$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/madMGvB7G_aDpMZKQj1lGF9f7K4.cer File: madMGvB7G_aDpMZKQj1lGF9f7K4.cer (raw, json) Hash identifier: dJGv4UY3lepynOIPxpS0R5yLqmOUViI6TdPOOdvUieo= Subject key identifier: 99:A7:4C:1A:F0:7B:1B:F6:83:A4:C6:4A:42:3D:65:18:5F:5F:EC:AE Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 6CAA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/519/madMGvB7G_aDpMZKQj1lGF9f7K4.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/519/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Wed 15 Jul 2026 01:31:18 +0000 Certificate not after: Thu 15 Jul 2027 01:30:02 +0000 Subordinate resources: IP: 27.125.204.0/22 IP: 103.1.248.0/22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Jul 2026 08:51:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27818 (0x6caa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Jul 15 01:31:18 2026 GMT Not After : Jul 15 01:30:02 2027 GMT Subject: CN=99A74C1AF07B1BF683A4C64A423D65185F5FECAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0f:9b:8d:60:14:47:09:76:a6:10:42:26:33: b8:a9:61:8c:e0:ca:67:7c:4c:28:45:da:9b:cb:b4: 74:a0:10:8e:34:af:2f:4f:61:25:25:17:6a:cd:c5: 49:8c:2e:b9:71:1a:68:15:f8:e3:6f:80:6e:0c:e4: 07:9f:91:bd:5b:7a:ac:11:c2:20:80:b8:17:fd:7e: af:92:81:7a:0c:65:e4:6d:20:bc:08:97:d3:c7:43: e7:66:52:06:c4:3e:4e:36:49:08:5f:be:ea:46:33: 73:9b:5c:05:67:d8:15:7b:9f:7c:d8:3b:ca:2f:bd: c9:fe:54:46:69:0e:d5:25:2a:71:18:a6:19:aa:d4: d7:03:a9:4a:70:4b:3d:70:5e:9a:7a:f4:bb:9a:fe: db:63:73:a8:6d:3c:c5:e5:ba:f6:5a:74:a6:0c:b8: 58:b2:ee:0e:aa:0a:1f:25:bf:fa:db:4c:78:57:81: 37:29:79:bf:10:bb:19:77:47:e9:22:c2:14:05:6d: 72:7c:0b:d0:8b:44:9f:74:c5:02:04:57:fc:a4:64: 32:b8:ae:aa:f9:f7:5d:db:3b:97:fe:77:0b:b9:47: fe:91:f2:e5:41:fe:f8:f3:cd:90:f8:79:05:c9:fb: 70:21:d9:a6:70:19:09:7e:a3:d6:9f:e1:d0:ec:4e: 00:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A7:4C:1A:F0:7B:1B:F6:83:A4:C6:4A:42:3D:65:18:5F:5F:EC:AE X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/519/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/519/madMGvB7G_aDpMZKQj1lGF9f7K4.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.125.204.0/22 103.1.248.0/22 Signature Algorithm: sha256WithRSAEncryption 51:84:80:3b:7c:a3:7b:90:4f:3f:08:17:df:b5:23:88:a4:17: 69:d9:f7:df:dd:91:80:f2:7d:72:03:86:08:04:53:4b:fb:f7: c7:49:4f:a8:5a:ad:ef:6a:49:ae:ee:6d:76:6e:bf:44:b9:a5: 5a:6b:ab:64:b8:51:bc:12:f4:02:ca:8a:f8:f7:78:bd:8f:50: fc:c5:be:84:36:10:a3:fb:39:c7:8c:7d:2c:63:13:c4:62:8f: e5:96:ce:03:60:3b:05:4c:fa:bf:19:d6:7f:d1:ae:3e:3a:40: 2b:ab:df:f6:ea:04:be:fe:2f:dc:5d:8d:9f:40:be:33:c7:64: fe:89:c0:4e:98:6b:49:9d:a8:7d:70:61:31:00:44:dd:b3:d2: 96:9b:a2:27:b5:79:9c:aa:73:e3:f5:08:d0:7a:e8:ea:46:ef: 70:b6:d9:76:80:90:95:43:bd:d7:ab:af:cf:37:e5:b4:8d:24: 01:aa:e5:3d:35:d5:d0:0a:13:62:d9:27:18:91:59:3b:bb:0a: 98:60:c9:53:04:bb:62:ea:24:c8:24:17:3a:b8:54:44:d1:8b: 2d:a2:df:76:31:43:27:52:b2:37:f3:b4:3d:21:ac:1c:78:27: 82:33:13:f1:8e:80:6d:b5:dc:14:a7:65:ce:16:08:0a:4d:8c: f6:64:2f:20 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICbKowDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MDcxNTAxMzExOFoXDTI3MDcxNTAxMzAwMlowMzEx MC8GA1UEAxMoOTlBNzRDMUFGMDdCMUJGNjgzQTRDNjRBNDIzRDY1MTg1RjVGRUNB RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKoPm41gFEcJdqYQQiYz uKlhjODKZ3xMKEXam8u0dKAQjjSvL09hJSUXas3FSYwuuXEaaBX442+AbgzkB5+R vVt6rBHCIIC4F/1+r5KBegxl5G0gvAiX08dD52ZSBsQ+TjZJCF++6kYzc5tcBWfY FXuffNg7yi+9yf5URmkO1SUqcRimGarU1wOpSnBLPXBemnr0u5r+22NzqG08xeW6 9lp0pgy4WLLuDqoKHyW/+ttMeFeBNyl5vxC7GXdH6SLCFAVtcnwL0ItEn3TFAgRX /KRkMriuqvn3Xds7l/53C7lH/pHy5UH++PPNkPh5Bcn7cCHZpnAZCX6j1p/h0OxO AMMCAwEAAaOCAowwggKIMB0GA1UdDgQWBBSZp0wa8Hsb9oOkxkpCPWUYX1/srjAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB 7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC81MTkvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzUxOS9tYWRNR3ZC N0dfYURwTVpLUWoxbEdGOWY3SzQubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCG33MAwQCZwH4MA0GCSqGSIb3 DQEBCwUAA4IBAQBRhIA7fKN7kE8/CBfftSOIpBdp2fff3ZGA8n1yA4YIBFNL+/fH SU+oWq3vakmu7m12br9EuaVaa6tkuFG8EvQCyor493i9j1D8xb6ENhCj+znHjH0s YxPEYo/lls4DYDsFTPq/GdZ/0a4+OkArq9/26gS+/i/cXY2fQL4zx2T+icBOmGtJ nah9cGExAETds9KWm6IntXmcqnPj9QjQeujqRu9wttl2gJCVQ73Xq6/PN+W0jSQB quU9NdXQChNi2ScYkVk7uwqYYMlTBLti6iTIJBc6uFRE0Ystot92MUMnUrI387Q9 IawceCeCMxPxjoBttdwUp2XOFggKTYz2ZC8g -----END CERTIFICATE-----Generated at Fri Jul 24 10:42:01 2026 by rpki-client