$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer File: pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer (raw, json) Hash identifier: DWbf7E5hoxGKEWYoUA9wo286RIF1+Z1El2d1yPCLpAA= Subject key identifier: A6:42:E7:87:39:0B:6C:E6:CE:E6:85:B4:43:F9:3A:B3:63:9F:11:6C Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 64DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sun 15 Mar 2026 01:37:03 +0000 Certificate not after: Mon 15 Mar 2027 01:30:02 +0000 Subordinate resources: IP: 125.2.128.0 -- 125.2.207.255 IP: 133.149.80.0/20 IP: 211.1.192.0/19 IP: 211.2.64.0/18 IP: 221.118.0.0/16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 05:36:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25821 (0x64dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Mar 15 01:37:03 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=A642E787390B6CE6CEE685B443F93AB3639F116C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0b:1d:74:55:31:e1:13:e0:7a:92:0d:71:b4: 2c:42:f3:86:3b:a0:f6:a2:c3:45:b9:99:5c:92:c0: e0:0a:44:01:19:3f:4a:64:83:45:a7:56:e6:7d:a7: a1:08:89:d9:66:73:f2:2a:2e:3b:2e:1e:65:75:cb: 2a:aa:84:a8:2e:49:e5:a4:bc:39:04:07:2a:8f:a3: d0:4c:d2:ab:5f:0e:08:92:6d:98:6a:bb:cf:bd:cf: db:6d:ad:d9:ab:83:62:54:55:24:a7:16:d3:8c:2d: ed:ee:3b:6b:af:36:99:84:6f:80:77:22:4b:01:ce: d0:ea:a3:af:67:90:83:86:f0:25:03:0d:b5:00:d8: b9:97:63:28:1d:97:ec:4a:8c:f4:07:02:0c:75:0d: 3c:fb:ce:aa:01:34:28:42:92:7f:eb:88:b4:a3:ba: eb:8d:53:27:48:1a:4f:4c:eb:2d:1e:09:d0:ce:8b: 8f:5c:f0:10:7d:0d:e9:b7:0c:b8:59:ba:de:4e:3c: 77:63:bd:14:5d:05:92:3d:fd:40:a6:40:ea:86:b9: 6a:5e:b7:f3:60:e7:89:8b:7b:49:a0:69:45:3c:71: c8:39:a4:29:7e:4a:6d:31:1d:22:8d:e5:69:a9:78: 72:0f:6b:ac:db:f4:7f:dc:19:dc:77:91:d5:cc:b0: b0:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:42:E7:87:39:0B:6C:E6:CE:E6:85:B4:43:F9:3A:B3:63:9F:11:6C X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 125.2.128.0-125.2.207.255 133.149.80.0/20 211.1.192.0/19 211.2.64.0/18 221.118.0.0/16 Signature Algorithm: sha256WithRSAEncryption 5d:5d:e5:7d:ad:9f:71:94:9c:5a:90:bc:22:3b:26:a3:83:35: 6f:99:8d:5c:a4:cc:e1:60:e8:42:3f:bc:40:a1:8c:2e:9d:12: a3:29:76:a7:80:29:86:dd:33:43:fc:ef:5f:6b:c7:dd:90:f3: 90:9d:9d:3b:3c:0d:47:28:09:9d:2b:10:d9:a8:7b:5d:04:51: 1a:f7:63:c9:4a:fd:12:40:bf:68:2c:44:cd:5f:26:db:cc:9c: ce:23:f1:8e:1b:ec:1e:09:f9:bc:6c:71:00:64:62:d6:8d:c6: 61:72:ce:27:08:ab:db:8c:57:64:ab:1a:74:25:c4:e3:2e:df: 7d:98:9a:c0:f6:f0:5a:f1:12:bc:56:54:a2:6c:59:e5:ab:b1: ef:1f:e3:de:c1:ec:81:72:ee:9f:e7:b0:30:75:d2:7f:76:1b: 78:5a:81:53:16:98:df:84:d8:7f:8b:04:a0:76:e3:aa:41:53: 16:a4:28:2a:49:2f:35:68:ab:d9:51:bc:f7:e2:4e:f2:b0:40: 23:b3:db:e9:cc:91:36:b4:2c:3d:29:56:1b:bf:9d:aa:c0:aa: f6:af:6c:c9:0e:69:b6:a6:3d:03:dc:04:66:2a:53:bd:6d:11: e5:48:f1:66:e1:5b:ea:e0:07:98:b1:28:80:74:b2:5b:2f:a5: e1:00:9c:49 -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgICZN0wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MDMxNTAxMzcwM1oXDTI3MDMxNTAxMzAwMlowMzEx MC8GA1UEAxMoQTY0MkU3ODczOTBCNkNFNkNFRTY4NUI0NDNGOTNBQjM2MzlGMTE2 QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMkLHXRVMeET4HqSDXG0 LELzhjug9qLDRbmZXJLA4ApEARk/SmSDRadW5n2noQiJ2WZz8iouOy4eZXXLKqqE qC5J5aS8OQQHKo+j0EzSq18OCJJtmGq7z73P222t2auDYlRVJKcW04wt7e47a682 mYRvgHciSwHO0Oqjr2eQg4bwJQMNtQDYuZdjKB2X7EqM9AcCDHUNPPvOqgE0KEKS f+uItKO6641TJ0gaT0zrLR4J0M6Lj1zwEH0N6bcMuFm63k48d2O9FF0Fkj39QKZA 6oa5al6382DniYt7SaBpRTxxyDmkKX5KbTEdIo3laal4cg9rrNv0f9wZ3HeR1cyw sBECAwEAAaOCAqUwggKhMB0GA1UdDgQWBBSmQueHOQts5s7mhbRD+TqzY58RbDAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB 7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC8zMTEvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMxMS9wa0xuaHpr TGJPYk81b1cwUV9rNnMyT2ZFV3cubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s MD4GCCsGAQUFBwEHAQH/BC8wLTArBAIAATAlMAwDBAd9AoADBAR9AsADBASFlVAD BAXTAcADBAbTAkADAwDddjANBgkqhkiG9w0BAQsFAAOCAQEAXV3lfa2fcZScWpC8 Ijsmo4M1b5mNXKTM4WDoQj+8QKGMLp0Soyl2p4Apht0zQ/zvX2vH3ZDzkJ2dOzwN RygJnSsQ2ah7XQRRGvdjyUr9EkC/aCxEzV8m28ycziPxjhvsHgn5vGxxAGRi1o3G YXLOJwir24xXZKsadCXE4y7ffZiawPbwWvESvFZUomxZ5aux7x/j3sHsgXLun+ew MHXSf3YbeFqBUxaY34TYf4sEoHbjqkFTFqQoKkkvNWir2VG89+JO8rBAI7Pb6cyR NrQsPSlWG7+dqsCq9q9syQ5ptqY9A9wEZipTvW0R5UjxZuFb6uAHmLEogHSyWy+l 4QCcSQ== -----END CERTIFICATE-----Generated at Thu Mar 26 13:29:58 2026 by rpki-client