$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/nVpUDBIv0McM5REXAET_ZYDXYxs.cer File: nVpUDBIv0McM5REXAET_ZYDXYxs.cer (raw, json) Hash identifier: gkGZf1pdBHmILhRsqDVyA2pExT9rhncl6XYOziok1fA= Subject key identifier: 9D:5A:54:0C:12:2F:D0:C7:0C:E5:11:17:00:44:FF:65:80:D7:63:1B Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 659D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30236/nVpUDBIv0McM5REXAET_ZYDXYxs.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30236/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sun 15 Mar 2026 01:43:00 +0000 Certificate not after: Mon 15 Mar 2027 01:30:02 +0000 Subordinate resources: IP: 2404:c700::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 05:36:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26013 (0x659d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Mar 15 01:43:00 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=9D5A540C122FD0C70CE511170044FF6580D7631B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:09:7b:90:b4:f9:ee:d8:08:d8:90:27:f3:d7: 28:e1:88:62:06:c6:df:3f:dd:f6:61:07:f8:5f:77: b2:ab:60:08:88:aa:17:e1:f7:25:63:ee:ab:35:83: c7:27:5c:58:5b:91:a6:cc:9f:c5:80:10:dc:df:b4: 7e:43:e4:e2:52:fb:14:3f:11:34:39:f5:c4:d1:bc: 62:2f:2a:c9:4b:d8:33:b8:7d:c6:a6:b5:4d:7f:a4: 0b:de:8f:c2:d8:46:04:3a:26:81:a8:8d:1e:11:3d: 22:51:f8:57:15:72:f8:6a:c7:a8:fa:ba:e9:a8:69: ed:12:7c:19:21:f3:bd:9c:34:74:de:e5:31:5d:55: 5b:bb:36:8a:c7:49:b1:da:07:8b:70:89:0e:ca:bc: 9e:2d:8d:ef:f6:8f:b0:47:1c:b1:6e:51:ec:7e:9d: c1:82:51:bd:0c:40:24:b9:bb:fb:2d:21:de:7c:c8: b7:8d:dc:2c:2d:cb:59:2d:7f:02:23:1d:04:59:f5: 65:c6:0a:ac:c6:2c:59:3b:41:cc:bf:e3:c7:d5:27: e7:db:07:8a:8b:b5:ca:dd:47:74:b0:a1:49:99:c0: 8c:0b:f1:4b:19:41:31:82:5c:c2:71:db:61:6f:8e: 06:ef:b8:75:7c:0f:65:73:59:0b:4c:55:6f:e4:f7: 40:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:5A:54:0C:12:2F:D0:C7:0C:E5:11:17:00:44:FF:65:80:D7:63:1B X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30236/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30236/nVpUDBIv0McM5REXAET_ZYDXYxs.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:c700::/32 Signature Algorithm: sha256WithRSAEncryption 1e:65:3c:ea:dc:80:e5:21:9b:b1:6d:6e:b8:8d:d6:42:85:20: d3:f5:3d:3d:11:37:4a:67:31:14:b9:3f:7e:5b:3d:8e:48:a7: 6a:79:57:45:93:99:da:ca:ad:d3:6d:a0:40:89:e8:59:42:7a: 29:49:96:f3:29:e8:66:9a:58:99:ce:0c:44:05:9d:06:50:62: dc:80:7d:3e:8a:aa:ad:f8:e2:34:af:4d:13:ff:ca:8c:71:2b: 5c:f6:d9:84:10:85:d7:7b:b9:98:5e:00:4e:8e:d9:ce:cc:7d: dc:2d:5d:ad:97:6c:ef:eb:dc:3e:09:82:af:46:5b:74:0e:dc: 15:cc:41:a6:29:a8:61:25:85:1f:a4:cb:22:04:6b:fd:bb:ea: 2c:b0:c7:91:f8:86:e8:f2:db:91:a5:68:1e:fc:d9:76:9c:f6: bb:33:d1:93:2e:cc:93:11:96:eb:24:02:00:9c:68:29:0b:6d: ac:7f:34:b5:27:ba:d0:41:ad:1e:31:f0:ac:15:d7:66:40:d1: dd:a9:aa:a8:62:03:43:1c:64:e5:3a:01:3d:98:68:af:b5:94: 90:d4:e5:18:53:dc:08:c4:f9:35:8a:7b:6a:c0:11:f4:9c:4a: 22:6a:ed:28:b4:c9:21:ae:d2:1b:a2:b4:f6:a5:de:87:99:5d: 5a:32:8b:8f -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICZZ0wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MDMxNTAxNDMwMFoXDTI3MDMxNTAxMzAwMlowMzEx MC8GA1UEAxMoOUQ1QTU0MEMxMjJGRDBDNzBDRTUxMTE3MDA0NEZGNjU4MEQ3NjMx QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANIJe5C0+e7YCNiQJ/PX KOGIYgbG3z/d9mEH+F93sqtgCIiqF+H3JWPuqzWDxydcWFuRpsyfxYAQ3N+0fkPk 4lL7FD8RNDn1xNG8Yi8qyUvYM7h9xqa1TX+kC96PwthGBDomgaiNHhE9IlH4VxVy +GrHqPq66ahp7RJ8GSHzvZw0dN7lMV1VW7s2isdJsdoHi3CJDsq8ni2N7/aPsEcc sW5R7H6dwYJRvQxAJLm7+y0h3nzIt43cLC3LWS1/AiMdBFn1ZcYKrMYsWTtBzL/j x9Un59sHiou1yt1HdLChSZnAjAvxSxlBMYJcwnHbYW+OBu+4dXwPZXNZC0xVb+T3 QOkCAwEAAaOCAowwggKIMB0GA1UdDgQWBBSdWlQMEi/QxwzlERcARP9lgNdjGzAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAyMzYvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMjM2L25W cFVEQkl2ME1jTTVSRVhBRVRfWllEWFl4cy5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBMcAMA0GCSqGSIb3 DQEBCwUAA4IBAQAeZTzq3IDlIZuxbW64jdZChSDT9T09ETdKZzEUuT9+Wz2OSKdq eVdFk5nayq3TbaBAiehZQnopSZbzKehmmliZzgxEBZ0GUGLcgH0+iqqt+OI0r00T /8qMcStc9tmEEIXXe7mYXgBOjtnOzH3cLV2tl2zv69w+CYKvRlt0DtwVzEGmKahh JYUfpMsiBGv9u+ossMeR+Ibo8tuRpWge/Nl2nPa7M9GTLsyTEZbrJAIAnGgpC22s fzS1J7rQQa0eMfCsFddmQNHdqaqoYgNDHGTlOgE9mGivtZSQ1OUYU9wIxPk1intq wBH0nEoiau0otMkhrtIborT2pd6HmV1aMouP -----END CERTIFICATE-----Generated at Thu Mar 26 10:40:02 2026 by rpki-client