$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/F3jmsXYyXAXzoXzX2qEn9gLOWgE.cer File: F3jmsXYyXAXzoXzX2qEn9gLOWgE.cer (raw, json) Hash identifier: k034roDkAggkUq64KBFnobyu9nCeB3Upeu0Le5F0+so= Subject key identifier: 17:78:E6:B1:76:32:5C:05:F3:A1:7C:D7:DA:A1:27:F6:02:CE:5A:01 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 597E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30022/F3jmsXYyXAXzoXzX2qEn9gLOWgE.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30022/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Mon 15 Sep 2025 01:41:27 +0000 Certificate not after: Tue 15 Sep 2026 01:30:02 +0000 Subordinate resources: IP: 2001:278::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Oct 2025 14:20:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22910 (0x597e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Sep 15 01:41:27 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=1778E6B176325C05F3A17CD7DAA127F602CE5A01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d7:a1:58:52:a9:f6:1a:20:f8:51:d9:69:a6: 8b:36:c4:2d:4d:f8:82:cb:2d:c3:4d:d0:ba:3e:86: db:aa:26:d1:d4:09:37:f0:04:ed:a0:7b:17:c2:0f: 5b:e2:a3:b4:9c:85:39:c5:d2:07:96:be:c3:6b:6a: 2b:7a:55:d8:ed:ee:cd:3b:56:14:42:71:c9:5b:5c: 78:44:c9:24:c9:20:b7:99:0e:39:35:da:9a:cd:41: c8:20:2b:7b:94:8f:ad:f9:f7:fd:dc:5b:de:ce:f3: 75:7f:dc:3c:d7:bd:79:48:6f:df:9c:6c:40:b7:8b: c7:dc:58:55:2c:1b:5b:31:bf:f4:d7:20:fc:47:be: 3a:3d:2b:d1:8e:10:ca:3f:ae:7d:36:cf:eb:8a:0b: 66:19:c8:bd:0e:9a:fd:75:e2:54:63:d6:09:53:02: b3:67:5e:ce:d9:9d:c8:bf:63:bc:28:4e:c6:28:fb: eb:b8:0a:df:a7:75:83:96:cd:bd:e0:ef:5d:29:2c: b9:65:6d:3c:b9:55:de:69:8b:7d:b3:e0:06:f1:0d: cf:45:1c:e4:c2:46:be:72:00:cf:ee:9c:a8:c7:fa: 9f:e4:0b:41:f0:50:38:05:21:3f:96:53:ff:bf:01: b5:9b:e9:71:70:9b:89:58:cc:a1:bc:3b:26:ab:d5: 5b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:78:E6:B1:76:32:5C:05:F3:A1:7C:D7:DA:A1:27:F6:02:CE:5A:01 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30022/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30022/F3jmsXYyXAXzoXzX2qEn9gLOWgE.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:278::/32 Signature Algorithm: sha256WithRSAEncryption 0f:1d:02:b7:2b:9b:ec:56:6e:db:ab:d4:28:34:b2:09:25:af: c1:b0:da:a2:0f:9e:c6:13:28:64:9f:4b:2d:19:1f:ae:26:bc: 93:43:91:04:eb:c5:af:98:19:f7:d2:8a:af:97:e8:e1:a7:3a: 2c:dd:f9:96:6a:2e:b7:5c:a3:ec:fe:21:f2:00:76:82:ab:0d: ff:e2:5a:37:14:64:1c:fa:70:02:30:f6:f1:4e:d9:65:df:d0: ca:a4:d6:5f:ff:e5:58:3b:ba:35:33:ef:55:ad:2c:f9:1e:7e: 1d:f8:90:6d:b5:bf:cb:46:44:7c:84:de:1f:84:50:5d:bb:17: 0a:e0:26:db:f8:f5:67:ef:ae:5c:f5:80:5a:e9:18:fd:bb:a8: 55:4e:63:32:78:3f:e7:aa:e8:9f:86:8e:97:98:b1:b8:01:62: 57:cc:10:21:8c:07:a9:10:10:21:23:bb:0e:25:77:83:4b:de: 24:6a:13:b2:20:76:6f:7c:49:ff:e7:2d:7b:af:4c:06:3d:69: e3:fb:3d:de:c7:e8:6d:0a:0a:4a:91:cc:91:c5:02:35:cb:d8: ed:cc:7d:31:ea:90:29:63:32:1f:32:81:ac:bb:e2:9a:65:f2: db:73:4c:d5:17:7a:60:3e:ad:3e:4a:4e:8c:8e:98:a7:06:2b: 9a:37:eb:6b -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICWX4wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDkxNTAxNDEyN1oXDTI2MDkxNTAxMzAwMlowMzEx MC8GA1UEAxMoMTc3OEU2QjE3NjMyNUMwNUYzQTE3Q0Q3REFBMTI3RjYwMkNFNUEw MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN3XoVhSqfYaIPhR2Wmm izbELU34gsstw03Quj6G26om0dQJN/AE7aB7F8IPW+KjtJyFOcXSB5a+w2tqK3pV 2O3uzTtWFEJxyVtceETJJMkgt5kOOTXams1ByCAre5SPrfn3/dxb3s7zdX/cPNe9 eUhv35xsQLeLx9xYVSwbWzG/9Ncg/Ee+Oj0r0Y4Qyj+ufTbP64oLZhnIvQ6a/XXi VGPWCVMCs2deztmdyL9jvChOxij767gK36d1g5bNveDvXSksuWVtPLlV3mmLfbPg BvENz0Uc5MJGvnIAz+6cqMf6n+QLQfBQOAUhP5ZT/78BtZvpcXCbiVjMobw7JqvV W/cCAwEAAaOCAowwggKIMB0GA1UdDgQWBBQXeOaxdjJcBfOhfNfaoSf2As5aATAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAwMjIvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMDIyL0Yz am1zWFl5WEFYem9YelgycUVuOWdMT1dnRS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAgAQJ4MA0GCSqGSIb3 DQEBCwUAA4IBAQAPHQK3K5vsVm7bq9QoNLIJJa/BsNqiD57GEyhkn0stGR+uJryT Q5EE68WvmBn30oqvl+jhpzos3fmWai63XKPs/iHyAHaCqw3/4lo3FGQc+nACMPbx Ttll39DKpNZf/+VYO7o1M+9VrSz5Hn4d+JBttb/LRkR8hN4fhFBduxcK4Cbb+PVn 765c9YBa6Rj9u6hVTmMyeD/nquifho6XmLG4AWJXzBAhjAepEBAhI7sOJXeDS94k ahOyIHZvfEn/5y17r0wGPWnj+z3ex+htCgpKkcyRxQI1y9jtzH0x6pApYzIfMoGs u+KaZfLbc0zVF3pgPq0+Sk6MjpinBiuaN+tr -----END CERTIFICATE-----Generated at Wed Oct 8 15:41:46 2025 by rpki-client