$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/rT7LxCj-FH6KC7LmRIUA0xEqr2Q.cer File: rT7LxCj-FH6KC7LmRIUA0xEqr2Q.cer (raw, json) Hash identifier: 1ZJ7Y+YLUjgRJVSoApbFBx9ybJNb3ZxcXjhjQOq0KdM= Subject key identifier: AD:3E:CB:C4:28:FE:14:7E:8A:0B:B2:E6:44:85:00:D3:11:2A:AF:64 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 64E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30353/rT7LxCj-FH6KC7LmRIUA0xEqr2Q.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30353/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sun 15 Mar 2026 01:37:13 +0000 Certificate not after: Mon 15 Mar 2027 01:30:02 +0000 Subordinate resources: IP: 2405:5340::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 04:30:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25826 (0x64e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Mar 15 01:37:13 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=AD3ECBC428FE147E8A0BB2E6448500D3112AAF64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ae:65:ba:4e:9f:78:e1:e6:00:b9:13:9d:fc: 6a:61:a0:55:0a:30:5b:1d:4c:70:a6:4b:26:91:1f: 2d:e8:db:61:7d:1a:af:38:0e:0a:c4:51:63:c9:3b: 41:d5:fe:c6:12:70:68:db:b7:a7:f0:2b:ee:cd:87: 3d:fa:52:2f:16:83:82:e6:12:e8:95:7e:0d:be:0b: c3:10:a9:44:d4:fb:a9:d6:06:28:b0:51:11:9d:d4: 8e:0b:e9:2d:d1:0c:c0:65:51:e7:72:75:f0:7c:22: c4:7a:0b:39:89:67:b7:00:1e:3b:39:8e:06:bf:92: 4b:fb:6c:d5:67:82:16:2b:28:9d:f8:bb:f8:5e:b8: 06:74:ba:0d:69:a5:a1:70:d3:96:62:f3:06:75:ee: aa:aa:51:e6:4c:82:c9:49:8f:d4:f0:59:71:c7:ee: b0:54:0d:7d:52:39:4f:1f:bb:7b:ca:c8:9a:05:56: 1c:ff:1b:6d:0f:1c:7e:21:d0:90:6d:d4:d0:2b:10: fa:2f:51:58:ec:a9:ac:17:c1:8e:41:37:ae:46:43: 86:68:6a:48:9b:1d:c9:99:32:ff:c3:fe:41:76:02: 3c:64:b2:9d:53:58:99:a2:b3:7e:75:c3:40:ad:24: 5b:bb:61:70:5c:6c:ad:17:f4:e1:f3:ca:a2:23:ec: 96:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:3E:CB:C4:28:FE:14:7E:8A:0B:B2:E6:44:85:00:D3:11:2A:AF:64 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30353/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30353/rT7LxCj-FH6KC7LmRIUA0xEqr2Q.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2405:5340::/32 Signature Algorithm: sha256WithRSAEncryption 41:b7:b3:32:70:0a:50:ba:09:6c:47:ef:93:2a:c7:f9:78:cd: f5:53:cb:43:73:0c:12:d0:a2:38:5f:0f:75:59:23:08:66:1a: 65:52:3d:b1:84:ad:cc:f4:5e:78:aa:7a:7c:f6:88:55:4f:21: bd:10:d5:98:10:40:7b:fd:08:91:e6:8b:2f:ce:62:13:99:d3: 25:97:02:35:ff:7d:e8:14:13:c4:42:fc:b1:a3:81:84:a2:88: b7:30:af:61:63:91:d8:ad:dc:fa:1d:0a:bc:62:59:2d:fa:3c: 6e:ff:27:c2:eb:8c:94:e1:a7:c7:ce:25:c8:25:f2:8f:33:c5: 48:e2:cb:3d:a5:b9:a8:12:30:18:6f:85:ed:0e:92:da:88:a7: 78:b7:66:10:ae:eb:07:79:97:72:9c:2b:54:28:71:98:88:a0: 22:44:f3:de:c6:51:1d:f4:05:33:94:51:61:70:71:68:c9:d0: 64:f3:eb:ac:37:c2:a8:1b:97:e3:c2:c6:91:48:6b:34:70:47: a6:c7:27:e4:56:38:86:7e:7a:6e:5a:b1:dd:8c:54:dd:a9:34: 57:93:74:ff:66:a6:13:2b:80:da:c3:48:23:d0:af:47:de:a5: 12:9a:2e:65:28:e1:79:35:70:07:07:05:e2:3d:26:1d:b7:06: 3a:0f:a6:bf -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICZOIwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MDMxNTAxMzcxM1oXDTI3MDMxNTAxMzAwMlowMzEx MC8GA1UEAxMoQUQzRUNCQzQyOEZFMTQ3RThBMEJCMkU2NDQ4NTAwRDMxMTJBQUY2 NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKGuZbpOn3jh5gC5E538 amGgVQowWx1McKZLJpEfLejbYX0arzgOCsRRY8k7QdX+xhJwaNu3p/Ar7s2HPfpS LxaDguYS6JV+Db4LwxCpRNT7qdYGKLBREZ3UjgvpLdEMwGVR53J18HwixHoLOYln twAeOzmOBr+SS/ts1WeCFisonfi7+F64BnS6DWmloXDTlmLzBnXuqqpR5kyCyUmP 1PBZccfusFQNfVI5Tx+7e8rImgVWHP8bbQ8cfiHQkG3U0CsQ+i9RWOyprBfBjkE3 rkZDhmhqSJsdyZky/8P+QXYCPGSynVNYmaKzfnXDQK0kW7thcFxsrRf04fPKoiPs lmMCAwEAAaOCAowwggKIMB0GA1UdDgQWBBStPsvEKP4UfooLsuZEhQDTESqvZDAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAzNTMvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMzUzL3JU N0x4Q2otRkg2S0M3TG1SSVVBMHhFcXIyUS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBVNAMA0GCSqGSIb3 DQEBCwUAA4IBAQBBt7MycApQuglsR++TKsf5eM31U8tDcwwS0KI4Xw91WSMIZhpl Uj2xhK3M9F54qnp89ohVTyG9ENWYEEB7/QiR5osvzmITmdMllwI1/33oFBPEQvyx o4GEooi3MK9hY5HYrdz6HQq8Ylkt+jxu/yfC64yU4afHziXIJfKPM8VI4ss9pbmo EjAYb4XtDpLaiKd4t2YQrusHeZdynCtUKHGYiKAiRPPexlEd9AUzlFFhcHFoydBk 8+usN8KoG5fjwsaRSGs0cEemxyfkVjiGfnpuWrHdjFTdqTRXk3T/ZqYTK4Daw0gj 0K9H3qUSmi5lKOF5NXAHBwXiPSYdtwY6D6a/ -----END CERTIFICATE-----Generated at Thu Mar 26 06:57:30 2026 by rpki-client