$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/_OvnvRuI6xUg2pjVaS5nPgpN0q8.cer File: _OvnvRuI6xUg2pjVaS5nPgpN0q8.cer (raw, json) Hash identifier: SPj2jU1E7IktwbBmh4WKqKUfWuCPjxxA4ZT5RbAeDzs= Subject key identifier: FC:EB:E7:BD:1B:88:EB:15:20:DA:98:D5:69:2E:67:3E:0A:4D:D2:AF Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 660B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/514/_OvnvRuI6xUg2pjVaS5nPgpN0q8.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/514/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Thu 02 Apr 2026 09:08:59 +0000 Certificate not after: Fri 02 Apr 2027 09:01:56 +0000 Subordinate resources: IP: 27.253.128.0/17 IP: 223.25.128.0/18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 13:48:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26123 (0x660b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Apr 2 09:08:59 2026 GMT Not After : Apr 2 09:01:56 2027 GMT Subject: CN=FCEBE7BD1B88EB1520DA98D5692E673E0A4DD2AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:08:57:5d:46:0c:ff:35:e3:24:3b:77:6a:37: d4:ad:b9:88:d9:a5:87:a1:6f:01:7e:ea:22:69:09: d3:56:65:48:12:64:84:ea:f5:6a:b3:fb:00:46:14: b8:cb:3a:2d:89:35:85:54:14:bd:ad:fc:00:9c:9b: bb:e0:ed:a7:e7:f6:5d:ca:bc:a4:00:a8:3d:10:cf: 16:7e:e9:b4:c3:25:52:d2:02:78:72:57:c6:8e:66: 42:6e:2c:c5:e5:e3:05:cb:27:5d:fd:4b:90:5d:1a: 6d:8a:d2:c2:d8:2d:b9:ce:c8:e0:6f:95:c7:40:5d: 45:c0:9a:e4:50:9c:e4:f6:10:87:82:db:3f:00:16: ab:6a:dd:4e:4a:4e:2f:cf:24:d3:29:02:72:7f:94: 33:09:5b:d7:07:b3:34:08:da:11:37:35:a9:ff:9a: 15:9d:8b:80:74:d9:1d:81:7f:fd:fd:8d:61:1a:c1: 45:62:9c:7d:87:ff:54:c5:5a:0e:1a:39:9c:35:8b: ba:3f:d1:98:1f:d9:e0:c4:a2:6a:05:05:56:be:e8: cc:72:ac:a9:f7:90:72:db:b6:94:7f:68:ab:2c:80: a0:0f:d5:8c:8f:e5:62:8f:63:15:8d:17:13:d2:8e: 89:5c:7e:81:3e:5e:c2:c4:06:cc:d8:44:cb:3e:97: b0:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:EB:E7:BD:1B:88:EB:15:20:DA:98:D5:69:2E:67:3E:0A:4D:D2:AF X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/514/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/514/_OvnvRuI6xUg2pjVaS5nPgpN0q8.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.253.128.0/17 223.25.128.0/18 Signature Algorithm: sha256WithRSAEncryption 2d:7e:4c:8d:45:00:69:50:51:d5:c5:93:74:68:0a:b4:48:c1: a2:64:af:90:5b:82:90:e5:4e:e6:7a:f6:1e:e7:b4:3f:af:f2: 86:37:89:c0:00:fa:71:c5:08:98:d5:2c:91:fa:1b:30:48:2d: 7f:e2:fa:8a:32:5f:be:ea:b6:c2:d5:bd:35:9f:b8:ba:aa:91: 9d:86:e5:36:e3:77:ac:e7:6e:6a:c5:fe:12:d9:31:8c:00:1c: 66:e5:ff:59:fe:63:79:4c:22:b7:6b:6a:00:36:60:e5:30:ea: 18:ca:0e:bb:57:e9:e3:b5:a9:3f:a0:0f:ff:db:80:a5:76:d5: 64:d4:b6:85:f9:46:bd:57:65:94:03:af:50:1b:b5:7d:1d:99: 56:b2:3f:53:12:42:54:0c:54:8f:45:e9:b9:3c:a6:d5:d8:71: 8a:47:6d:88:9b:82:85:80:49:e3:b6:94:ea:dd:26:f7:6f:c4: ef:9a:68:c0:02:8c:8f:02:8d:f6:8a:dd:d5:9b:e5:7a:40:98: 59:33:34:00:d1:42:9f:ba:3a:5a:aa:df:f0:fa:d0:f7:b0:ea: b1:79:43:04:22:5c:d2:e3:25:2b:44:03:31:38:23:50:f9:61: 64:6d:62:f6:06:88:b8:0b:2f:ec:42:f8:2f:22:e3:a2:80:f3: a2:59:11:e6 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICZgswDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MDQwMjA5MDg1OVoXDTI3MDQwMjA5MDE1NlowMzEx MC8GA1UEAxMoRkNFQkU3QkQxQjg4RUIxNTIwREE5OEQ1NjkyRTY3M0UwQTRERDJB RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKcIV11GDP814yQ7d2o3 1K25iNmlh6FvAX7qImkJ01ZlSBJkhOr1arP7AEYUuMs6LYk1hVQUva38AJybu+Dt p+f2Xcq8pACoPRDPFn7ptMMlUtICeHJXxo5mQm4sxeXjBcsnXf1LkF0abYrSwtgt uc7I4G+Vx0BdRcCa5FCc5PYQh4LbPwAWq2rdTkpOL88k0ykCcn+UMwlb1wezNAja ETc1qf+aFZ2LgHTZHYF//f2NYRrBRWKcfYf/VMVaDho5nDWLuj/RmB/Z4MSiagUF Vr7ozHKsqfeQctu2lH9oqyyAoA/VjI/lYo9jFY0XE9KOiVx+gT5ewsQGzNhEyz6X sPcCAwEAAaOCAowwggKIMB0GA1UdDgQWBBT86+e9G4jrFSDamNVpLmc+Ck3SrzAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB 7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC81MTQvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzUxNC9fT3ZudlJ1 STZ4VWcycGpWYVM1blBncE4wcTgubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQHG/2AAwQG3xmAMA0GCSqGSIb3 DQEBCwUAA4IBAQAtfkyNRQBpUFHVxZN0aAq0SMGiZK+QW4KQ5U7mevYe57Q/r/KG N4nAAPpxxQiY1SyR+hswSC1/4vqKMl++6rbC1b01n7i6qpGdhuU243es525qxf4S 2TGMABxm5f9Z/mN5TCK3a2oANmDlMOoYyg67V+njtak/oA//24CldtVk1LaF+Ua9 V2WUA69QG7V9HZlWsj9TEkJUDFSPRem5PKbV2HGKR22Im4KFgEnjtpTq3Sb3b8Tv mmjAAoyPAo32it3Vm+V6QJhZMzQA0UKfujpaqt/w+tD3sOqxeUMEIlzS4yUrRAMx OCNQ+WFkbWL2Boi4Cy/sQvgvIuOigPOiWRHm -----END CERTIFICATE-----Generated at Tue Apr 7 16:34:58 2026 by rpki-client