$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer File: nbB2TG38Hj32vVgOpplKHnCY9So.cer (raw, json) Hash identifier: NpqYaomsPSRky6kFqmhlAK3ZarDzVXO3GLNHTzd3ijo= Subject key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 6477 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sun 15 Mar 2026 01:34:07 +0000 Certificate not after: Mon 15 Mar 2027 01:30:02 +0000 Subordinate resources: IP: 115.166.160.0 -- 115.166.207.255 IP: 122.128.112.0/21 IP: 203.160.16.0/20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 05:36:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25719 (0x6477) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Mar 15 01:34:07 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:61:bc:aa:b9:e2:b9:f4:47:1d:96:e1:53:20: fe:d8:98:18:37:1a:5e:3a:3c:7c:67:4e:3a:db:e1: de:78:f7:7d:8e:30:90:4c:0b:48:b2:16:b2:a7:5e: 04:52:cd:0f:78:e6:f4:bd:f7:b4:a1:8a:1c:74:dc: c9:3c:3a:de:b7:29:95:05:6f:53:4e:44:eb:f9:c7: 69:ab:d3:60:c3:5c:74:d5:b8:16:5e:c8:45:2d:9e: 96:42:73:93:62:25:cd:11:6a:6e:25:86:96:0b:a3: ab:e6:20:34:91:a9:b2:b1:87:20:d4:44:d2:9b:7d: e2:5c:aa:21:50:6a:6a:7c:ac:4f:c2:1a:b7:b2:85: 2c:af:96:00:50:9e:b6:5f:4c:f6:8b:b7:8b:9b:9e: 18:08:25:bf:5d:76:c0:5c:47:67:b3:ff:6a:ac:54: 68:96:73:c1:7b:ad:ed:61:45:2f:91:e9:34:a6:8e: 13:43:55:c3:73:17:75:70:40:4c:45:8b:9b:1d:d6: 76:ed:b3:34:2d:61:cd:9b:6c:fb:b7:ff:1b:23:de: 79:ce:f7:7d:99:b0:45:dd:6f:89:06:72:c8:12:61: b3:0a:aa:57:09:62:47:15:fd:b8:3a:27:30:73:d6: 3b:0b:a2:92:5a:be:c2:63:9d:c8:1d:d0:ba:c9:a6: 33:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 115.166.160.0-115.166.207.255 122.128.112.0/21 203.160.16.0/20 Signature Algorithm: sha256WithRSAEncryption a2:b9:30:9d:7d:6e:f7:47:88:3a:00:a6:55:e4:10:ec:88:48: d5:32:d2:3d:74:35:56:27:97:ba:46:d2:d0:d2:7b:29:50:c5: 2e:ea:54:98:f5:31:1b:4e:d0:52:79:5a:a6:d8:fa:6a:c6:5b: 91:3f:2e:04:1b:39:89:5e:b6:6c:ff:a8:5c:f8:f4:c7:dc:ee: 2f:0e:a3:cd:6b:3c:96:1f:7e:33:09:f5:c7:93:50:78:1e:7f: 0a:c6:58:73:4b:58:41:d8:82:b7:51:3d:8f:4a:64:fc:6e:8f: 36:24:bf:57:e9:1f:86:86:4f:72:4c:1b:da:e7:71:02:50:42: f1:fd:d3:2a:8f:ca:c5:7e:4f:0e:00:c9:53:53:89:76:03:4f: 6a:2b:b1:bb:2c:1b:a4:aa:64:c6:f4:35:fc:8b:72:e7:e7:d5: 42:ab:d9:c7:48:31:2f:38:74:76:38:59:ff:62:ff:a6:b6:d0: 8e:c8:bd:25:10:d4:7d:0a:82:8c:b3:63:30:3a:3d:30:0c:f1: 91:8a:fb:9f:22:27:3e:06:77:14:ea:71:ce:97:94:04:e3:0b: 8d:fc:2b:89:2e:4b:eb:95:cf:a1:3c:07:7b:cc:55:a2:30:5a: 12:f3:67:b6:cd:3e:67:39:ea:18:32:35:16:30:c9:51:23:c6: c2:af:5b:cb -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgICZHcwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MDMxNTAxMzQwN1oXDTI3MDMxNTAxMzAwMlowMzEx MC8GA1UEAxMoOURCMDc2NEM2REZDMUUzREY2QkQ1ODBFQTY5OTRBMUU3MDk4RjUy QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK5hvKq54rn0Rx2W4VMg /tiYGDcaXjo8fGdOOtvh3nj3fY4wkEwLSLIWsqdeBFLND3jm9L33tKGKHHTcyTw6 3rcplQVvU05E6/nHaavTYMNcdNW4Fl7IRS2elkJzk2IlzRFqbiWGlgujq+YgNJGp srGHINRE0pt94lyqIVBqanysT8Iat7KFLK+WAFCetl9M9ou3i5ueGAglv112wFxH Z7P/aqxUaJZzwXut7WFFL5HpNKaOE0NVw3MXdXBATEWLmx3Wdu2zNC1hzZts+7f/ GyPeec73fZmwRd1viQZyyBJhswqqVwliRxX9uDonMHPWOwuiklq+wmOdyB3Qusmm M+8CAwEAAaOCAp8wggKbMB0GA1UdDgQWBBSdsHZMbfwePfa9WA6mmUoecJj1KjAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAwNjMvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMDYzL25i QjJURzM4SGozMnZWZ09wcGxLSG5DWTlTby5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwMwYIKwYBBQUHAQcBAf8EJDAiMCAEAgABMBowDAMEBXOmoAMEBHOmwAME A3qAcAMEBMugEDANBgkqhkiG9w0BAQsFAAOCAQEAorkwnX1u90eIOgCmVeQQ7IhI 1TLSPXQ1VieXukbS0NJ7KVDFLupUmPUxG07QUnlaptj6asZbkT8uBBs5iV62bP+o XPj0x9zuLw6jzWs8lh9+Mwn1x5NQeB5/CsZYc0tYQdiCt1E9j0pk/G6PNiS/V+kf hoZPckwb2udxAlBC8f3TKo/KxX5PDgDJU1OJdgNPaiuxuywbpKpkxvQ1/Ity5+fV QqvZx0gxLzh0djhZ/2L/prbQjsi9JRDUfQqCjLNjMDo9MAzxkYr7nyInPgZ3FOpx zpeUBOMLjfwriS5L65XPoTwHe8xVojBaEvNnts0+ZznqGDI1FjDJUSPGwq9byw== -----END CERTIFICATE-----Generated at Thu Mar 26 13:30:09 2026 by rpki-client