$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer File: 78FWSaglf2T8lCFn4xCtOK0Czbw.cer (raw, json) Hash identifier: s8ph61kcqrJWO49qiitkPjC2pDOgiQD5+WLIoxQy5ck= Subject key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 70A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sat 15 Aug 2026 01:40:26 +0000 Certificate not after: Sun 15 Aug 2027 01:30:02 +0000 Subordinate resources: IP: 103.10.112.0/22 IP: 133.125.0.0/16 IP: 133.242.0.0/16 IP: 153.120.0.0 -- 153.120.191.255 IP: 153.121.128.0/17 IP: 153.125.128.0 -- 153.125.223.255 IP: 153.125.240.0 -- 153.127.223.255 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 19:29:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28837 (0x70a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Aug 15 01:40:26 2026 GMT Not After : Aug 15 01:30:02 2027 GMT Subject: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7d:c0:aa:84:31:e6:67:4a:31:52:df:c9:78: 4a:10:9f:fc:a0:b8:91:a3:11:1f:9a:3a:76:25:8c: e2:ea:29:d9:f3:10:ef:3a:3a:1e:2b:b3:c7:c2:8f: d0:3e:9b:56:89:34:c8:f7:f3:89:de:66:eb:87:4d: bc:ee:09:4c:1a:e1:2f:1d:47:40:04:eb:8c:cd:fb: db:fe:12:14:a6:1b:6a:1b:af:47:70:73:dc:53:63: be:3a:02:69:cb:ad:8d:62:aa:da:f8:bc:e3:3e:2c: b6:2f:6d:78:24:ef:6a:67:8d:58:ef:5b:46:17:16: fd:6b:46:34:55:85:f0:d2:98:c6:20:74:98:3a:a1: 13:31:c4:d3:6e:a7:11:8f:a3:41:9f:c0:d7:9f:0f: 8a:80:cc:f5:50:03:c8:d2:72:2c:37:3e:3e:f4:a9: 1d:ec:c8:8b:39:1b:79:c1:76:bc:9d:32:1c:fa:d9: 6c:1c:c3:91:69:94:7b:14:a1:62:ae:74:ed:e5:17: 0c:39:7c:62:3e:b9:09:f5:c2:8a:08:43:9f:bf:7a: 07:df:f0:b8:bd:f0:9b:06:b9:76:6a:44:cc:31:35: b9:34:fe:0e:f3:c1:d6:87:86:d9:93:65:33:fd:95: 1a:98:22:9b:e2:61:01:18:96:29:c3:9f:6b:0f:3e: 88:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.10.112.0/22 133.125.0.0/16 133.242.0.0/16 153.120.0.0-153.120.191.255 153.121.128.0/17 153.125.128.0-153.125.223.255 153.125.240.0-153.127.223.255 Signature Algorithm: sha256WithRSAEncryption 6e:14:43:fd:9b:94:4b:2b:53:fa:a8:6b:77:f5:d1:fc:48:d7: c3:df:20:85:ad:77:9d:94:5c:ef:cd:2f:bd:91:91:4f:11:33: e8:45:d5:04:74:7d:66:15:8a:45:51:00:5e:d8:45:8d:d7:df: cb:ed:9e:63:c7:41:b4:0d:d8:44:3b:17:23:4b:26:49:63:c1: a4:0c:ca:03:40:69:52:e7:44:2b:be:0f:32:97:fc:71:37:44: c9:97:86:0b:8f:a5:49:ed:e8:c5:f6:a4:8c:77:d3:25:7e:44: b7:0c:69:14:a6:dc:cd:36:4e:1b:42:5a:c8:05:ec:cd:a4:5e: 6b:25:02:26:44:4c:4f:1a:5b:cd:77:2d:19:9b:e3:c2:61:a7: e6:3e:a0:97:98:23:bc:e1:76:fc:47:d6:0a:c8:10:1b:e3:f3: 52:59:d8:e3:02:9e:fa:67:6c:95:7e:5c:45:73:cc:9b:23:a1: 5a:0b:fd:da:81:02:9a:15:a7:4c:52:ae:fa:91:70:3e:e4:a0: 0b:38:44:db:8d:28:c1:dd:a0:f6:0b:e3:24:ed:a4:e2:79:f1: 93:0f:03:5c:e0:50:9c:3d:b7:05:67:76:e4:80:df:4a:b3:8f: 61:8a:9d:d8:1c:1f:16:34:89:69:68:84:4c:3d:9f:b7:f1:13: 83:50:a2:5b -----BEGIN CERTIFICATE----- MIIFvzCCBKegAwIBAgICcKUwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MDgxNTAxNDAyNloXDTI3MDgxNTAxMzAwMlowMzEx MC8GA1UEAxMoRUZDMTU2NDlBODI1N0Y2NEZDOTQyMTY3RTMxMEFEMzhBRDAyQ0RC QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL99wKqEMeZnSjFS38l4 ShCf/KC4kaMRH5o6diWM4uop2fMQ7zo6Hiuzx8KP0D6bVok0yPfzid5m64dNvO4J TBrhLx1HQATrjM372/4SFKYbahuvR3Bz3FNjvjoCacutjWKq2vi84z4sti9teCTv ameNWO9bRhcW/WtGNFWF8NKYxiB0mDqhEzHE026nEY+jQZ/A158PioDM9VADyNJy LDc+PvSpHezIizkbecF2vJ0yHPrZbBzDkWmUexShYq507eUXDDl8Yj65CfXCighD n796B9/wuL3wmwa5dmpEzDE1uTT+DvPB1oeG2ZNlM/2VGpgim+JhARiWKcOfaw8+ iOUCAwEAAaOCAsQwggLAMB0GA1UdDgQWBBTvwVZJqCV/ZPyUIWfjEK04rQLNvDAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMTEyNDcvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzExMjQ3Lzc4 RldTYWdsZjJUOGxDRm40eEN0T0swQ3pidy5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwWAYIKwYBBQUHAQcBAf8ESTBHMEUEAgABMD8DBAJnCnADAwCFfQMDAIXy MAsDAwOZeAMEBpl4gAMEB5l5gDAMAwQHmX2AAwQFmX3AMAwDBASZffADBAWZf8Aw DQYJKoZIhvcNAQELBQADggEBAG4UQ/2blEsrU/qoa3f10fxI18PfIIWtd52UXO/N L72RkU8RM+hF1QR0fWYVikVRAF7YRY3X38vtnmPHQbQN2EQ7FyNLJkljwaQMygNA aVLnRCu+DzKX/HE3RMmXhguPpUnt6MX2pIx30yV+RLcMaRSm3M02ThtCWsgF7M2k XmslAiZETE8aW813LRmb48Jhp+Y+oJeYI7zhdvxH1grIEBvj81JZ2OMCnvpnbJV+ XEVzzJsjoVoL/dqBApoVp0xSrvqRcD7koAs4RNuNKMHdoPYL4yTtpOJ58ZMPA1zg UJw9twVnduSA30qzj2GKndgcHxY0iWlohEw9n7fxE4NQols= -----END CERTIFICATE-----Generated at Wed Aug 19 23:19:23 2026 by rpki-client