$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/0_4nFVMUwUjdhbciP6DR-P0rJng.cer File: 0_4nFVMUwUjdhbciP6DR-P0rJng.cer (raw, json) Hash identifier: 5xDx2i0dp9BrW5IV/EIDbeIMLfRH5Z4+nbgcA93ffis= Subject key identifier: D3:FE:27:15:53:14:C1:48:DD:85:B7:22:3F:A0:D1:F8:FD:2B:26:78 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 59D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30136/0_4nFVMUwUjdhbciP6DR-P0rJng.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30136/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Mon 15 Sep 2025 01:43:59 +0000 Certificate not after: Tue 15 Sep 2026 01:30:02 +0000 Subordinate resources: IP: 2402:5a00::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Oct 2025 14:20:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22999 (0x59d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Sep 15 01:43:59 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=D3FE27155314C148DD85B7223FA0D1F8FD2B2678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d0:92:71:ff:81:a2:fa:cf:78:b3:00:06:c9: 57:60:2d:c3:c7:5f:67:ff:e2:7c:51:23:ab:6e:53: f1:93:93:3b:19:7d:3a:93:97:4f:5f:00:9c:c1:73: d8:ef:f1:3f:a3:6a:5b:98:3f:4a:34:40:58:40:b6: 78:90:b3:d2:ee:d7:e8:b5:af:78:f5:0a:d9:17:60: 8f:11:32:b7:19:95:b1:32:00:29:80:de:a3:92:bb: 8c:25:21:de:de:f8:56:d7:a3:80:3f:01:dc:78:de: 51:2b:ff:f3:8c:99:08:eb:cc:30:61:db:94:2d:5c: d7:c0:9d:6e:eb:7b:81:ec:ee:1e:f2:32:99:0a:79: 1e:f1:f1:13:fe:9b:1f:14:76:ea:49:c3:8e:3a:27: bc:9e:99:24:32:44:04:23:86:0b:59:98:a9:09:32: a1:a8:34:f3:a8:a2:fd:c2:f2:b3:6c:7e:92:aa:e0: 7c:0f:d9:93:58:f0:7e:63:7a:f3:4f:05:de:df:d4: d6:c4:fa:ce:a9:89:a6:3d:da:a7:8d:3b:3e:81:da: 5c:33:7b:3d:df:12:a2:42:8b:4b:f0:ce:a8:e7:28: 0a:db:79:56:7e:72:18:dd:45:23:85:0b:34:8a:30: b1:ac:6e:39:04:d4:ec:0d:b2:4d:b0:5d:d8:68:a8: a1:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:FE:27:15:53:14:C1:48:DD:85:B7:22:3F:A0:D1:F8:FD:2B:26:78 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30136/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30136/0_4nFVMUwUjdhbciP6DR-P0rJng.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:5a00::/32 Signature Algorithm: sha256WithRSAEncryption 9b:a9:73:86:19:f5:62:d1:fe:a0:d1:30:be:a8:73:59:05:3e: 88:e3:bb:2d:15:19:58:c4:6b:d8:74:f9:95:eb:92:86:7e:70: e7:46:df:ad:b2:43:0d:cb:fd:2a:22:f5:71:49:e5:a3:12:fa: 14:8b:b5:ba:39:0e:4e:5d:2f:54:d1:fc:63:91:b3:73:f1:2e: f7:d9:df:41:45:e1:79:e1:18:72:e5:47:62:2a:36:ba:c5:48: 4a:d3:ca:f7:36:6e:f3:1e:cc:a4:f9:41:fd:dc:31:8e:4c:72: a5:97:00:52:3f:c9:ae:ba:f4:a1:46:85:be:6d:92:8a:af:f7: 51:a2:fd:05:47:b6:08:d6:5e:95:7a:40:4c:a8:e2:ce:74:b4: b9:a0:58:a9:70:6d:ff:0b:0b:b1:65:f6:fa:17:bd:1a:c5:e3: a0:d0:62:99:3c:22:61:50:f5:ad:93:7b:41:68:9f:20:99:8a: 0e:3f:38:44:a8:a5:54:0c:63:e4:1c:53:45:40:13:5e:ea:6a: 67:de:97:58:67:b8:8e:58:06:d3:75:a9:6e:37:4c:70:f0:2f: 0c:bf:8d:cd:fe:a2:c1:3c:91:e8:54:fc:19:2f:3e:57:f0:a9: 5a:5b:6a:1b:b7:d0:df:28:5e:91:29:17:c8:cd:7a:47:4f:64: 1f:86:9e:3e -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICWdcwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDkxNTAxNDM1OVoXDTI2MDkxNTAxMzAwMlowMzEx MC8GA1UEAxMoRDNGRTI3MTU1MzE0QzE0OEREODVCNzIyM0ZBMEQxRjhGRDJCMjY3 ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKjQknH/gaL6z3izAAbJ V2Atw8dfZ//ifFEjq25T8ZOTOxl9OpOXT18AnMFz2O/xP6NqW5g/SjRAWEC2eJCz 0u7X6LWvePUK2RdgjxEytxmVsTIAKYDeo5K7jCUh3t74VtejgD8B3HjeUSv/84yZ COvMMGHblC1c18Cdbut7gezuHvIymQp5HvHxE/6bHxR26knDjjonvJ6ZJDJEBCOG C1mYqQkyoag086ii/cLys2x+kqrgfA/Zk1jwfmN6808F3t/U1sT6zqmJpj3ap407 PoHaXDN7Pd8SokKLS/DOqOcoCtt5Vn5yGN1FI4ULNIowsaxuOQTU7A2yTbBd2Gio oacCAwEAAaOCAowwggKIMB0GA1UdDgQWBBTT/icVUxTBSN2FtyI/oNH4/SsmeDAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAxMzYvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMTM2LzBf NG5GVk1Vd1VqZGhiY2lQNkRSLVAwckpuZy5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAloAMA0GCSqGSIb3 DQEBCwUAA4IBAQCbqXOGGfVi0f6g0TC+qHNZBT6I47stFRlYxGvYdPmV65KGfnDn Rt+tskMNy/0qIvVxSeWjEvoUi7W6OQ5OXS9U0fxjkbNz8S732d9BReF54Rhy5Udi Kja6xUhK08r3Nm7zHsyk+UH93DGOTHKllwBSP8muuvShRoW+bZKKr/dRov0FR7YI 1l6VekBMqOLOdLS5oFipcG3/CwuxZfb6F70axeOg0GKZPCJhUPWtk3tBaJ8gmYoO PzhEqKVUDGPkHFNFQBNe6mpn3pdYZ7iOWAbTdaluN0xw8C8Mv43N/qLBPJHoVPwZ Lz5X8KlaW2obt9DfKF6RKRfIzXpHT2Qfhp4+ -----END CERTIFICATE-----Generated at Wed Oct 8 15:41:47 2025 by rpki-client