$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer File: nbB2TG38Hj32vVgOpplKHnCY9So.cer (raw, json) Hash identifier: caqPOEPkYY0TdjRRoLMlCN2xV9NpnTiacHPP4kigAJs= Subject key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 6E52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Wed 15 Jul 2026 01:44:23 +0000 Certificate not after: Thu 15 Jul 2027 01:30:02 +0000 Subordinate resources: IP: 115.166.160.0 -- 115.166.207.255 IP: 122.128.112.0/21 IP: 203.160.16.0/20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Jul 2026 08:51:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28242 (0x6e52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Jul 15 01:44:23 2026 GMT Not After : Jul 15 01:30:02 2027 GMT Subject: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:61:bc:aa:b9:e2:b9:f4:47:1d:96:e1:53:20: fe:d8:98:18:37:1a:5e:3a:3c:7c:67:4e:3a:db:e1: de:78:f7:7d:8e:30:90:4c:0b:48:b2:16:b2:a7:5e: 04:52:cd:0f:78:e6:f4:bd:f7:b4:a1:8a:1c:74:dc: c9:3c:3a:de:b7:29:95:05:6f:53:4e:44:eb:f9:c7: 69:ab:d3:60:c3:5c:74:d5:b8:16:5e:c8:45:2d:9e: 96:42:73:93:62:25:cd:11:6a:6e:25:86:96:0b:a3: ab:e6:20:34:91:a9:b2:b1:87:20:d4:44:d2:9b:7d: e2:5c:aa:21:50:6a:6a:7c:ac:4f:c2:1a:b7:b2:85: 2c:af:96:00:50:9e:b6:5f:4c:f6:8b:b7:8b:9b:9e: 18:08:25:bf:5d:76:c0:5c:47:67:b3:ff:6a:ac:54: 68:96:73:c1:7b:ad:ed:61:45:2f:91:e9:34:a6:8e: 13:43:55:c3:73:17:75:70:40:4c:45:8b:9b:1d:d6: 76:ed:b3:34:2d:61:cd:9b:6c:fb:b7:ff:1b:23:de: 79:ce:f7:7d:99:b0:45:dd:6f:89:06:72:c8:12:61: b3:0a:aa:57:09:62:47:15:fd:b8:3a:27:30:73:d6: 3b:0b:a2:92:5a:be:c2:63:9d:c8:1d:d0:ba:c9:a6: 33:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 115.166.160.0-115.166.207.255 122.128.112.0/21 203.160.16.0/20 Signature Algorithm: sha256WithRSAEncryption 22:5b:72:00:e2:36:8c:e8:87:db:f6:df:5f:40:ef:9e:94:6c: d5:8c:e0:e6:09:6f:4a:b7:ad:e7:0e:08:3c:33:f3:a3:5d:30: 9e:fb:dc:f3:98:a0:05:77:c1:31:01:8f:8e:9d:e5:31:f3:f1: 52:c8:7f:a3:f3:90:32:b5:74:93:89:46:24:c4:93:70:c7:3e: 6c:ad:4a:ee:cf:2d:e6:86:fa:76:fb:d9:fd:a5:91:d4:f0:2e: 1a:4a:3f:e6:43:29:76:0e:44:ad:24:53:5d:65:4c:99:4f:a6: 1f:64:ba:f2:a0:7a:cf:12:b0:8b:9a:cc:6f:e7:be:1f:eb:fd: 6b:7f:8d:9c:d4:9a:53:4d:c6:96:b2:e6:b2:90:d8:0a:6c:93: d6:09:25:e3:8b:34:86:79:1f:73:70:0d:96:02:fa:5f:ce:37: c8:b2:15:6e:3a:a8:71:de:1d:57:57:7d:5a:7e:f1:1d:19:b3: 5c:71:9c:8d:bc:02:b8:38:e6:81:84:80:3c:83:88:1f:d5:d1: 66:54:17:1f:52:44:5a:50:f3:fc:14:3e:f5:8d:23:d4:76:b2: 26:80:33:ea:83:0b:2c:3b:0b:a3:05:aa:f0:09:5b:58:82:fd: c7:a2:29:93:f4:7a:bd:54:74:fd:60:82:8f:17:0a:6c:78:d6: 0f:72:c6:2c -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgICblIwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MDcxNTAxNDQyM1oXDTI3MDcxNTAxMzAwMlowMzEx MC8GA1UEAxMoOURCMDc2NEM2REZDMUUzREY2QkQ1ODBFQTY5OTRBMUU3MDk4RjUy QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK5hvKq54rn0Rx2W4VMg /tiYGDcaXjo8fGdOOtvh3nj3fY4wkEwLSLIWsqdeBFLND3jm9L33tKGKHHTcyTw6 3rcplQVvU05E6/nHaavTYMNcdNW4Fl7IRS2elkJzk2IlzRFqbiWGlgujq+YgNJGp srGHINRE0pt94lyqIVBqanysT8Iat7KFLK+WAFCetl9M9ou3i5ueGAglv112wFxH Z7P/aqxUaJZzwXut7WFFL5HpNKaOE0NVw3MXdXBATEWLmx3Wdu2zNC1hzZts+7f/ GyPeec73fZmwRd1viQZyyBJhswqqVwliRxX9uDonMHPWOwuiklq+wmOdyB3Qusmm M+8CAwEAAaOCAp8wggKbMB0GA1UdDgQWBBSdsHZMbfwePfa9WA6mmUoecJj1KjAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAwNjMvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMDYzL25i QjJURzM4SGozMnZWZ09wcGxLSG5DWTlTby5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwMwYIKwYBBQUHAQcBAf8EJDAiMCAEAgABMBowDAMEBXOmoAMEBHOmwAME A3qAcAMEBMugEDANBgkqhkiG9w0BAQsFAAOCAQEAIltyAOI2jOiH2/bfX0DvnpRs 1Yzg5glvSret5w4IPDPzo10wnvvc85igBXfBMQGPjp3lMfPxUsh/o/OQMrV0k4lG JMSTcMc+bK1K7s8t5ob6dvvZ/aWR1PAuGko/5kMpdg5ErSRTXWVMmU+mH2S68qB6 zxKwi5rMb+e+H+v9a3+NnNSaU03GlrLmspDYCmyT1gkl44s0hnkfc3ANlgL6X843 yLIVbjqocd4dV1d9Wn7xHRmzXHGcjbwCuDjmgYSAPIOIH9XRZlQXH1JEWlDz/BQ+ 9Y0j1HayJoAz6oMLLDsLowWq8AlbWIL9x6Ipk/R6vVR0/WCCjxcKbHjWD3LGLA== -----END CERTIFICATE-----Generated at Fri Jul 24 12:35:36 2026 by rpki-client