$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/y6MvRLwy8eHhkv4sVHPA1yn4jE4.cer File: y6MvRLwy8eHhkv4sVHPA1yn4jE4.cer (raw, json) Hash identifier: pFzd3VJPjO9uuv9sfYJfEiDmIo1D1lsLR1kXwMRCQ3I= Subject key identifier: CB:A3:2F:44:BC:32:F1:E1:E1:92:FE:2C:54:73:C0:D7:29:F8:8C:4E Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 6420 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30450/y6MvRLwy8eHhkv4sVHPA1yn4jE4.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30450/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sun 15 Mar 2026 01:31:17 +0000 Certificate not after: Mon 15 Mar 2027 01:30:02 +0000 Subordinate resources: IP: 2402:2f60::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 05:36:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25632 (0x6420) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Mar 15 01:31:17 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=CBA32F44BC32F1E1E192FE2C5473C0D729F88C4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:de:01:43:19:a7:c6:9e:f7:a2:cd:57:41:1e: 6c:c2:a5:cc:08:82:c6:36:fd:60:e8:fe:d0:53:43: 1c:ea:ea:64:a4:36:69:27:5d:78:b2:ce:fc:94:24: c9:64:70:fc:00:92:5e:36:78:fe:5b:12:70:6d:ff: ad:df:ac:df:cc:0b:7d:58:0a:6f:3b:e8:01:52:1d: 0b:42:8c:4a:42:84:28:de:b6:28:8a:9d:84:06:88: 29:ee:9e:b6:e5:b4:62:e4:f2:53:35:30:8e:2a:84: aa:e5:6c:a3:0b:63:82:fa:67:c2:9a:3d:31:e0:61: f7:b8:63:d6:5c:c1:98:e1:33:ff:5a:23:13:c7:d1: 53:f6:fa:ff:df:68:76:72:cc:8f:9b:80:3b:a7:f5: 84:24:fc:76:d4:c4:4e:1c:fb:a7:5c:64:fe:6e:c9: 05:70:a6:33:9f:a9:61:ac:72:02:19:f8:4d:3c:0f: d0:5d:61:f4:43:c7:b4:c2:32:c9:55:69:0c:02:8e: f7:14:10:ad:9f:3f:c5:c7:6f:d6:46:08:76:63:a7: c4:72:8e:6a:c4:dc:c8:8b:5b:66:ae:21:ef:26:07: 3b:d5:e1:20:78:8d:5f:a9:25:3b:50:f1:89:4c:d4: c1:c7:a8:71:98:2e:ad:5c:a3:ad:93:6a:cd:96:90: 8c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:A3:2F:44:BC:32:F1:E1:E1:92:FE:2C:54:73:C0:D7:29:F8:8C:4E X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30450/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30450/y6MvRLwy8eHhkv4sVHPA1yn4jE4.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:2f60::/32 Signature Algorithm: sha256WithRSAEncryption 08:e7:8b:fe:d7:47:8b:9b:76:91:28:eb:e3:76:45:d8:27:71: c5:8a:bb:c5:e7:1b:95:03:72:45:5b:c5:e4:18:b4:de:d8:35: dc:ee:2d:53:51:e9:e0:26:32:61:5f:15:40:3b:6c:cd:41:ba: c5:20:c9:b2:14:cd:34:f7:1b:f2:d4:6d:30:5f:ac:ea:07:62: 53:19:d9:f0:06:7e:52:b3:f1:61:60:28:4d:68:61:e5:f6:3c: a9:78:4c:d0:1f:ae:fd:a3:fd:81:35:13:11:a0:95:f0:79:93: 35:69:f6:bb:f5:65:6e:34:65:7b:8d:13:45:93:55:f6:56:ad: 06:a2:21:83:e7:ce:b7:84:8d:cf:e3:3b:ab:c2:af:af:00:df: 0d:95:e3:b3:43:9d:dc:28:94:7f:d6:87:5d:c5:f3:5d:25:f3: ed:f9:f3:e0:4c:b9:a9:3a:9b:b1:2c:0e:55:7d:29:e0:80:cc: 00:bd:4d:15:a8:7a:fe:43:3a:38:a2:49:af:8e:99:65:54:09: 3b:7a:9a:84:3d:72:2b:e8:19:68:35:ce:41:7e:e3:fa:1f:b3: ec:27:34:13:1f:a7:c4:74:a1:8a:a2:73:82:c9:31:0a:9d:00: 95:b5:67:23:ae:62:87:c9:9f:a1:83:ba:07:08:81:ef:68:f7: 04:7a:b0:a9 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICZCAwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MDMxNTAxMzExN1oXDTI3MDMxNTAxMzAwMlowMzEx MC8GA1UEAxMoQ0JBMzJGNDRCQzMyRjFFMUUxOTJGRTJDNTQ3M0MwRDcyOUY4OEM0 RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ7eAUMZp8ae96LNV0Ee bMKlzAiCxjb9YOj+0FNDHOrqZKQ2aSddeLLO/JQkyWRw/ACSXjZ4/lsScG3/rd+s 38wLfVgKbzvoAVIdC0KMSkKEKN62KIqdhAaIKe6etuW0YuTyUzUwjiqEquVsowtj gvpnwpo9MeBh97hj1lzBmOEz/1ojE8fRU/b6/99odnLMj5uAO6f1hCT8dtTEThz7 p1xk/m7JBXCmM5+pYaxyAhn4TTwP0F1h9EPHtMIyyVVpDAKO9xQQrZ8/xcdv1kYI dmOnxHKOasTcyItbZq4h7yYHO9XhIHiNX6klO1DxiUzUwceocZgurVyjrZNqzZaQ jG8CAwEAAaOCAowwggKIMB0GA1UdDgQWBBTLoy9EvDLx4eGS/ixUc8DXKfiMTjAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzA0NTAvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwNDUwL3k2 TXZSTHd5OGVIaGt2NHNWSFBBMXluNGpFNC5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAi9gMA0GCSqGSIb3 DQEBCwUAA4IBAQAI54v+10eLm3aRKOvjdkXYJ3HFirvF5xuVA3JFW8XkGLTe2DXc 7i1TUengJjJhXxVAO2zNQbrFIMmyFM009xvy1G0wX6zqB2JTGdnwBn5Ss/FhYChN aGHl9jypeEzQH679o/2BNRMRoJXweZM1afa79WVuNGV7jRNFk1X2Vq0GoiGD5863 hI3P4zurwq+vAN8NleOzQ53cKJR/1oddxfNdJfPt+fPgTLmpOpuxLA5VfSnggMwA vU0VqHr+Qzo4okmvjpllVAk7epqEPXIr6BloNc5BfuP6H7PsJzQTH6fEdKGKonOC yTEKnQCVtWcjrmKHyZ+hg7oHCIHvaPcEerCp -----END CERTIFICATE-----Generated at Thu Mar 26 11:10:45 2026 by rpki-client