$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/3HrOQbaPtcJuyhQ1XvLXS-Prz8U.cer File: 3HrOQbaPtcJuyhQ1XvLXS-Prz8U.cer (raw, json) Hash identifier: a0WkhC6/0Pu0KqBqrTXxxRA3Ijg23XbIU2DfMkxbo/w= Subject key identifier: DC:7A:CE:41:B6:8F:B5:C2:6E:CA:14:35:5E:F2:D7:4B:E3:EB:CF:C5 Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 Certificate issuer: /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Certificate serial: 1775 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5750/3HrOQbaPtcJuyhQ1XvLXS-Prz8U.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5750/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sat 15 Aug 2026 01:34:20 +0000 Certificate not after: Sun 15 Aug 2027 01:30:02 +0000 Subordinate resources: IP: 138.252.25.0/24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 06:44:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6005 (0x1775) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Validity Not Before: Aug 15 01:34:20 2026 GMT Not After : Aug 15 01:30:02 2027 GMT Subject: CN=DC7ACE41B68FB5C26ECA14355EF2D74BE3EBCFC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b0:73:2f:bd:2e:ea:59:9d:5b:be:9f:fb:e5: e4:1a:55:04:73:a3:53:0e:86:b2:fd:17:63:c6:9e: dd:46:aa:ca:5a:9b:f1:3c:ff:7e:89:95:dd:78:1e: d0:74:9e:d8:08:5d:e6:2a:63:66:99:40:48:7b:24: a1:d1:1f:bf:6e:37:b5:bb:ce:4c:b8:ab:a0:02:ef: 15:cb:ea:1a:b2:0a:22:33:59:8c:c4:dc:36:1d:38: 8c:35:cf:60:9d:22:a0:96:63:15:2f:d8:74:08:9c: 8a:45:8b:d4:33:0c:e5:70:68:82:c6:70:55:ba:f2: dd:a7:14:6c:20:d1:e4:f5:e5:c2:6e:14:2f:76:78: 64:db:b3:a2:11:6a:6c:e0:fc:42:d7:08:d0:0c:e6: c8:68:2e:72:2f:a9:16:8d:2c:c2:e5:e9:2b:6c:fb: 7f:bd:0c:3b:ce:15:94:bf:65:8f:41:87:b4:4c:f5: ce:45:b9:c4:6f:6a:b5:0f:51:6a:8d:60:84:bf:3f: d1:36:a1:97:ad:ea:fe:4a:74:45:08:8c:eb:99:08: 21:d5:d4:0b:1b:4b:b1:d6:6b:67:41:1c:1e:a0:cf: 01:cf:af:8f:1b:9a:95:64:a7:16:b8:97:f3:9c:e5: 92:fe:2a:73:13:19:80:c1:c7:4c:7f:88:b1:74:cb: 93:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:7A:CE:41:B6:8F:B5:C2:6E:CA:14:35:5E:F2:D7:4B:E3:EB:CF:C5 X509v3 Authority Key Identifier: keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5750/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5750/3HrOQbaPtcJuyhQ1XvLXS-Prz8U.