02:69:4d:11:10:0c:6a:91: b2:f9:3c:6d:fb:f5:a5:e1:f7:23:16:35:a0:80:5f:3c:5f:f5: 6a:45:0b:89:73:da:47:d1:27:f9:49:93:cf:9b:a7:43:ba:b3: d4:7c:93:30:5e:ab:be:d8:6f:47:f8:88:d2:fd:8b:31:76:8d: 59:9d:82:22 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICWpkwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MTAxNTAxMzQ0OFoXDTI2MTAxNTAxMzAwMlowMzEx MC8GA1UEAxMoOTdGMkI0QjhGRTI1QTBDMEM3RjRENkZENEZBMUJBN0NBRTYxMkEx MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOY4LFZA7xtWRRq5BcqZ rGhucDf/28aVC6pyRrjvs1/Vug5rutaL14IknDSsV5g6WuaoDWUvdTY0tVrF8vES bJ7qrC8WAl/nBroQ9T/dl1f9emQSmacfCJH1f6n2VhnVoOcEj29siOaiUMYnLubB AIdd8BM5uLtRx7k5GdWf0nOjFVXXrLAOh7YlFx5ip8Rk7KaHZJsu8mVEa6FnSoX9 RIwj2CBYEfAYWgzRmnYoJpstHe1IG1yUAc69O3mqCC51qnoC7bOU3Fxn81hksM1r gKvSNDISwwh9D0C+oSIBkokkWPa2wI2z/jj8Cgu1QbgAfyosT5oAmVhJgAghIj95 SucCAwEAAaOCAowwggKIMB0GA1UdDgQWBBSX8rS4/iWgwMf01v1Pobp8rmEqEjAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAyNjAvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMjYwL2xf SzB1UDRsb01ESDlOYjlUNkc2Zks1aEtoSS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAgAQLwMA0GCSqGSIb3 DQEBCwUAA4IBAQBZctFPv0XrCpI1zRhpN8XCmnfM/hyPxfYSK0XNYu0H41ljqc9Z b3/m9NoCIboe/v9QPq+pQs00xLwUL7+t8YHI7ZX4j4v6fk9SXZEcyvezhmip9FGL llQEpTIIUOaCIVsP48QdY+wBwzUbTY45qJ7afO0oWMqTQpKWypTGIgu/sbp/Swx9 nUZiIRGERAJDAE129QdMX41S1lXq5uvpg2uFedBmLVeSpdqBh5yyaj1LFiO3798A eVpWNIJUhdSQAmlNERAMapGy+Txt+/Wl4fcjFjWggF88X/VqRQuJc9pH0Sf5SZPP m6dDurPUfJMwXqu+2G9H+IjS/Ysxdo1ZnYIi -----END CERTIFICATE-----Generated at Mon Oct 20 21:01:03 2025 by rpki-client