$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1IEUv0koVysekvJxADxuDy3IfkY.cer File: 1IEUv0koVysekvJxADxuDy3IfkY.cer (raw, json) Hash identifier: UlVw5ZF7M32L0U01fvS/8pO5eB3VbEatt6n7qktO/Pw= Subject key identifier: D4:81:14:BF:49:28:57:2B:1E:92:F2:71:00:3C:6E:0F:2D:C8:7E:46 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 6BF2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30274/1IEUv0koVysekvJxADxuDy3IfkY.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30274/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Mon 15 Jun 2026 01:42:45 +0000 Certificate not after: Tue 15 Jun 2027 01:30:02 +0000 Subordinate resources: IP: 2402:3880::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Jul 2026 09:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27634 (0x6bf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Jun 15 01:42:45 2026 GMT Not After : Jun 15 01:30:02 2027 GMT Subject: CN=D48114BF4928572B1E92F271003C6E0F2DC87E46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b2:ed:0d:4e:77:94:cc:e1:5e:44:a7:a6:20: 59:64:b5:d4:15:e5:b8:39:0b:06:8f:62:8f:2b:31: 4f:70:b6:4c:4b:50:c3:5f:e2:d7:2f:98:0c:22:88: e5:0d:a0:14:63:9c:a8:54:90:d3:7b:2d:22:5f:cd: 12:ae:7d:74:73:a5:b5:c9:1f:22:84:5c:98:4f:03: 81:2b:53:2a:c7:e9:5c:26:c4:62:f3:3a:ef:ea:57: 8c:06:ae:af:c6:59:9d:fc:fa:89:10:14:bf:7c:e8: d4:e2:d3:5d:e9:d1:9d:c4:25:d7:b3:4f:27:b6:d0: 5b:bf:32:7d:0f:f8:2e:3c:59:ae:4e:97:1f:d9:fa: 89:d8:d4:64:cc:37:c0:f7:d9:69:b6:ff:df:c7:19: 6b:30:ee:d1:b8:31:e4:e1:d9:f3:e6:74:47:14:2e: 04:91:b5:2b:91:14:e0:11:3f:6a:10:fe:13:30:db: f8:53:bd:5c:44:04:d1:28:f5:d3:4d:7b:cc:a8:75: 62:3a:a0:a2:26:60:06:1c:75:b2:3b:3a:90:e5:8f: 7b:20:56:a5:d6:69:3f:2b:6a:02:49:bc:7f:84:2b: d7:28:c3:dc:c3:93:c5:3e:6a:97:e9:ef:15:16:74: 6d:fa:55:7e:ac:ae:59:ae:5e:ca:12:b4:4f:bf:8f: a7:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:81:14:BF:49:28:57:2B:1E:92:F2:71:00:3C:6E:0F:2D:C8:7E:46 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30274/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30274/1IEUv0koVysekvJxADxuDy3IfkY.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:3880::/32 Signature Algorithm: sha256WithRSAEncryption 00:1c:70:7d:a8:48:e6:7e:88:d4:93:6e:d0:0d:27:e8:fa:c4: 92:7d:9d:26:4a:c6:cc:1c:c5:c1:47:25:31:5f:b8:f7:bf:93: 42:77:36:2c:4e:b1:33:c7:b2:d0:8d:6f:db:a8:93:8c:03:f3: ab:6a:9e:eb:01:83:ef:37:78:43:56:5e:50:72:40:ed:9e:2a: 6f:bf:28:2f:3b:77:62:2a:0d:a0:29:ca:3b:72:61:a1:08:d5: f8:9c:01:b1:20:39:d6:7b:47:03:01:95:bf:5f:bf:68:11:cb: 2e:e7:ec:97:e5:ac:14:d9:fe:48:dd:70:19:c2:ae:22:33:87: e4:48:36:bb:b3:8a:d8:c4:87:42:82:90:39:ea:7f:ae:74:2e: 68:ba:50:63:39:56:c8:58:2f:9a:1b:33:cd:ee:24:7f:4b:3f: 99:8f:7c:a7:bf:ec:cc:5b:7b:43:71:bc:d7:a8:d2:b7:80:80: 88:c1:fb:b2:ab:fd:e4:71:e9:05:64:55:10:7c:86:49:6f:da: 0f:03:6b:2f:a4:96:ed:5d:1e:bd:9a:7d:7d:6f:8b:ae:88:5a: e7:b0:e2:75:ab:7e:40:0c:8e:6c:9d:a1:58:e2:db:ec:07:d8: 3d:db:96:3f:ff:16:64:d1:4b:0c:dc:39:9b:a0:73:53:63:af: 10:a4:f8:43 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICa/IwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MDYxNTAxNDI0NVoXDTI3MDYxNTAxMzAwMlowMzEx MC8GA1UEAxMoRDQ4MTE0QkY0OTI4NTcyQjFFOTJGMjcxMDAzQzZFMEYyREM4N0U0 NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMmy7Q1Od5TM4V5Ep6Yg WWS11BXluDkLBo9ijysxT3C2TEtQw1/i1y+YDCKI5Q2gFGOcqFSQ03stIl/NEq59 dHOltckfIoRcmE8DgStTKsfpXCbEYvM67+pXjAaur8ZZnfz6iRAUv3zo1OLTXenR ncQl17NPJ7bQW78yfQ/4LjxZrk6XH9n6idjUZMw3wPfZabb/38cZazDu0bgx5OHZ 8+Z0RxQuBJG1K5EU4BE/ahD+EzDb+FO9XEQE0Sj10017zKh1YjqgoiZgBhx1sjs6 kOWPeyBWpdZpPytqAkm8f4Qr1yjD3MOTxT5ql+nvFRZ0bfpVfqyuWa5eyhK0T7+P p5kCAwEAAaOCAowwggKIMB0GA1UdDgQWBBTUgRS/SShXKx6S8nEAPG4PLch+RjAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAyNzQvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMjc0LzFJ RVV2MGtvVnlzZWt2SnhBRHh1RHkzSWZrWS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAjiAMA0GCSqGSIb3 DQEBCwUAA4IBAQAAHHB9qEjmfojUk27QDSfo+sSSfZ0mSsbMHMXBRyUxX7j3v5NC dzYsTrEzx7LQjW/bqJOMA/Orap7rAYPvN3hDVl5QckDtnipvvygvO3diKg2gKco7 cmGhCNX4nAGxIDnWe0cDAZW/X79oEcsu5+yX5awU2f5I3XAZwq4iM4fkSDa7s4rY xIdCgpA56n+udC5oulBjOVbIWC+aGzPN7iR/Sz+Zj3ynv+zMW3tDcbzXqNK3gICI wfuyq/3kcekFZFUQfIZJb9oPA2svpJbtXR69mn19b4uuiFrnsOJ1q35ADI5snaFY 4tvsB9g925Y//xZk0UsM3DmboHNTY68QpPhD -----END CERTIFICATE-----Generated at Tue Jul 7 11:47:36 2026 by rpki-client