$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6eA0KaKpYu8-CpcqJfVHp8wTO2w.cer File: 6eA0KaKpYu8-CpcqJfVHp8wTO2w.cer (raw, json) Hash identifier: L5duocvcAeqN6Pf13XbIotaDNKzppP1jcwiNbKt5yes= Subject key identifier: E9:E0:34:29:A2:A9:62:EF:3E:0A:97:2A:25:F5:47:A7:CC:13:3B:6C Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 660D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3412/6eA0KaKpYu8-CpcqJfVHp8wTO2w.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3412/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Mon 06 Apr 2026 09:26:46 +0000 Certificate not after: Tue 06 Apr 2027 09:19:49 +0000 Subordinate resources: IP: 202.17.220.0/23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 13:48:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26125 (0x660d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Apr 6 09:26:46 2026 GMT Not After : Apr 6 09:19:49 2027 GMT Subject: CN=E9E03429A2A962EF3E0A972A25F547A7CC133B6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5a:99:20:6a:ec:c4:84:26:91:b0:1e:13:68: 2c:50:8a:f3:b8:3d:96:4b:88:8c:d9:b1:13:9b:d0: 96:62:e7:e4:94:a4:00:28:e5:47:7c:e6:af:86:62: 0d:89:22:ed:ae:66:ce:49:67:d2:4f:ea:a1:e1:c0: 00:ce:5a:3f:13:24:2b:22:c1:24:d1:ee:b0:4f:c5: 5c:15:6d:d5:c0:c8:44:90:99:18:c9:86:63:90:4b: 0c:a8:35:19:ab:d0:39:e5:60:53:ff:bf:0b:e9:c7: e4:60:ae:3a:4c:fd:a3:93:d6:3e:df:c2:d0:8d:ad: ff:90:d8:b6:2c:b8:69:ba:9b:59:2d:64:fc:ac:7b: ca:5b:60:c8:be:f9:b0:d7:85:97:86:61:ea:75:32: e2:3e:ad:b5:ff:bc:18:1f:04:d9:de:d9:62:ec:e0: 1b:8d:81:b8:8e:e4:43:34:be:64:e2:01:8a:1c:27: 53:f1:aa:25:a1:71:52:56:a0:7a:80:ac:f0:c9:ce: 0a:38:ce:6f:a4:79:e4:42:fd:f6:96:2b:27:13:05: b5:a0:bd:8b:40:4b:5d:df:37:49:61:9e:f9:34:b0: 23:1f:2d:a5:44:ed:08:e6:7b:b2:17:2d:c8:bd:be: 19:2f:55:7b:71:ee:25:aa:a7:d1:e8:a9:b4:50:fe: d0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:E0:34:29:A2:A9:62:EF:3E:0A:97:2A:25:F5:47:A7:CC:13:3B:6C X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3412/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3412/6eA0KaKpYu8-CpcqJfVHp8wTO2w.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.17.220.0/23 Signature Algorithm: sha256WithRSAEncryption 1c:ec:d4:45:ef:46:96:97:4a:45:05:60:b2:15:9f:1c:34:d7: e8:35:ef:df:9c:41:6e:49:4f:71:9b:fd:bc:52:38:79:5f:22: 6d:1e:bc:c7:b0:e1:6c:d8:50:37:54:cc:12:44:b4:b8:08:12: d6:a3:a9:2c:e2:48:e7:3c:d3:21:5c:51:69:e8:49:6f:14:f8: d3:9d:64:13:91:b2:40:6f:2e:4e:9a:b6:57:e3:7b:8e:e3:8b: 64:44:3a:7a:a2:15:3e:d5:c1:3d:46:87:72:05:55:c1:fa:19: 6c:67:51:9c:51:83:45:c4:2a:2e:ef:48:34:9e:9a:3a:82:ef: e7:d9:23:09:f5:65:82:a9:46:8b:de:39:67:5d:9a:22:ab:1c: e6:ea:f1:2b:cf:43:16:ec:b0:bd:f9:5a:0f:9f:e4:d7:d0:47: 3f:65:e5:02:e9:23:28:6f:23:14:cd:04:38:6b:79:14:25:c8: 3f:1a:32:6a:c3:ea:77:47:28:1a:8e:16:6b:d5:0b:6c:77:b5: a0:57:fd:5c:c4:f7:19:70:68:1b:bf:64:75:60:e0:33:2b:f6: 2c:d9:ec:2f:45:9d:18:6a:27:29:82:72:00:82:85:92:fe:c1: 29:ad:c9:51:70:26:7c:20:c6:5c:a4:85:ae:86:b2:a3:6d:d3: 19:bb:2f:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICZg0wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MDQwNjA5MjY0NloXDTI3MDQwNjA5MTk0OVowMzEx MC8GA1UEAxMoRTlFMDM0MjlBMkE5NjJFRjNFMEE5NzJBMjVGNTQ3QTdDQzEzM0I2 QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ5amSBq7MSEJpGwHhNo LFCK87g9lkuIjNmxE5vQlmLn5JSkACjlR3zmr4ZiDYki7a5mzkln0k/qoeHAAM5a PxMkKyLBJNHusE/FXBVt1cDIRJCZGMmGY5BLDKg1GavQOeVgU/+/C+nH5GCuOkz9 o5PWPt/C0I2t/5DYtiy4abqbWS1k/Kx7yltgyL75sNeFl4Zh6nUy4j6ttf+8GB8E 2d7ZYuzgG42BuI7kQzS+ZOIBihwnU/GqJaFxUlageoCs8MnOCjjOb6R55EL99pYr JxMFtaC9i0BLXd83SWGe+TSwIx8tpUTtCOZ7shctyL2+GS9Ve3HuJaqn0eiptFD+ 0MUCAwEAAaOCAokwggKFMB0GA1UdDgQWBBTp4DQpoqli7z4Klyol9UenzBM7bDAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAQYIKwYBBQUHAQsEgfQw gfEwQwYIKwYBBQUHMAWGN3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzQxMi8wYgYIKwYBBQUHMAqGVnJzeW5jOi8vcnBr aS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMzQxMi82ZUEw S2FLcFl1OC1DcGNxSmZWSHA4d1RPMncubWZ0MEYGCCsGAQUFBzANhjpodHRwczov L3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24u eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQByhHcMA0GCSqGSIb3DQEB CwUAA4IBAQAc7NRF70aWl0pFBWCyFZ8cNNfoNe/fnEFuSU9xm/28Ujh5XyJtHrzH sOFs2FA3VMwSRLS4CBLWo6ks4kjnPNMhXFFp6ElvFPjTnWQTkbJAby5OmrZX43uO 44tkRDp6ohU+1cE9RodyBVXB+hlsZ1GcUYNFxCou70g0npo6gu/n2SMJ9WWCqUaL 3jlnXZoiqxzm6vErz0MW7LC9+VoPn+TX0Ec/ZeUC6SMobyMUzQQ4a3kUJcg/GjJq w+p3RygajhZr1Qtsd7WgV/1cxPcZcGgbv2R1YOAzK/Ys2ewvRZ0YaicpgnIAgoWS /sEprclRcCZ8IMZcpIWuhrKjbdMZuy9G -----END CERTIFICATE-----Generated at Tue Apr 7 16:35:03 2026 by rpki-client