$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/tXkneacSiViHFmJnxL2een2EyBY.cer File: tXkneacSiViHFmJnxL2een2EyBY.cer (raw, json) Hash identifier: Jrgd453PE1IVlcQ4OSvh9wr+usU9Wj6TdQ3Yg03Y6Lk= Subject key identifier: B5:79:27:79:A7:12:89:58:87:16:62:67:C4:BD:9E:7A:7D:84:C8:16 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 5974 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30197/tXkneacSiViHFmJnxL2een2EyBY.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30197/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Mon 15 Sep 2025 01:41:12 +0000 Certificate not after: Tue 15 Sep 2026 01:30:02 +0000 Subordinate resources: IP: 2401:8b00::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Oct 2025 14:20:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22900 (0x5974) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Sep 15 01:41:12 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=B5792779A712895887166267C4BD9E7A7D84C816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b8:ce:7f:14:f8:86:35:d3:e8:21:70:df:79: fa:e0:94:34:49:a4:1b:ed:79:f1:6a:54:09:ed:fa: d0:8b:72:c2:98:d9:bd:92:80:8e:f3:43:7f:f5:5f: cb:69:26:0f:35:35:f1:1f:37:bd:37:1d:ec:09:9f: 66:79:25:37:da:d5:1e:a4:14:70:01:e6:c1:21:e7: 9b:af:ca:29:67:25:1a:ab:d1:aa:43:5b:61:54:98: f6:74:ed:cf:47:82:d8:06:50:4c:27:55:8b:6a:7b: 66:9b:06:31:5c:a7:b1:2b:5b:b3:c1:df:57:69:b3: bf:99:91:ae:e6:b7:a7:a3:31:17:28:79:22:b0:16: f8:3f:87:6e:16:c2:3f:e8:0d:99:86:90:5e:4c:54: 24:a9:5e:f2:e6:40:bb:e6:5f:fb:3b:cd:fd:9e:2a: 4c:42:3c:11:72:bc:91:42:f7:7f:a6:b6:4f:49:d7: 3d:24:ab:ee:2b:6c:c0:01:22:bd:9e:a1:80:4b:23: 79:08:27:36:45:6c:f7:2c:5a:a6:2f:73:cf:21:bf: d2:5e:4f:c1:3d:01:c1:6a:7c:bb:77:34:73:46:b5: 90:31:54:44:39:8b:8b:f0:3d:1d:60:80:1f:e5:31: 9f:7c:38:d4:78:0f:08:e4:c4:11:08:ca:6e:2f:ce: 8b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:79:27:79:A7:12:89:58:87:16:62:67:C4:BD:9E:7A:7D:84:C8:16 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30197/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30197/tXkneacSiViHFmJnxL2een2EyBY.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:8b00::/32 Signature Algorithm: sha256WithRSAEncryption 11:23:fa:b6:e2:80:22:a5:b8:b1:7d:07:f2:6c:40:11:53:97: 16:07:3e:33:5a:f9:2a:ee:c0:35:b3:35:9a:98:35:21:fe:22: 41:5b:6b:11:35:76:ce:95:89:ca:a9:79:d6:ad:1d:4f:f1:e2: 30:18:c5:2d:73:01:92:ab:74:e9:cf:0f:ea:1f:90:77:01:e0: b0:df:21:b3:63:03:e1:33:17:a5:b7:4c:c0:4b:02:12:b4:9e: cb:08:f0:b4:ca:b7:03:97:2e:f1:88:cc:e0:9d:3f:c8:36:11: f3:0c:40:4c:ce:80:f5:f9:a8:59:cb:6f:fe:e3:20:ce:21:f8: 63:d6:e6:3c:f7:7d:04:2c:69:a9:3b:d0:28:49:36:ac:fa:c6: 36:68:f5:40:65:3e:b2:9c:79:52:55:7c:00:29:f1:3e:94:2a: 57:1e:ca:dd:58:99:27:26:3a:40:a2:de:9a:ac:fb:2b:da:19: 2f:5f:07:78:35:b1:7d:c2:8a:de:8e:16:ee:52:e1:f9:e0:1c: c9:bb:68:30:0c:67:ac:0e:83:54:29:bb:37:44:c6:6d:21:fd: 8f:0b:ff:a8:9d:d8:e1:20:25:32:ec:06:65:f5:9a:fd:29:f3: e1:f6:ef:57:e4:8d:b0:de:f6:07:f6:ad:9f:e6:4c:5d:c9:c2: 5d:a2:b0:4b -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICWXQwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDkxNTAxNDExMloXDTI2MDkxNTAxMzAwMlowMzEx MC8GA1UEAxMoQjU3OTI3NzlBNzEyODk1ODg3MTY2MjY3QzRCRDlFN0E3RDg0Qzgx NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMC4zn8U+IY10+ghcN95 +uCUNEmkG+158WpUCe360ItywpjZvZKAjvNDf/Vfy2kmDzU18R83vTcd7AmfZnkl N9rVHqQUcAHmwSHnm6/KKWclGqvRqkNbYVSY9nTtz0eC2AZQTCdVi2p7ZpsGMVyn sStbs8HfV2mzv5mRrua3p6MxFyh5IrAW+D+HbhbCP+gNmYaQXkxUJKle8uZAu+Zf +zvN/Z4qTEI8EXK8kUL3f6a2T0nXPSSr7itswAEivZ6hgEsjeQgnNkVs9yxapi9z zyG/0l5PwT0BwWp8u3c0c0a1kDFURDmLi/A9HWCAH+Uxn3w41HgPCOTEEQjKbi/O i9ECAwEAAaOCAowwggKIMB0GA1UdDgQWBBS1eSd5pxKJWIcWYmfEvZ56fYTIFjAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAxOTcvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMTk3L3RY a25lYWNTaVZpSEZtSm54TDJlZW4yRXlCWS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAYsAMA0GCSqGSIb3 DQEBCwUAA4IBAQARI/q24oAipbixfQfybEARU5cWBz4zWvkq7sA1szWamDUh/iJB W2sRNXbOlYnKqXnWrR1P8eIwGMUtcwGSq3Tpzw/qH5B3AeCw3yGzYwPhMxelt0zA SwIStJ7LCPC0yrcDly7xiMzgnT/INhHzDEBMzoD1+ahZy2/+4yDOIfhj1uY8930E LGmpO9AoSTas+sY2aPVAZT6ynHlSVXwAKfE+lCpXHsrdWJknJjpAot6arPsr2hkv Xwd4NbF9worejhbuUuH54BzJu2gwDGesDoNUKbs3RMZtIf2PC/+ondjhICUy7AZl 9Zr9KfPh9u9X5I2w3vYH9q2f5kxdycJdorBL -----END CERTIFICATE-----Generated at Wed Oct 8 15:41:27 2025 by rpki-client