$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/l_K0uP4loMDH9Nb9T6G6fK5hKhI.cer File: l_K0uP4loMDH9Nb9T6G6fK5hKhI.cer (raw, json) Hash identifier: T2XJUuoKPrU9TiBEjdrTsEaykRxxrKgojvW/FsPQd9k= Subject key identifier: 97:F2:B4:B8:FE:25:A0:C0:C7:F4:D6:FD:4F:A1:BA:7C:AE:61:2A:12 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 6522 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30260/l_K0uP4loMDH9Nb9T6G6fK5hKhI.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30260/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sun 15 Mar 2026 01:39:13 +0000 Certificate not after: Mon 15 Mar 2027 01:30:02 +0000 Subordinate resources: IP: 2001:2f0::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 05:36:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25890 (0x6522) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Mar 15 01:39:13 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=97F2B4B8FE25A0C0C7F4D6FD4FA1BA7CAE612A12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:38:2c:56:40:ef:1b:56:45:1a:b9:05:ca:99: ac:68:6e:70:37:ff:db:c6:95:0b:aa:72:46:b8:ef: b3:5f:d5:ba:0e:6b:ba:d6:8b:d7:82:24:9c:34:ac: 57:98:3a:5a:e6:a8:0d:65:2f:75:36:34:b5:5a:c5: f2:f1:12:6c:9e:ea:ac:2f:16:02:5f:e7:06:ba:10: f5:3f:dd:97:57:fd:7a:64:12:99:a7:1f:08:91:f5: 7f:a9:f6:56:19:d5:a0:e7:04:8f:6f:6c:88:e6:a2: 50:c6:27:2e:e6:c1:00:87:5d:f0:13:39:b8:bb:51: c7:b9:39:19:d5:9f:d2:73:a3:15:55:d7:ac:b0:0e: 87:b6:25:17:1e:62:a7:c4:64:ec:a6:87:64:9b:2e: f2:65:44:6b:a1:67:4a:85:fd:44:8c:23:d8:20:58: 11:f0:18:5a:0c:d1:9a:76:28:26:9b:2d:1d:ed:48: 1b:5c:94:01:ce:bd:3b:79:aa:08:2e:75:aa:7a:02: ed:b3:94:dc:5c:67:f3:58:64:b0:cd:6b:80:ab:d2: 34:32:12:c3:08:7d:0f:40:be:a1:22:01:92:89:24: 58:f6:b6:c0:8d:b3:fe:38:fc:0a:0b:b5:41:b8:00: 7f:2a:2c:4f:9a:00:99:58:49:80:08:21:22:3f:79: 4a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:F2:B4:B8:FE:25:A0:C0:C7:F4:D6:FD:4F:A1:BA:7C:AE:61:2A:12 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30260/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30260/l_K0uP4loMDH9Nb9T6G6fK5hKhI.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:2f0::/32 Signature Algorithm: sha256WithRSAEncryption 97:00:fb:a8:1c:5b:65:29:0d:16:ba:73:93:72:8c:a4:9e:63: 81:c8:c7:7d:47:b5:ff:37:6e:5a:ae:9f:d0:e9:7d:71:fc:87: 3f:af:0e:78:5d:25:96:0c:76:f4:07:92:3c:f5:42:fc:a8:44: 20:2f:55:f3:04:70:2a:3b:3f:36:57:34:45:1e:20:4a:47:d1: 00:98:de:8f:51:45:d1:fb:fb:1f:6f:9a:2b:3f:30:65:0e:57: 0b:d5:fb:92:5d:a0:c0:c7:92:47:65:d3:2b:30:b3:4e:b3:75: 9d:0b:a8:8b:c7:37:87:d5:21:27:03:7c:4e:2e:47:85:24:86: 2c:72:ef:02:2a:9f:05:57:be:7a:aa:a8:19:57:66:fc:a4:f6: 54:0d:67:33:23:51:6f:15:19:b3:d7:dd:59:89:f9:26:81:e3: d9:6f:73:51:e3:04:e1:34:13:ba:37:99:36:85:a3:0d:a9:f4: ea:8c:04:92:34:30:f5:a5:79:cf:5a:04:c0:ad:f2:d4:c4:c5: 5a:85:ee:ab:0c:8d:dc:d2:fd:5e:b1:49:cb:5e:d3:b9:4e:c4: 4a:24:ab:ec:5c:fe:c6:f4:f4:ee:d0:8c:13:47:0e:a1:d1:87: 2c:9e:1d:4d:19:b3:a0:a6:86:c5:e3:f3:ba:e2:f6:af:69:c3: d2:5f:07:42 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICZSIwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MDMxNTAxMzkxM1oXDTI3MDMxNTAxMzAwMlowMzEx MC8GA1UEAxMoOTdGMkI0QjhGRTI1QTBDMEM3RjRENkZENEZBMUJBN0NBRTYxMkEx MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOY4LFZA7xtWRRq5BcqZ rGhucDf/28aVC6pyRrjvs1/Vug5rutaL14IknDSsV5g6WuaoDWUvdTY0tVrF8vES bJ7qrC8WAl/nBroQ9T/dl1f9emQSmacfCJH1f6n2VhnVoOcEj29siOaiUMYnLubB AIdd8BM5uLtRx7k5GdWf0nOjFVXXrLAOh7YlFx5ip8Rk7KaHZJsu8mVEa6FnSoX9 RIwj2CBYEfAYWgzRmnYoJpstHe1IG1yUAc69O3mqCC51qnoC7bOU3Fxn81hksM1r gKvSNDISwwh9D0C+oSIBkokkWPa2wI2z/jj8Cgu1QbgAfyosT5oAmVhJgAghIj95 SucCAwEAAaOCAowwggKIMB0GA1UdDgQWBBSX8rS4/iWgwMf01v1Pobp8rmEqEjAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAyNjAvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMjYwL2xf SzB1UDRsb01ESDlOYjlUNkc2Zks1aEtoSS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAgAQLwMA0GCSqGSIb3 DQEBCwUAA4IBAQCXAPuoHFtlKQ0WunOTcoyknmOByMd9R7X/N25arp/Q6X1x/Ic/ rw54XSWWDHb0B5I89UL8qEQgL1XzBHAqOz82VzRFHiBKR9EAmN6PUUXR+/sfb5or PzBlDlcL1fuSXaDAx5JHZdMrMLNOs3WdC6iLxzeH1SEnA3xOLkeFJIYscu8CKp8F V756qqgZV2b8pPZUDWczI1FvFRmz191ZifkmgePZb3NR4wThNBO6N5k2haMNqfTq jASSNDD1pXnPWgTArfLUxMVahe6rDI3c0v1esUnLXtO5TsRKJKvsXP7G9PTu0IwT Rw6h0Ycsnh1NGbOgpobF4/O64vavacPSXwdC -----END CERTIFICATE-----Generated at Thu Mar 26 11:10:52 2026 by rpki-client