$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/r9gkd6CRsXzaYcVWO8KSDNzXqqU.cer File: r9gkd6CRsXzaYcVWO8KSDNzXqqU.cer (raw, json) Hash identifier: PbBkVRuQOWj0mftVau60TaIYN7kFkK/nSDZx5DKJWlM= Subject key identifier: AF:D8:24:77:A0:91:B1:7C:DA:61:C5:56:3B:C2:92:0C:DC:D7:AA:A5 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 65AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/r9gkd6CRsXzaYcVWO8KSDNzXqqU.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sun 15 Mar 2026 01:43:28 +0000 Certificate not after: Mon 15 Mar 2027 01:30:02 +0000 Subordinate resources: IP: 103.144.122.0/23 IP: 126.52.64.0/19 IP: 133.32.192.0/21 IP: 133.226.176.0/21 IP: 202.233.72.0/22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 05:36:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26029 (0x65ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Mar 15 01:43:28 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=AFD82477A091B17CDA61C5563BC2920CDCD7AAA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e0:28:97:f3:a5:31:74:98:62:e4:0d:0a:0f: 27:80:fc:f7:84:ec:3a:61:41:d3:55:cc:3a:1a:b2: 2e:6d:3f:c7:39:f1:57:83:62:fc:e6:ab:4c:98:c9: 55:0d:f1:5a:1b:22:1d:04:27:5e:30:aa:85:68:54: d7:b3:14:3e:75:ec:41:f9:f0:d7:b0:ec:fd:84:97: 5d:82:4c:83:7e:ce:80:da:d1:58:6f:e0:86:73:73: a1:44:ba:63:dd:e3:04:d9:85:2b:8d:42:96:d7:00: d0:6f:e4:c3:8b:31:f9:f5:ba:5f:ea:88:85:52:c5: cf:3d:82:1e:f8:a8:06:36:90:d7:84:86:89:d5:a2: bd:36:10:c9:94:74:bf:c0:77:68:e9:51:b4:52:ab: c0:cb:bb:24:76:f1:f3:cd:2d:0b:ad:46:71:8a:2d: a7:cd:19:58:f4:00:a3:ea:89:f7:46:cc:6f:b8:47: 64:56:1d:9c:34:74:c0:d3:15:8c:6e:43:4b:49:92: 3c:93:7f:35:5c:82:cc:56:6d:9c:8c:6b:71:b6:83: 5a:fb:e7:86:c4:85:a2:0c:2b:3a:c5:da:0d:5f:b3: 72:6e:cf:53:86:6b:6d:dd:c5:2d:15:11:68:52:be: c4:44:32:28:09:1c:db:de:f3:8f:3e:7f:0d:76:ee: 03:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:D8:24:77:A0:91:B1:7C:DA:61:C5:56:3B:C2:92:0C:DC:D7:AA:A5 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/r9gkd6CRsXzaYcVWO8KSDNzXqqU.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.144.122.0/23 126.52.64.0/19 133.32.192.0/21 133.226.176.0/21 202.233.72.0/22 Signature Algorithm: sha256WithRSAEncryption 04:68:d2:dc:12:32:be:3c:8e:0f:75:b6:f0:3a:7a:f7:3e:a0: 7b:aa:ad:c7:3e:fe:ac:21:1d:52:09:9e:f6:80:df:6c:04:16: eb:f4:37:47:fa:de:46:4b:8c:e2:e4:f8:44:0b:32:01:92:ed: 5d:66:cc:be:07:e6:57:5c:3a:5a:81:94:87:5d:92:90:99:46: 99:07:cc:07:83:da:55:70:3d:61:7e:99:d3:db:a1:6d:a5:c2: f0:0d:f5:aa:72:18:e1:a2:1d:a9:5e:cc:1a:01:1c:e5:8c:15: 55:d2:0d:9e:01:75:36:2d:5a:ca:6b:6b:1a:0c:21:b6:3c:fc: 8f:71:0f:a4:bf:24:0a:0e:77:fd:3c:c3:68:e3:e0:fe:df:01: a8:2d:bd:4b:70:ba:f7:29:d1:ab:38:5e:17:a4:31:67:34:be: fb:5f:79:e0:40:17:d3:89:67:a3:f9:0e:c7:db:19:47:87:19: b3:af:14:a3:9e:ed:cb:0f:52:aa:ef:74:58:03:b0:25:90:78: 11:34:e0:ca:fb:6b:c8:1e:39:f5:e2:89:fa:b7:b2:8c:ca:44: c5:9a:24:1d:d9:17:e6:67:48:31:e1:84:87:76:92:16:de:13: 21:af:34:19:08:53:09:9a:63:ed:a9:5b:25:8f:29:8a:d5:1d: 88:2b:60:fb -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgICZa0wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MDMxNTAxNDMyOFoXDTI3MDMxNTAxMzAwMlowMzEx MC8GA1UEAxMoQUZEODI0NzdBMDkxQjE3Q0RBNjFDNTU2M0JDMjkyMENEQ0Q3QUFB NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANjgKJfzpTF0mGLkDQoP J4D894TsOmFB01XMOhqyLm0/xznxV4Ni/OarTJjJVQ3xWhsiHQQnXjCqhWhU17MU PnXsQfnw17Ds/YSXXYJMg37OgNrRWG/ghnNzoUS6Y93jBNmFK41CltcA0G/kw4sx +fW6X+qIhVLFzz2CHvioBjaQ14SGidWivTYQyZR0v8B3aOlRtFKrwMu7JHbx880t C61GcYotp80ZWPQAo+qJ90bMb7hHZFYdnDR0wNMVjG5DS0mSPJN/NVyCzFZtnIxr cbaDWvvnhsSFogwrOsXaDV+zcm7PU4Zrbd3FLRURaFK+xEQyKAkc297zjz5/DXbu Az8CAwEAAaOCAqMwggKfMB0GA1UdDgQWBBSv2CR3oJGxfNphxVY7wpIM3NeqpTAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAxMDYvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMTA2L3I5 Z2tkNkNSc1h6YVljVldPOEtTRE56WHFxVS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwNwYIKwYBBQUHAQcBAf8EKDAmMCQEAgABMB4DBAFnkHoDBAV+NEADBAOF IMADBAOF4rADBALK6UgwDQYJKoZIhvcNAQELBQADggEBAARo0twSMr48jg91tvA6 evc+oHuqrcc+/qwhHVIJnvaA32wEFuv0N0f63kZLjOLk+EQLMgGS7V1mzL4H5ldc OlqBlIddkpCZRpkHzAeD2lVwPWF+mdPboW2lwvAN9apyGOGiHalezBoBHOWMFVXS DZ4BdTYtWspraxoMIbY8/I9xD6S/JAoOd/08w2jj4P7fAagtvUtwuvcp0as4Xhek MWc0vvtfeeBAF9OJZ6P5DsfbGUeHGbOvFKOe7csPUqrvdFgDsCWQeBE04Mr7a8ge OfXiifq3sozKRMWaJB3ZF+ZnSDHhhId2khbeEyGvNBkIUwmaY+2pWyWPKYrVHYgr YPs= -----END CERTIFICATE-----Generated at Thu Mar 26 13:02:18 2026 by rpki-client