$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/tXkneacSiViHFmJnxL2een2EyBY.cer File: tXkneacSiViHFmJnxL2een2EyBY.cer (raw, json) Hash identifier: G8LsY6jxDL/PGqWkO7A2qtv7PcLLWS4lEyDYXwuhQDM= Subject key identifier: B5:79:27:79:A7:12:89:58:87:16:62:67:C4:BD:9E:7A:7D:84:C8:16 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 6547 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30197/tXkneacSiViHFmJnxL2een2EyBY.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30197/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sun 15 Mar 2026 01:40:26 +0000 Certificate not after: Mon 15 Mar 2027 01:30:02 +0000 Subordinate resources: IP: 2401:8b00::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 05:36:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25927 (0x6547) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Mar 15 01:40:26 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=B5792779A712895887166267C4BD9E7A7D84C816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b8:ce:7f:14:f8:86:35:d3:e8:21:70:df:79: fa:e0:94:34:49:a4:1b:ed:79:f1:6a:54:09:ed:fa: d0:8b:72:c2:98:d9:bd:92:80:8e:f3:43:7f:f5:5f: cb:69:26:0f:35:35:f1:1f:37:bd:37:1d:ec:09:9f: 66:79:25:37:da:d5:1e:a4:14:70:01:e6:c1:21:e7: 9b:af:ca:29:67:25:1a:ab:d1:aa:43:5b:61:54:98: f6:74:ed:cf:47:82:d8:06:50:4c:27:55:8b:6a:7b: 66:9b:06:31:5c:a7:b1:2b:5b:b3:c1:df:57:69:b3: bf:99:91:ae:e6:b7:a7:a3:31:17:28:79:22:b0:16: f8:3f:87:6e:16:c2:3f:e8:0d:99:86:90:5e:4c:54: 24:a9:5e:f2:e6:40:bb:e6:5f:fb:3b:cd:fd:9e:2a: 4c:42:3c:11:72:bc:91:42:f7:7f:a6:b6:4f:49:d7: 3d:24:ab:ee:2b:6c:c0:01:22:bd:9e:a1:80:4b:23: 79:08:27:36:45:6c:f7:2c:5a:a6:2f:73:cf:21:bf: d2:5e:4f:c1:3d:01:c1:6a:7c:bb:77:34:73:46:b5: 90:31:54:44:39:8b:8b:f0:3d:1d:60:80:1f:e5:31: 9f:7c:38:d4:78:0f:08:e4:c4:11:08:ca:6e:2f:ce: 8b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:79:27:79:A7:12:89:58:87:16:62:67:C4:BD:9E:7A:7D:84:C8:16 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30197/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30197/tXkneacSiViHFmJnxL2een2EyBY.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:8b00::/32 Signature Algorithm: sha256WithRSAEncryption 52:ca:28:93:12:35:f1:7c:45:9a:7c:ec:f8:28:56:3f:f3:9b: 7d:25:7e:35:83:b0:02:c2:c6:ee:3d:20:e2:f6:2a:ae:1c:1b: 6a:ea:7c:25:6c:6c:36:6a:da:6c:69:96:98:d5:b7:92:ff:8f: c7:79:fd:53:ed:d4:71:4f:46:27:7e:0f:de:3d:06:86:95:53: a1:32:2f:e5:be:9b:5f:2e:ce:08:be:2d:9d:92:ae:a0:d6:ad: fd:c4:75:32:ab:cf:d7:1f:46:90:2e:b2:2a:52:85:d9:56:35: 9e:42:93:19:d9:99:da:28:27:45:24:55:89:9a:10:01:21:c6: 73:60:77:95:e3:85:3d:ef:54:5e:de:b1:0c:3a:b8:f4:f9:e1: 52:52:cb:ae:86:68:1b:e0:07:1d:ac:6e:67:bf:2c:63:93:bb: 57:71:1f:a9:1a:52:3e:1d:7c:10:54:b5:ca:0b:02:c4:fc:58: 56:8e:d4:19:a9:06:09:54:3c:d1:cd:75:90:d2:55:98:18:13: 56:bf:fb:0f:3b:9d:57:f1:a6:13:52:7c:67:b6:23:ac:39:9c: 81:a1:40:e6:f3:a5:9e:69:7b:ee:38:f2:01:ab:59:29:00:98: 5f:b9:a5:64:03:79:d7:49:b7:2f:1b:0d:68:4f:4b:9a:b7:0d: aa:d8:0c:82 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICZUcwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MDMxNTAxNDAyNloXDTI3MDMxNTAxMzAwMlowMzEx MC8GA1UEAxMoQjU3OTI3NzlBNzEyODk1ODg3MTY2MjY3QzRCRDlFN0E3RDg0Qzgx NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMC4zn8U+IY10+ghcN95 +uCUNEmkG+158WpUCe360ItywpjZvZKAjvNDf/Vfy2kmDzU18R83vTcd7AmfZnkl N9rVHqQUcAHmwSHnm6/KKWclGqvRqkNbYVSY9nTtz0eC2AZQTCdVi2p7ZpsGMVyn sStbs8HfV2mzv5mRrua3p6MxFyh5IrAW+D+HbhbCP+gNmYaQXkxUJKle8uZAu+Zf +zvN/Z4qTEI8EXK8kUL3f6a2T0nXPSSr7itswAEivZ6hgEsjeQgnNkVs9yxapi9z zyG/0l5PwT0BwWp8u3c0c0a1kDFURDmLi/A9HWCAH+Uxn3w41HgPCOTEEQjKbi/O i9ECAwEAAaOCAowwggKIMB0GA1UdDgQWBBS1eSd5pxKJWIcWYmfEvZ56fYTIFjAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAxOTcvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMTk3L3RY a25lYWNTaVZpSEZtSm54TDJlZW4yRXlCWS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAYsAMA0GCSqGSIb3 DQEBCwUAA4IBAQBSyiiTEjXxfEWafOz4KFY/85t9JX41g7ACwsbuPSDi9iquHBtq 6nwlbGw2atpsaZaY1beS/4/Hef1T7dRxT0Ynfg/ePQaGlVOhMi/lvptfLs4Ivi2d kq6g1q39xHUyq8/XH0aQLrIqUoXZVjWeQpMZ2ZnaKCdFJFWJmhABIcZzYHeV44U9 71Re3rEMOrj0+eFSUsuuhmgb4AcdrG5nvyxjk7tXcR+pGlI+HXwQVLXKCwLE/FhW jtQZqQYJVDzRzXWQ0lWYGBNWv/sPO51X8aYTUnxntiOsOZyBoUDm86WeaXvuOPIB q1kpAJhfuaVkA3nXSbcvGw1oT0uatw2q2AyC -----END CERTIFICATE-----Generated at Thu Mar 26 09:54:12 2026 by rpki-client