$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/5U0KcyzhxlFKNKPQbpFrHE-4qgo.cer File: 5U0KcyzhxlFKNKPQbpFrHE-4qgo.cer (raw, json) Hash identifier: s5gksY/7t4wTgtnICFQebHum8DID8WGupYgbeBlkbf8= Subject key identifier: E5:4D:0A:73:2C:E1:C6:51:4A:34:A3:D0:6E:91:6B:1C:4F:B8:AA:0A Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 7035 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/96/5U0KcyzhxlFKNKPQbpFrHE-4qgo.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/96/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sat 15 Aug 2026 01:37:54 +0000 Certificate not after: Sun 15 Aug 2027 01:30:02 +0000 Subordinate resources: IP: 202.213.72.0/21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28725 (0x7035) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Aug 15 01:37:54 2026 GMT Not After : Aug 15 01:30:02 2027 GMT Subject: CN=E54D0A732CE1C6514A34A3D06E916B1C4FB8AA0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b8:8b:53:16:a5:a7:f2:07:b0:e5:f6:60:f6: 47:31:3c:44:47:38:11:5c:09:13:34:99:93:c4:94: 48:cd:64:49:d7:0e:74:6a:ae:43:a3:0f:74:dc:8c: 42:45:6a:3f:1f:69:63:44:1f:4d:4a:37:63:e5:c9: 42:57:b1:5b:61:64:57:aa:94:0f:ca:9e:8e:6d:98: 4b:ca:38:6f:9f:d6:7e:b5:e1:95:69:13:62:f4:76: 34:53:1f:bb:e4:9e:84:d4:4c:7b:33:21:15:2e:43: 4b:52:86:66:2d:95:6e:a9:40:7d:04:f9:4d:24:cf: 92:a3:b6:9b:da:38:cd:44:05:35:2b:1a:2f:63:ec: a6:78:77:14:92:ed:4c:40:cc:81:e2:60:94:cf:3b: ae:04:12:5b:ca:b7:7f:ca:68:46:1d:97:21:02:6a: b2:3b:4c:3d:ca:cd:5d:72:e6:19:53:9d:cd:af:76: d0:2c:47:66:5f:fc:d3:f9:55:8b:2b:12:52:c8:73: c1:a6:3a:76:2c:1e:58:04:87:eb:78:90:63:7c:ed: f7:5e:c2:6c:8b:71:07:a9:75:41:36:3b:8d:cb:4e: 37:46:c6:2f:3b:4e:23:bd:8f:62:7d:c1:2c:ad:0a: 80:16:0a:25:e4:53:71:80:e8:fb:31:3e:87:45:8d: d6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:4D:0A:73:2C:E1:C6:51:4A:34:A3:D0:6E:91:6B:1C:4F:B8:AA:0A X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/96/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/96/5U0KcyzhxlFKNKPQbpFrHE-4qgo.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.213.72.0/21 Signature Algorithm: sha256WithRSAEncryption 0f:a4:69:fa:93:39:f1:83:5d:5c:03:06:e8:5d:f0:52:22:a7: 2a:55:60:57:b9:3c:60:af:7e:28:41:d2:4e:94:7d:98:b3:3f: b8:58:e1:cd:68:cf:a2:5d:ab:c0:38:05:9d:e5:aa:66:aa:fc: 96:a9:46:4c:7d:a7:f9:b2:9a:3b:36:f4:e1:26:30:e3:55:1b: 47:c7:d1:ee:c9:82:55:c8:b3:b6:9a:89:dc:00:f8:3c:dc:2c: 4e:1b:d1:ea:e4:85:c7:87:c2:f9:9d:a1:50:60:ab:fe:93:a5: 0f:9b:4f:93:7d:d5:c4:81:17:97:3e:8a:a7:01:78:8f:0f:27: 95:3b:b6:82:65:4a:cb:a5:a5:71:1e:ea:29:90:0a:e3:a5:0d: 52:91:88:ab:e6:6c:d5:80:b4:17:82:f4:98:9b:96:66:27:74: 89:31:76:94:48:cf:96:4f:99:10:33:7b:71:42:dc:60:54:c9: 7c:1c:7a:2b:14:4a:d7:ed:d8:b0:e4:8a:d2:19:b2:fe:e6:33: 90:89:35:9d:f4:66:5f:08:f1:00:90:a0:f2:ab:10:b9:ab:e9: bf:10:ba:33:b0:b5:8a:77:8c:11:8b:84:8a:6e:e3:d6:7f:2f: e2:30:f7:53:20:d4:29:24:3c:a4:ea:a9:e8:c4:59:7d:7d:a9: 1a:44:bd:49 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgICcDUwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MDgxNTAxMzc1NFoXDTI3MDgxNTAxMzAwMlowMzEx MC8GA1UEAxMoRTU0RDBBNzMyQ0UxQzY1MTRBMzRBM0QwNkU5MTZCMUM0RkI4QUEw QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMW4i1MWpafyB7Dl9mD2 RzE8REc4EVwJEzSZk8SUSM1kSdcOdGquQ6MPdNyMQkVqPx9pY0QfTUo3Y+XJQlex W2FkV6qUD8qejm2YS8o4b5/WfrXhlWkTYvR2NFMfu+SehNRMezMhFS5DS1KGZi2V bqlAfQT5TSTPkqO2m9o4zUQFNSsaL2Pspnh3FJLtTEDMgeJglM87rgQSW8q3f8po Rh2XIQJqsjtMPcrNXXLmGVOdza920CxHZl/80/lViysSUshzwaY6diweWASH63iQ Y3zt917CbItxB6l1QTY7jctON0bGLztOI72PYn3BLK0KgBYKJeRTcYDo+zE+h0WN 1tECAwEAAaOCAoQwggKAMB0GA1UdDgQWBBTlTQpzLOHGUUo0o9BukWscT7iqCjAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH9BggrBgEFBQcBCwSB8DCB 7TBBBggrBgEFBQcwBYY1cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC85Ni8wYAYIKwYBBQUHMAqGVHJzeW5jOi8vcnBraS1y ZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvOTYvNVUwS2N5emh4 bEZLTktQUWJwRnJIRS00cWdvLm1mdDBGBggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtp LXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8rVSDANBgkqhkiG9w0BAQsFAAOC AQEAD6Rp+pM58YNdXAMG6F3wUiKnKlVgV7k8YK9+KEHSTpR9mLM/uFjhzWjPol2r wDgFneWqZqr8lqlGTH2n+bKaOzb04SYw41UbR8fR7smCVciztpqJ3AD4PNwsThvR 6uSFx4fC+Z2hUGCr/pOlD5tPk33VxIEXlz6KpwF4jw8nlTu2gmVKy6WlcR7qKZAK 46UNUpGIq+Zs1YC0F4L0mJuWZid0iTF2lEjPlk+ZEDN7cULcYFTJfBx6KxRK1+3Y sOSK0hmy/uYzkIk1nfRmXwjxAJCg8qsQuavpvxC6M7C1ineMEYuEim7j1n8v4jD3 UyDUKSQ8pOqp6MRZfX2pGkS9SQ== -----END CERTIFICATE-----Generated at Fri Aug 21 23:57:56 2026 by rpki-client