$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/zV4jHr9Ex6QDmi946DS2zz1q-hQ.cer File: zV4jHr9Ex6QDmi946DS2zz1q-hQ.cer (raw, json) Hash identifier: 0hoUmO/bX/0ucoptah2wCFNEuwvrIco/nzRGl+Fxmso= Subject key identifier: CD:5E:23:1E:BF:44:C7:A4:03:9A:2F:78:E8:34:B6:CF:3D:6A:FA:14 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 6445 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/zV4jHr9Ex6QDmi946DS2zz1q-hQ.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sun 15 Mar 2026 01:32:40 +0000 Certificate not after: Mon 15 Mar 2027 01:30:02 +0000 Subordinate resources: IP: 202.55.136.0/22 IP: 202.73.64.0/19 IP: 202.233.0.0/18 IP: 210.166.192.0/20 IP: 223.223.164.0/22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 04:30:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25669 (0x6445) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Mar 15 01:32:40 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=CD5E231EBF44C7A4039A2F78E834B6CF3D6AFA14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1a:a6:2b:53:a0:36:ec:70:b0:06:00:88:1f: 04:99:37:8d:bf:03:45:e8:7d:50:33:c3:ca:6b:3a: b1:8a:39:e4:02:72:e6:d5:6a:53:bc:08:2b:eb:60: 74:e2:15:7e:0c:d5:6f:a9:0e:a8:d5:1e:83:75:30: 0f:db:04:56:6e:01:9e:50:15:63:28:40:5f:16:0e: e8:9d:69:a4:ea:37:56:fc:21:31:99:1e:ad:c5:4a: 48:15:8c:66:b9:4c:f8:e1:d5:2b:f9:c7:f2:24:58: dc:8e:22:33:b5:2d:43:62:44:62:bd:22:c8:94:ce: 0a:8c:1e:d5:21:5e:98:d1:3f:ae:b1:c8:12:99:ac: a3:0d:5b:d0:28:a4:f2:a1:c3:cf:de:a0:7c:8f:a5: f6:0b:f5:9c:6d:23:bd:38:87:60:a6:c8:67:27:ff: 1a:8c:74:6b:ba:c1:d6:8f:d4:7f:5c:c7:cf:bb:b4: 8d:de:3f:69:52:b2:51:2c:6c:fb:73:3f:13:90:2e: 05:67:50:6b:75:32:a0:a1:12:c3:6d:2e:5e:23:26: 19:f1:66:fa:f1:e0:f0:cc:63:4b:6c:ac:bd:b9:a4: 01:2a:32:49:ee:36:19:cd:30:14:d6:91:a3:fd:42: c1:1a:82:b0:a1:a1:77:6e:78:97:98:72:96:cf:01: e0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:5E:23:1E:BF:44:C7:A4:03:9A:2F:78:E8:34:B6:CF:3D:6A:FA:14 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/zV4jHr9Ex6QDmi946DS2zz1q-hQ.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.55.136.0/22 202.73.64.0/19 202.233.0.0/18 210.166.192.0/20 223.223.164.0/22 Signature Algorithm: sha256WithRSAEncryption 67:54:72:c8:05:f6:27:b0:39:4b:3d:58:40:4b:19:9b:23:53: ad:d1:c7:4f:73:09:b9:f7:85:63:aa:d5:1c:6d:dd:ed:af:a0: e3:b3:05:12:1d:71:70:06:3f:fb:7c:c6:20:c2:89:35:28:35: 4b:7d:e8:5e:c7:3a:7c:93:40:23:a0:a1:3b:5c:9e:2a:d1:1d: bd:1b:46:b5:a4:2a:1c:fb:f1:3a:44:51:eb:b9:2a:e1:f8:16: 03:1b:30:f2:b5:5f:c8:3f:49:8e:a3:f9:29:75:f1:3b:87:12: ef:be:3f:66:63:20:6b:53:73:ee:91:3e:39:b9:52:d0:58:1e: b1:f6:0d:91:c2:a3:3c:c0:dd:88:8c:17:56:4a:04:32:80:ad: 55:a3:53:49:8a:f9:1f:50:1a:31:ef:a9:10:0b:bb:00:38:ee: d5:dc:42:1e:2b:59:fd:c3:a6:6f:e5:b6:43:bc:43:14:12:37: 1b:e4:86:4f:d7:7c:fb:39:cd:28:09:6d:a1:dd:2f:80:5f:02: da:bf:8a:a0:e4:91:dc:0d:43:3d:7b:c9:34:6b:07:15:7c:12: df:0e:fd:23:2f:a5:67:26:34:11:71:25:95:3c:28:51:f4:a6: a7:87:05:0d:16:38:d9:a8:aa:6e:c5:da:e4:25:3b:3c:67:da: c0:d1:3c:90 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgICZEUwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MDMxNTAxMzI0MFoXDTI3MDMxNTAxMzAwMlowMzEx MC8GA1UEAxMoQ0Q1RTIzMUVCRjQ0QzdBNDAzOUEyRjc4RTgzNEI2Q0YzRDZBRkEx NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJgapitToDbscLAGAIgf BJk3jb8DReh9UDPDyms6sYo55AJy5tVqU7wIK+tgdOIVfgzVb6kOqNUeg3UwD9sE Vm4BnlAVYyhAXxYO6J1ppOo3VvwhMZkercVKSBWMZrlM+OHVK/nH8iRY3I4iM7Ut Q2JEYr0iyJTOCowe1SFemNE/rrHIEpmsow1b0Cik8qHDz96gfI+l9gv1nG0jvTiH YKbIZyf/Gox0a7rB1o/Uf1zHz7u0jd4/aVKyUSxs+3M/E5AuBWdQa3UyoKESw20u XiMmGfFm+vHg8MxjS2ysvbmkASoySe42Gc0wFNaRo/1CwRqCsKGhd254l5hyls8B 4G0CAwEAAaOCApwwggKYMB0GA1UdDgQWBBTNXiMev0THpAOaL3joNLbPPWr6FDAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH9BggrBgEFBQcBCwSB8DCB 7TBBBggrBgEFBQcwBYY1cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC81MS8wYAYIKwYBBQUHMAqGVHJzeW5jOi8vcnBraS1y ZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNTEvelY0akhyOUV4 NlFEbWk5NDZEUzJ6ejFxLWhRLm1mdDBGBggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtp LXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAvYXAvbm90aWZpY2F0aW9uLnhtbDA3 BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAso3iAMEBcpJQAMEBsrpAAMEBNKm wAMEAt/fpDANBgkqhkiG9w0BAQsFAAOCAQEAZ1RyyAX2J7A5Sz1YQEsZmyNTrdHH T3MJufeFY6rVHG3d7a+g47MFEh1xcAY/+3zGIMKJNSg1S33oXsc6fJNAI6ChO1ye KtEdvRtGtaQqHPvxOkRR67kq4fgWAxsw8rVfyD9JjqP5KXXxO4cS774/ZmMga1Nz 7pE+OblS0FgesfYNkcKjPMDdiIwXVkoEMoCtVaNTSYr5H1AaMe+pEAu7ADju1dxC HitZ/cOmb+W2Q7xDFBI3G+SGT9d8+znNKAltod0vgF8C2r+KoOSR3A1DPXvJNGsH FXwS3w79Iy+lZyY0EXEllTwoUfSmp4cFDRY42aiqbsXa5CU7PGfawNE8kA== -----END CERTIFICATE-----Generated at Thu Mar 26 06:53:43 2026 by rpki-client