$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/qd58EzgSN8W4mNWiTyyabLPBlxs.cer File: qd58EzgSN8W4mNWiTyyabLPBlxs.cer (raw, json) Hash identifier: 3WH62iGoEDYVAgWg3c4gP8psbyimahv5z+YDMV10xek= Subject key identifier: A9:DE:7C:13:38:12:37:C5:B8:98:D5:A2:4F:2C:9A:6C:B3:C1:97:1B Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 6D9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/qd58EzgSN8W4mNWiTyyabLPBlxs.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Wed 15 Jul 2026 01:38:54 +0000 Certificate not after: Thu 15 Jul 2027 01:30:02 +0000 Subordinate resources: IP: 49.128.24.0/21 IP: 49.128.96.0/22 IP: 126.52.96.0/22 IP: 203.201.52.0/22 IP: 211.15.112.0/20 IP: 211.19.224.0/19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Jul 2026 08:51:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28058 (0x6d9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Jul 15 01:38:54 2026 GMT Not After : Jul 15 01:30:02 2027 GMT Subject: CN=A9DE7C13381237C5B898D5A24F2C9A6CB3C1971B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:f4:ee:dc:28:65:f0:e1:9f:86:cd:9f:f1:32: 34:37:97:d6:7b:9f:7b:02:ed:d3:42:c6:72:28:fa: 7a:68:c9:85:6c:f4:00:62:17:42:06:76:39:42:0d: 25:0a:d2:d3:a9:72:e0:10:87:59:a5:03:86:18:60: 79:4c:e3:78:89:6c:05:5e:82:f4:69:9f:46:d0:62: 03:23:9c:6d:48:40:02:f9:fe:c6:cd:c0:be:20:45: a5:3a:3a:58:6c:41:f3:e1:54:5a:00:f6:8d:88:35: 78:e3:75:af:33:d9:e0:a2:ad:1c:24:52:f8:99:f4: 31:9f:d2:d5:1a:33:a1:c8:eb:5f:bc:f5:45:1d:47: 95:65:80:5f:b4:48:9f:34:87:97:5c:af:d8:15:17: 39:2b:71:61:79:ea:fe:2c:34:18:29:f0:1d:66:fd: 42:20:67:c4:a4:d7:02:c2:10:6d:4b:3c:9e:e8:ff: bd:5d:27:db:42:f2:83:67:21:70:37:f9:71:8d:2a: 2f:d9:26:80:87:78:21:f3:e3:44:9f:ed:f8:14:a2: 12:83:3d:58:95:2a:a0:6a:0c:d6:ad:62:96:b4:aa: 49:17:1e:49:37:d1:e9:2e:d5:b0:30:a4:8c:da:6f: 86:70:74:d4:ac:c8:b8:4c:29:6f:52:92:bb:a3:18: 63:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:DE:7C:13:38:12:37:C5:B8:98:D5:A2:4F:2C:9A:6C:B3:C1:97:1B X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/qd58EzgSN8W4mNWiTyyabLPBlxs.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.128.24.0/21 49.128.96.0/22 126.52.96.0/22 203.201.52.0/22 211.15.112.0/20 211.19.224.0/19 Signature Algorithm: sha256WithRSAEncryption a0:22:48:e4:38:13:19:30:3b:4a:75:5c:90:ab:af:00:de:9a: 5b:58:ca:fe:54:d7:96:63:8a:0b:c5:82:46:ac:2b:c6:e2:3d: e1:ca:7d:0b:29:8f:f4:3a:70:7a:1f:51:63:d8:8a:6d:85:f4: 80:f8:c2:02:cc:93:d0:6f:98:ec:d6:4f:a7:ae:42:bf:40:f0: 90:a0:4a:05:f8:14:59:99:c4:37:2f:72:8a:3c:2e:f3:eb:5a: 17:21:d2:09:18:76:46:02:a3:19:29:e0:5b:92:fd:a7:b0:9a: 8f:bf:bb:83:37:e6:90:76:78:a9:5c:28:43:bf:40:9c:5d:c6: 44:16:55:8b:bd:75:d6:f6:b1:e6:fe:66:51:d8:76:b1:6d:db: 0b:a3:49:d7:f0:03:a0:33:6c:db:f3:37:cf:31:a0:29:b4:85: 7e:2e:84:65:0a:3d:b2:72:03:7c:e7:08:5b:22:63:63:78:72: 12:78:03:f9:6b:6d:b2:4b:21:56:87:e1:c0:02:b6:8e:46:fe: ae:c8:e0:aa:60:64:77:2c:e6:20:aa:fe:47:26:aa:a9:06:d3: 12:5e:dd:5d:49:b0:cb:a7:f0:e9:84:3c:b7:f3:0f:ab:fb:a5: 21:06:a0:a0:3d:62:77:92:48:9a:0c:54:39:da:fb:a4:7d:62: 9a:ed:97:28 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgICbZowDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MDcxNTAxMzg1NFoXDTI3MDcxNTAxMzAwMlowMzEx MC8GA1UEAxMoQTlERTdDMTMzODEyMzdDNUI4OThENUEyNEYyQzlBNkNCM0MxOTcx QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAO307twoZfDhn4bNn/Ey NDeX1nufewLt00LGcij6emjJhWz0AGIXQgZ2OUINJQrS06ly4BCHWaUDhhhgeUzj eIlsBV6C9GmfRtBiAyOcbUhAAvn+xs3AviBFpTo6WGxB8+FUWgD2jYg1eON1rzPZ 4KKtHCRS+Jn0MZ/S1RozocjrX7z1RR1HlWWAX7RInzSHl1yv2BUXOStxYXnq/iw0 GCnwHWb9QiBnxKTXAsIQbUs8nuj/vV0n20Lyg2chcDf5cY0qL9kmgId4IfPjRJ/t +BSiEoM9WJUqoGoM1q1ilrSqSRceSTfR6S7VsDCkjNpvhnB01KzIuEwpb1KSu6MY Y1MCAwEAAaOCAqQwggKgMB0GA1UdDgQWBBSp3nwTOBI3xbiY1aJPLJpss8GXGzAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB 7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC84NTcvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzg1Ny9xZDU4RXpn U044VzRtTldpVHl5YWJMUEJseHMubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s MD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQDMYAYAwQCMYBgAwQCfjRgAwQC y8k0AwQE0w9wAwQF0xPgMA0GCSqGSIb3DQEBCwUAA4IBAQCgIkjkOBMZMDtKdVyQ q68A3ppbWMr+VNeWY4oLxYJGrCvG4j3hyn0LKY/0OnB6H1Fj2IpthfSA+MICzJPQ b5js1k+nrkK/QPCQoEoF+BRZmcQ3L3KKPC7z61oXIdIJGHZGAqMZKeBbkv2nsJqP v7uDN+aQdnipXChDv0CcXcZEFlWLvXXW9rHm/mZR2HaxbdsLo0nX8AOgM2zb8zfP MaAptIV+LoRlCj2ycgN85whbImNjeHISeAP5a22ySyFWh+HAAraORv6uyOCqYGR3 LOYgqv5HJqqpBtMSXt1dSbDLp/DphDy38w+r+6UhBqCgPWJ3kkiaDFQ52vukfWKa 7Zco -----END CERTIFICATE-----Generated at Fri Jul 24 13:52:11 2026 by rpki-client