$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/4oKHAq-VJLLD1X4biwxkliVmlJw.cer File: 4oKHAq-VJLLD1X4biwxkliVmlJw.cer (raw, json) Hash identifier: 5PYQrwSeCsfcg4A4JF8Vo/7Y+9YeOqJQ7oMYKZJP+Hs= Subject key identifier: E2:82:87:02:AF:95:24:B2:C3:D5:7E:1B:8B:0C:64:96:25:66:94:9C Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 688D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30376/4oKHAq-VJLLD1X4biwxkliVmlJw.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30376/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Fri 15 May 2026 01:33:19 +0000 Certificate not after: Sat 15 May 2027 01:30:02 +0000 Subordinate resources: IP: 2407:58c0::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 00:21:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26765 (0x688d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: May 15 01:33:19 2026 GMT Not After : May 15 01:30:02 2027 GMT Subject: CN=E2828702AF9524B2C3D57E1B8B0C64962566949C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:76:f9:3f:55:c9:c1:51:e3:78:cc:6b:2a:f6: 53:0a:24:1c:59:3f:17:10:18:32:ea:2b:24:8a:fd: 6b:ae:2c:ce:fb:8d:dc:74:1c:4d:6c:e3:39:72:0c: ed:09:04:37:88:5c:92:0c:94:8e:73:aa:0f:2f:2d: 3a:3a:1f:eb:62:32:99:f4:a8:85:ca:bf:6a:80:01: 04:2c:80:1c:76:e6:71:7a:2f:4f:0b:17:4a:7c:fa: 04:f2:9a:9f:74:c1:63:15:4c:51:9c:25:13:cd:9c: b4:8a:27:cf:4f:24:6d:18:cc:d3:1a:20:2e:92:43: 3f:f9:4a:3f:e7:d2:a9:75:14:9c:d2:d0:62:8f:23: 4e:ee:5d:df:29:d6:f8:18:b1:99:55:3f:f4:20:e2: 17:28:63:03:b2:d0:02:8f:b8:cb:18:0b:69:50:16: 3c:17:44:45:3b:c5:d8:80:c3:8c:ae:8e:cb:c5:86: 3f:94:59:5a:8b:cf:b9:bc:69:8b:23:77:39:98:72: 90:fd:28:de:be:cb:b8:68:5e:bd:54:7b:8d:69:98: 77:eb:14:6d:ca:86:40:97:bc:4e:3d:6f:bb:e8:1f: 0c:ca:45:30:88:5c:c3:d0:ee:f9:c7:f6:7d:c2:10: d2:90:14:97:ff:00:fa:af:bb:dd:62:fc:a7:41:a5: 84:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:82:87:02:AF:95:24:B2:C3:D5:7E:1B:8B:0C:64:96:25:66:94:9C X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30376/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30376/4oKHAq-VJLLD1X4biwxkliVmlJw.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2407:58c0::/32 Signature Algorithm: sha256WithRSAEncryption 36:dd:bf:70:76:8b:f7:35:64:1f:41:8a:ca:16:64:94:36:f9: 77:b9:1d:c2:9a:00:6c:3f:6e:49:1a:e0:c7:11:ef:95:f7:b9: 07:48:ba:aa:2f:9c:0a:ec:0d:64:c3:0c:01:77:bd:af:8d:69: 1a:26:98:96:93:b7:cd:c7:46:d3:9f:dc:70:eb:6f:f8:1b:23: b1:f9:e8:dd:79:3e:74:04:3d:b7:04:c4:76:aa:17:98:fc:73: 7b:36:f6:0b:8a:a0:bb:52:2d:1e:d9:12:66:21:c3:63:d0:1e: 57:d9:62:1b:aa:e2:f2:5c:c3:ab:10:58:70:af:37:ff:12:c3: 81:f0:76:f0:b0:64:36:99:a1:e4:34:64:22:ad:e7:92:c8:6e: e4:8c:21:1f:02:c4:88:96:22:3c:41:20:0d:d2:57:8c:26:9e: 44:4e:85:f5:41:00:8a:01:10:e5:47:e8:05:c2:c7:52:e8:8d: 2e:42:2a:4e:f1:f3:f5:4c:ee:ce:df:0a:ba:23:f4:f7:95:87: 28:91:7d:5f:a9:04:eb:ce:3c:6a:7d:82:b6:34:7e:43:9c:9b: 05:4e:11:6e:3a:fb:40:6d:59:1a:7c:dc:f0:63:e4:18:5b:1e: 89:7e:eb:53:e0:68:a8:7f:24:ea:61:e3:87:04:28:c2:d9:fd: 2a:7e:99:34 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICaI0wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MDUxNTAxMzMxOVoXDTI3MDUxNTAxMzAwMlowMzEx MC8GA1UEAxMoRTI4Mjg3MDJBRjk1MjRCMkMzRDU3RTFCOEIwQzY0OTYyNTY2OTQ5 QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALR2+T9VycFR43jMayr2 UwokHFk/FxAYMuorJIr9a64szvuN3HQcTWzjOXIM7QkEN4hckgyUjnOqDy8tOjof 62IymfSohcq/aoABBCyAHHbmcXovTwsXSnz6BPKan3TBYxVMUZwlE82ctIonz08k bRjM0xogLpJDP/lKP+fSqXUUnNLQYo8jTu5d3ynW+BixmVU/9CDiFyhjA7LQAo+4 yxgLaVAWPBdERTvF2IDDjK6Oy8WGP5RZWovPubxpiyN3OZhykP0o3r7LuGhevVR7 jWmYd+sUbcqGQJe8Tj1vu+gfDMpFMIhcw9Du+cf2fcIQ0pAUl/8A+q+73WL8p0Gl hNcCAwEAAaOCAowwggKIMB0GA1UdDgQWBBTigocCr5UkssPVfhuLDGSWJWaUnDAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAzNzYvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMzc2LzRv S0hBcS1WSkxMRDFYNGJpd3hrbGlWbWxKdy5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkB1jAMA0GCSqGSIb3 DQEBCwUAA4IBAQA23b9wdov3NWQfQYrKFmSUNvl3uR3CmgBsP25JGuDHEe+V97kH SLqqL5wK7A1kwwwBd72vjWkaJpiWk7fNx0bTn9xw62/4GyOx+ejdeT50BD23BMR2 qheY/HN7NvYLiqC7Ui0e2RJmIcNj0B5X2WIbquLyXMOrEFhwrzf/EsOB8HbwsGQ2 maHkNGQireeSyG7kjCEfAsSIliI8QSAN0leMJp5EToX1QQCKARDlR+gFwsdS6I0u QipO8fP1TO7O3wq6I/T3lYcokX1fqQTrzjxqfYK2NH5DnJsFThFuOvtAbVkafNzw Y+QYWx6JfutT4GiofyTqYeOHBCjC2f0qfpk0 -----END CERTIFICATE-----Generated at Sat May 23 04:27:12 2026 by rpki-client