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.25.0/24 Signature Algorithm: sha256WithRSAEncryption 53:29:70:92:51:fd:a9:4b:97:9c:4d:a4:76:eb:f6:73:0c:1f: d1:94:fe:25:f5:10:e9:23:34:33:fe:1b:cb:52:da:13:7c:5d: c1:ce:8b:1e:1e:4e:ee:b9:6c:e2:4d:38:24:0c:06:2b:45:0e: c1:39:9a:d2:74:e5:e1:55:ed:7b:f5:14:3f:99:ed:d6:2a:fc: 00:4b:64:2f:12:c0:06:0f:6c:18:e8:a6:c9:34:83:dd:40:f6: 82:bd:3f:86:1e:be:65:ee:77:09:06:56:fc:f0:3c:67:3b:6c: f1:89:15:d1:94:ac:fe:f1:ff:aa:8f:93:30:3f:bb:37:f8:11: 11:23:a7:04:9f:c5:49:aa:5b:dd:66:fc:e3:00:42:db:14:80: f8:08:62:38:3f:8c:d7:77:85:f4:44:38:f8:31:2d:ac:00:dd: 9f:b7:8e:d8:e9:5d:38:44:08:3d:c1:b5:19:0c:65:f0:a3:34: 04:c6:25:de:a8:26:bd:ff:7b:ac:c2:83:e7:57:7a:e3:51:52: bd:d6:25:f7:1d:68:1c:f3:7c:6b:1c:33:76:93:fa:26:3c:75: 53:cc:0e:31:9b:55:3b:c5:e7:0e:bc:a6:ba:3e:4f:11:4f:9e: 68:e2:84:65:24:96:ca:d1:10:34:68:c3:5b:f9:53:70:a7:87: 0d:61:b0:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF3UwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyg2RjY4M0VBRTM5QTE3MzhBRTZDOTNGREYwNDFG MTE0OEU2NTM0REYyMB4XDTI2MDgxNTAxMzQyMFoXDTI3MDgxNTAxMzAwMlowMzEx MC8GA1UEAxMoREM3QUNFNDFCNjhGQjVDMjZFQ0ExNDM1NUVGMkQ3NEJFM0VCQ0ZD NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANywcy+9LupZnVu+n/vl 5BpVBHOjUw6Gsv0XY8ae3Uaqylqb8Tz/fomV3Xge0HSe2Ahd5ipjZplASHskodEf v243tbvOTLiroALvFcvqGrIKIjNZjMTcNh04jDXPYJ0ioJZjFS/YdAicikWL1DMM 5XBogsZwVbry3acUbCDR5PXlwm4UL3Z4ZNuzohFqbOD8QtcI0AzmyGguci+pFo0s wuXpK2z7f70MO84VlL9lj0GHtEz1zkW5xG9qtQ9Rao1ghL8/0Tahl63q/kp0RQiM 65kIIdXUCxtLsdZrZ0EcHqDPAc+vjxualWSnFriX85zlkv4qcxMZgMHHTH+IsXTL kwkCAwEAAaOCAokwggKFMB0GA1UdDgQWBBTces5Bto+1wm7KFDVe8tdL4+vPxTAf BgNVHSMEGDAWgBRvaD6uOaFziubJP98EHxFI5lNN8jAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYjJnLXJqbWhjNHJteVRfZkJC OFJTT1pUVGZJLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFD ODgzN0M3MkZEMUZGMi9iMmctcmptaGM0cm15VF9mQkI4UlNPWlRUZkkuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAQYIKwYBBQUHAQsEgfQw gfEwQwYIKwYBBQUHMAWGN3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvNTc1MC8wYgYIKwYBBQUHMAqGVnJzeW5jOi8vcnBr aS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNTc1MC8zSHJP UWJhUHRjSnV5aFExWHZMWFMtUHJ6OFUubWZ0MEYGCCsGAQUFBzANhjpodHRwczov L3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24u eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAivwZMA0GCSqGSIb3DQEB CwUAA4IBAQBTKXCSUf2pS5ecTaR26/ZzDB/RlP4l9RDpIzQz/hvLUtoTfF3Bzose Hk7uuWziTTgkDAYrRQ7BOZrSdOXhVe179RQ/me3WKvwAS2QvEsAGD2wY6KbJNIPd QPaCvT+GHr5l7ncJBlb88DxnO2zxiRXRlKz+8f+qj5MwP7s3+BERI6cEn8VJqlvd ZvzjAELbFID4CGI4P4zXd4X0RDj4MS2sAN2ft47Y6V04RAg9wbUZDGXwozQExiXe qCa9/3uswoPnV3rjUVK91iX3HWgc83xrHDN2k/omPHVTzA4xm1U7xecOvKa6Pk8R T55o4oRlJJbK0RA0aMNb+VNwp4cNYbAg -----END CERTIFICATE-----Generated at Fri Sep 11 11:55:58 2026 by rpki-client