$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/81OdCTu0kJIuN1lUF6fFsOP7DYQ.cer File: 81OdCTu0kJIuN1lUF6fFsOP7DYQ.cer (raw, json) Hash identifier: 44qUmzQAugSbKiGzDxArDN2dFmX3O81A3SZZRXXndqA= Subject key identifier: F3:53:9D:09:3B:B4:90:92:2E:37:59:54:17:A7:C5:B0:E3:FB:0D:84 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 70DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20103/81OdCTu0kJIuN1lUF6fFsOP7DYQ.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20103/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sat 15 Aug 2026 01:42:02 +0000 Certificate not after: Sun 15 Aug 2027 01:30:02 +0000 Subordinate resources: IP: 103.142.124.0/23 IP: 202.233.84.0/22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28892 (0x70dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Aug 15 01:42:02 2026 GMT Not After : Aug 15 01:30:02 2027 GMT Subject: CN=F3539D093BB490922E37595417A7C5B0E3FB0D84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1e:d5:a0:e2:2c:73:f7:7c:95:c3:b8:c1:5a: 33:7c:5b:dd:cf:30:84:88:27:3f:68:c1:76:f6:0c: 8c:1e:50:31:12:5b:63:76:68:b9:eb:c3:0c:22:d4: 4b:e2:46:07:eb:da:4f:b3:47:d7:81:e0:e6:64:0c: c0:81:12:91:24:cc:81:ce:c5:71:65:a3:e3:7f:63: 54:6c:23:96:73:5c:0f:90:ec:e2:1e:28:c2:d1:aa: 73:a3:8d:f5:47:75:0d:d8:55:19:5b:a3:c3:9c:9c: a7:21:d1:e9:3f:8b:a7:66:91:45:ea:c2:59:72:f7: 9a:3c:43:24:ca:6f:e2:9c:90:b6:9a:09:34:5f:1a: 10:74:6f:6a:ad:05:08:2f:3e:ff:88:66:6a:95:55: 39:8a:45:16:2b:0b:dc:a7:e3:49:c1:2e:b8:9a:a2: 52:30:fd:2b:dd:04:f2:ec:09:02:20:c5:d8:b0:a8: cb:61:81:c4:87:0e:ad:e0:1d:0c:bb:83:e8:de:16: 6a:5e:b5:e7:7c:dd:86:00:b2:f0:ee:50:52:05:c5: e1:ff:47:22:49:c5:f3:9e:93:76:02:7c:3a:9d:96: 79:59:bd:5e:15:73:bf:d4:55:b3:f0:16:5e:6a:eb: 0c:dc:7d:2c:7c:93:3f:e8:a8:48:43:a8:17:ad:04: 14:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:53:9D:09:3B:B4:90:92:2E:37:59:54:17:A7:C5:B0:E3:FB:0D:84 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20103/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20103/81OdCTu0kJIuN1lUF6fFsOP7DYQ.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.142.124.0/23 202.233.84.0/22 Signature Algorithm: sha256WithRSAEncryption 08:81:1e:ab:fd:0c:70:ed:de:2f:fb:4b:84:ea:38:06:30:ca: 98:a2:82:c8:40:d6:d2:f6:67:58:b9:2a:58:2e:11:65:66:0a: b7:59:78:be:c7:fb:43:b8:e7:f9:6d:1f:c4:f8:55:6e:14:b2: 06:9f:af:26:66:e2:89:6f:03:43:4a:a5:3d:b0:10:42:08:39: d2:be:27:f3:20:bc:5c:5c:4f:8e:1e:5e:bf:ad:d7:c2:95:46: 03:5f:74:4b:e7:30:f7:69:70:f3:43:19:78:c6:fc:e7:43:40: 60:53:8c:a1:ec:34:55:a6:5d:b3:20:c7:16:18:42:21:86:09: 1a:49:b3:42:6c:b2:9f:52:14:96:f5:94:d1:cb:e9:d7:60:02: 84:82:23:76:8d:b9:61:14:a5:2c:71:bb:f5:7b:80:ce:a6:8f: 8b:88:60:bf:a4:c1:34:db:ce:15:0f:08:c1:c2:e3:5d:6f:6f: 3e:6f:8e:4f:08:1b:33:b2:e0:22:31:06:95:60:72:b2:96:a3: b1:55:7a:92:5c:41:52:04:95:fe:30:21:25:d3:16:df:93:5c: c4:82:12:11:1c:da:1a:d5:68:d1:d8:d4:3e:5c:49:fd:13:3a: fa:d6:a9:12:2c:ae:52:d6:9d:95:90:6e:7f:49:3f:1a:43:d2: 67:49:f2:b9 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICcNwwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MDgxNTAxNDIwMloXDTI3MDgxNTAxMzAwMlowMzEx MC8GA1UEAxMoRjM1MzlEMDkzQkI0OTA5MjJFMzc1OTU0MTdBN0M1QjBFM0ZCMEQ4 NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALMe1aDiLHP3fJXDuMFa M3xb3c8whIgnP2jBdvYMjB5QMRJbY3ZouevDDCLUS+JGB+vaT7NH14Hg5mQMwIES kSTMgc7FcWWj439jVGwjlnNcD5Ds4h4owtGqc6ON9Ud1DdhVGVujw5ycpyHR6T+L p2aRRerCWXL3mjxDJMpv4pyQtpoJNF8aEHRvaq0FCC8+/4hmapVVOYpFFisL3Kfj ScEuuJqiUjD9K90E8uwJAiDF2LCoy2GBxIcOreAdDLuD6N4Wal6153zdhgCy8O5Q UgXF4f9HIknF856TdgJ8Op2WeVm9XhVzv9RVs/AWXmrrDNx9LHyTP+ioSEOoF60E FLMCAwEAAaOCApEwggKNMB0GA1UdDgQWBBTzU50JO7SQki43WVQXp8Ww4/sNhDAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAxMDMvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMTAzLzgx T2RDVHUwa0pJdU4xbFVGNmZGc09QN0RZUS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAFnjnwDBALK6VQwDQYJ KoZIhvcNAQELBQADggEBAAiBHqv9DHDt3i/7S4TqOAYwypiigshA1tL2Z1i5Klgu EWVmCrdZeL7H+0O45/ltH8T4VW4UsgafryZm4olvA0NKpT2wEEIIOdK+J/MgvFxc T44eXr+t18KVRgNfdEvnMPdpcPNDGXjG/OdDQGBTjKHsNFWmXbMgxxYYQiGGCRpJ s0Jssp9SFJb1lNHL6ddgAoSCI3aNuWEUpSxxu/V7gM6mj4uIYL+kwTTbzhUPCMHC 411vbz5vjk8IGzOy4CIxBpVgcrKWo7FVepJcQVIElf4wISXTFt+TXMSCEhEc2hrV aNHY1D5cSf0TOvrWqRIsrlLWnZWQbn9JPxpD0mdJ8rk= -----END CERTIFICATE-----Generated at Sat Aug 22 00:43:37 2026 by rpki-client