$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/HPmnTnOHpnfzqyyn9RuGzXMlcIQ.cer File: HPmnTnOHpnfzqyyn9RuGzXMlcIQ.cer (raw, json) Hash identifier: 3ArWAY+ks3AsiwudlgGSVEuNwweRnIY8eGBFZgIbvog= Subject key identifier: 1C:F9:A7:4E:73:87:A6:77:F3:AB:2C:A7:F5:1B:86:CD:73:25:70:84 Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 Certificate issuer: /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Certificate serial: 1754 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/HPmnTnOHpnfzqyyn9RuGzXMlcIQ.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sat 15 Aug 2026 01:30:32 +0000 Certificate not after: Sun 15 Aug 2027 01:30:02 +0000 Subordinate resources: IP: 157.250.128.0/19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 06:44:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5972 (0x1754) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Validity Not Before: Aug 15 01:30:32 2026 GMT Not After : Aug 15 01:30:02 2027 GMT Subject: CN=1CF9A74E7387A677F3AB2CA7F51B86CD73257084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:81:21:76:f1:2f:c7:26:14:fb:d2:6d:df:4e: f3:06:7e:ae:f2:68:29:95:a0:66:14:23:cc:b3:b5: e1:e3:65:c5:84:37:c3:3a:31:f1:b6:ce:f0:33:a0: cb:03:a7:06:3a:32:07:3f:a7:76:5a:21:90:c3:a0: 4d:23:6e:da:7e:40:f3:26:60:10:aa:64:a3:3e:4d: ca:b6:20:1c:ac:e5:09:ff:d1:b3:4b:4c:5e:9b:9a: 2b:b9:f0:da:38:eb:3e:ab:32:fe:99:96:b7:38:31: 32:1d:8d:4f:cc:fe:51:65:2e:56:a6:83:aa:da:f4: 97:34:92:bb:34:06:9e:cf:d9:25:7e:f5:81:3c:28: 3a:72:d9:81:7f:28:bf:b6:7d:1e:cd:18:a8:02:dd: a1:66:fd:78:52:90:94:a6:a0:1b:73:5a:ec:e0:c9: b6:66:b9:b7:ad:d4:ec:bc:81:ac:dd:8c:1c:97:82: e1:53:bd:c0:85:6b:ed:8d:fe:71:18:25:a5:cd:2d: 4f:eb:2d:18:a8:c8:fd:ff:20:70:90:8b:6f:2b:40: a1:05:12:43:c4:ad:fd:43:d9:e2:d8:cd:46:54:6c: a3:d0:23:d7:dc:4c:23:84:ac:a0:e9:fb:b6:f8:2d: 51:84:51:53:2b:3b:0d:ca:e2:ad:49:60:4c:3f:c6: 8b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:F9:A7:4E:73:87:A6:77:F3:AB:2C:A7:F5:1B:86:CD:73:25:70:84 X509v3 Authority Key Identifier: keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/HPmnTnOHpnfzqyyn9RuGzXMlcIQ.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.250.128.0/19 Signature Algorithm: sha256WithRSAEncryption 80:69:ff:a9:68:2c:aa:f4:1d:e6:95:8b:f8:10:d0:92:98:8f: 30:83:31:28:e2:52:f0:c2:00:59:a4:d1:49:f8:5b:0c:3d:4d: f6:95:ea:7d:f1:7f:d9:20:26:13:fd:a9:7f:65:09:ce:54:3a: 54:d0:92:e4:c9:31:3f:19:32:be:8b:ec:78:3c:83:67:0a:95: 7b:94:a0:a9:d7:ca:57:60:c2:a0:3b:f1:82:80:4f:3d:8a:0b: 17:6a:4c:a2:23:3b:77:63:94:03:1a:6a:dd:e2:d1:f0:6c:eb: 0f:47:6b:e1:c4:be:43:34:2b:97:81:e3:37:a6:03:f6:41:0b: 5b:c9:16:20:b0:96:a5:9e:c0:34:fb:c9:63:6a:c4:bc:b7:64: 8a:e4:4b:e0:97:00:84:cb:18:05:f5:35:16:7a:23:2a:5a:8e: 37:f3:b4:22:70:35:b0:a9:84:c3:00:03:a9:80:db:2e:63:7b: 11:21:50:b3:57:23:06:6e:c9:3e:2c:a7:be:44:71:60:b7:40: 8f:94:7e:6b:92:ba:b3:cf:6a:55:72:ca:60:bf:b4:e2:e9:1e: b5:ef:e9:1f:48:bc:f9:f6:c2:e0:18:64:92:68:c9:8d:fc:58: 61:27:77:87:6f:71:21:bd:b2:c6:6e:d3:eb:16:28:00:7a:fc: 9c:3a:6b:95 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgICF1QwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyg2RjY4M0VBRTM5QTE3MzhBRTZDOTNGREYwNDFG MTE0OEU2NTM0REYyMB4XDTI2MDgxNTAxMzAzMloXDTI3MDgxNTAxMzAwMlowMzEx MC8GA1UEAxMoMUNGOUE3NEU3Mzg3QTY3N0YzQUIyQ0E3RjUxQjg2Q0Q3MzI1NzA4 NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALaBIXbxL8cmFPvSbd9O 8wZ+rvJoKZWgZhQjzLO14eNlxYQ3wzox8bbO8DOgywOnBjoyBz+ndlohkMOgTSNu 2n5A8yZgEKpkoz5NyrYgHKzlCf/Rs0tMXpuaK7nw2jjrPqsy/pmWtzgxMh2NT8z+ UWUuVqaDqtr0lzSSuzQGns/ZJX71gTwoOnLZgX8ov7Z9Hs0YqALdoWb9eFKQlKag G3Na7ODJtma5t63U7LyBrN2MHJeC4VO9wIVr7Y3+cRglpc0tT+stGKjI/f8gcJCL bytAoQUSQ8St/UPZ4tjNRlRso9Aj19xMI4SsoOn7tvgtUYRRUys7DcrirUlgTD/G ixkCAwEAAaOCAoYwggKCMB0GA1UdDgQWBBQc+adOc4emd/OrLKf1G4bNcyVwhDAf BgNVHSMEGDAWgBRvaD6uOaFziubJP98EHxFI5lNN8jAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYjJnLXJqbWhjNHJteVRfZkJC OFJTT1pUVGZJLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFD ODgzN0M3MkZEMUZGMi9iMmctcmptaGM0cm15VF9mQkI4UlNPWlRUZkkuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB 7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC84MjIvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzgyMi9IUG1uVG5P SHBuZnpxeXluOVJ1R3pYTWxjSVEubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnfqAMA0GCSqGSIb3DQEBCwUA A4IBAQCAaf+paCyq9B3mlYv4ENCSmI8wgzEo4lLwwgBZpNFJ+FsMPU32lep98X/Z ICYT/al/ZQnOVDpU0JLkyTE/GTK+i+x4PINnCpV7lKCp18pXYMKgO/GCgE89igsX akyiIzt3Y5QDGmrd4tHwbOsPR2vhxL5DNCuXgeM3pgP2QQtbyRYgsJalnsA0+8lj asS8t2SK5EvglwCEyxgF9TUWeiMqWo4387QicDWwqYTDAAOpgNsuY3sRIVCzVyMG bsk+LKe+RHFgt0CPlH5rkrqzz2pVcspgv7Ti6R617+kfSLz59sLgGGSSaMmN/Fhh J3eHb3EhvbLGbtPrFigAevycOmuV -----END CERTIFICATE-----Generated at Fri Sep 11 11:07:51 2026 by rpki-client