$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/rfTQOpRBRW8rG626USHe9xUxCb8.cer File: rfTQOpRBRW8rG626USHe9xUxCb8.cer (raw, json) Hash identifier: ubNdBShRsDOlUl2TmXSzmIaMXxDXtw1D3DrkYI5Wctk= Subject key identifier: AD:F4:D0:3A:94:41:45:6F:2B:1B:AD:BA:51:21:DE:F7:15:31:09:BF Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 642D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20105/rfTQOpRBRW8rG626USHe9xUxCb8.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20105/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sun 15 Mar 2026 01:31:40 +0000 Certificate not after: Mon 15 Mar 2027 01:30:02 +0000 Subordinate resources: IP: 103.143.136.0/23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 04:30:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25645 (0x642d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Mar 15 01:31:40 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=ADF4D03A9441456F2B1BADBA5121DEF7153109BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:35:a8:a0:5e:db:50:ef:ee:bd:54:0f:88:87: 80:df:5f:55:ee:64:01:3f:81:8b:c7:0c:b5:b2:74: c0:16:4e:24:02:bf:33:7f:b9:bf:55:fa:55:8d:26: 88:24:a7:7d:62:52:08:dd:04:42:b0:7d:c7:19:d5: 44:26:ec:2c:3d:05:0c:e4:89:3d:d9:2b:b8:6c:e5: 36:b0:1e:dd:37:28:4a:75:87:35:37:cb:2a:4d:be: 6a:68:d4:99:8f:b2:2e:ca:89:dc:87:d5:37:8b:bd: 22:45:2b:14:0a:49:c8:73:9a:14:d2:d7:bf:09:af: f8:7a:94:22:39:b1:54:5e:54:d0:17:45:c5:6d:5d: f9:65:ac:b4:9c:bc:65:ff:08:12:ee:79:da:36:aa: ef:5b:06:1e:56:0a:d5:c6:2b:40:13:ef:76:79:d7: 6f:d8:8f:2d:0d:3b:d0:bd:0d:0e:5e:1f:66:ae:01: d6:b5:aa:46:10:0c:f3:ce:06:2c:62:c9:29:d5:86: c5:30:5e:fc:10:6b:c7:80:44:c6:23:d9:07:b6:50: 33:8b:71:d4:9c:4e:0e:b8:16:f3:cd:25:25:ca:0e: a1:61:7e:c5:9a:42:c1:d0:d0:1c:30:e0:d6:74:71: b6:ce:14:17:fe:1f:33:f5:6c:8f:ce:13:bd:c3:f9: d2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:F4:D0:3A:94:41:45:6F:2B:1B:AD:BA:51:21:DE:F7:15:31:09:BF X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20105/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20105/rfTQOpRBRW8rG626USHe9xUxCb8.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.143.136.0/23 Signature Algorithm: sha256WithRSAEncryption 59:45:ef:ff:6b:7d:a3:b3:b0:a6:57:f4:c1:31:78:fd:d3:4c: f6:4d:15:54:11:68:d2:5a:f1:11:db:82:b3:15:c8:cf:07:4f: f1:d7:7e:3c:49:9b:4f:21:24:06:2e:53:6b:c7:3d:c1:88:e3: 5f:65:7b:22:88:9c:fb:0d:c1:d5:50:e7:4e:f5:79:01:54:35: 9d:34:b7:fa:e0:96:cd:5c:99:7d:a5:0a:ee:f3:91:4a:e5:6e: 2a:99:11:03:c3:98:04:60:96:0a:fb:f3:49:4a:ba:2b:85:d5: ee:05:3d:51:55:39:20:5d:bd:64:b0:50:ab:90:fa:5f:eb:28: 4e:e4:e6:c8:f3:48:eb:24:4a:96:9d:7f:12:22:f4:d2:ab:0a: ed:34:28:17:55:1c:b0:ed:47:05:2e:14:fb:0c:c9:80:93:67: f4:08:c6:8c:04:c8:08:27:31:80:2b:5f:ca:3f:7d:19:1d:48: 2c:0c:a1:dc:ee:7a:1c:cf:11:63:db:fa:a5:9f:8e:db:00:dd: 1d:52:77:05:ad:d1:8d:65:78:48:07:5b:e1:62:31:cd:58:a4: 6c:cd:5b:c2:37:30:7a:a3:bc:63:c4:ab:58:46:12:f7:0e:89: 8c:23:b6:5f:85:4b:a5:86:b8:ca:eb:9b:f8:79:79:f2:ce:4c: a8:e0:f2:e0 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICZC0wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MDMxNTAxMzE0MFoXDTI3MDMxNTAxMzAwMlowMzEx MC8GA1UEAxMoQURGNEQwM0E5NDQxNDU2RjJCMUJBREJBNTEyMURFRjcxNTMxMDlC RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM41qKBe21Dv7r1UD4iH gN9fVe5kAT+Bi8cMtbJ0wBZOJAK/M3+5v1X6VY0miCSnfWJSCN0EQrB9xxnVRCbs LD0FDOSJPdkruGzlNrAe3TcoSnWHNTfLKk2+amjUmY+yLsqJ3IfVN4u9IkUrFApJ yHOaFNLXvwmv+HqUIjmxVF5U0BdFxW1d+WWstJy8Zf8IEu552jaq71sGHlYK1cYr QBPvdnnXb9iPLQ070L0NDl4fZq4B1rWqRhAM884GLGLJKdWGxTBe/BBrx4BExiPZ B7ZQM4tx1JxODrgW880lJcoOoWF+xZpCwdDQHDDg1nRxts4UF/4fM/Vsj84TvcP5 0kkCAwEAAaOCAoswggKHMB0GA1UdDgQWBBSt9NA6lEFFbysbrbpRId73FTEJvzAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAxMDUvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMTA1L3Jm VFFPcFJCUlc4ckc2MjZVU0hlOXhVeENiOC5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnj4gwDQYJKoZIhvcN AQELBQADggEBAFlF7/9rfaOzsKZX9MExeP3TTPZNFVQRaNJa8RHbgrMVyM8HT/HX fjxJm08hJAYuU2vHPcGI419leyKInPsNwdVQ5071eQFUNZ00t/rgls1cmX2lCu7z kUrlbiqZEQPDmARglgr780lKuiuF1e4FPVFVOSBdvWSwUKuQ+l/rKE7k5sjzSOsk SpadfxIi9NKrCu00KBdVHLDtRwUuFPsMyYCTZ/QIxowEyAgnMYArX8o/fRkdSCwM odzuehzPEWPb+qWfjtsA3R1SdwWt0Y1leEgHW+FiMc1YpGzNW8I3MHqjvGPEq1hG EvcOiYwjtl+FS6WGuMrrm/h5efLOTKjg8uA= -----END CERTIFICATE-----Generated at Thu Mar 26 08:28:30 2026 by rpki-client