$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/M3no5lNfAaft8kcF-T787f8pukg.cer File: M3no5lNfAaft8kcF-T787f8pukg.cer (raw, json) Hash identifier: bQYW8rad1kiQSzjpKYDLEdsjHyboyvmBGyQbHl0DbE0= Subject key identifier: 33:79:E8:E6:53:5F:01:A7:ED:F2:47:05:F9:3E:FC:ED:FF:29:BA:48 Authority key identifier: D1:95:7E:C5:8C:08:F3:5B:AA:6B:FE:77:E4:5A:97:40:BA:47:1F:9E Certificate issuer: /CN=A91A73810000/serialNumber=D1957EC58C08F35BAA6BFE77E45A9740BA471F9E Certificate serial: 02F1 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/M3no5lNfAaft8kcF-T787f8pukg.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sat 15 Aug 2026 01:40:29 +0000 Certificate not after: Sun 15 Aug 2027 01:30:02 +0000 Subordinate resources: IP: 81.203.0.0/16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 14:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 753 (0x2f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=D1957EC58C08F35BAA6BFE77E45A9740BA471F9E Validity Not Before: Aug 15 01:40:29 2026 GMT Not After : Aug 15 01:30:02 2027 GMT Subject: CN=3379E8E6535F01A7EDF24705F93EFCEDFF29BA48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:46:98:a1:af:30:8c:ee:63:d6:f2:6b:78:a6: 47:8c:c4:3a:bb:6b:5d:03:3d:95:f9:b9:7a:9a:a9: de:12:8e:7b:57:d4:c6:4d:3f:f4:5d:42:e8:f4:19: 8d:db:80:08:a9:aa:8e:49:34:93:e2:ab:2b:b6:3d: 5c:1d:59:82:92:13:ee:0c:8a:05:5e:8c:6d:22:fd: cd:ea:ac:33:ae:a6:2a:28:d2:81:77:dc:cd:0e:27: 08:4a:c4:a0:ac:2a:ca:18:56:59:34:b8:bc:2b:ec: 68:36:a6:ce:cf:9d:cb:5d:fd:2b:e4:53:2e:45:ea: 90:1b:6c:15:7d:2f:2b:9f:3d:bf:cf:c1:9f:06:d9: ed:fc:a5:89:14:52:17:d6:e4:af:6c:db:b2:12:a0: 8b:32:dc:bc:17:cd:b3:06:16:93:8d:0c:f6:99:a8: 0f:67:b5:1d:85:15:68:44:21:dd:9f:a2:b8:87:72: bb:9c:91:3a:83:c4:47:09:80:c7:17:5f:c2:23:f0: 79:66:ec:de:55:42:f5:06:32:f3:02:75:db:c2:f4: 67:57:a3:4b:42:e4:37:00:a9:f0:2a:68:87:a5:09: 23:35:04:9d:1f:66:30:cb:11:9b:38:a3:42:1f:09: ad:9d:a0:80:87:fe:a7:a9:ea:d8:7e:48:a0:69:b5: 24:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:79:E8:E6:53:5F:01:A7:ED:F2:47:05:F9:3E:FC:ED:FF:29:BA:48 X509v3 Authority Key Identifier: keyid:D1:95:7E:C5:8C:08:F3:5B:AA:6B:FE:77:E4:5A:97:40:BA:47:1F:9E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/M3no5lNfAaft8kcF-T787f8pukg.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 81.203.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0a:00:ff:cf:64:8a:5d:7f:ad:ca:73:cc:10:05:10:8b:ef:8b: d4:ff:40:12:81:17:a3:8a:df:a6:c7:07:95:7e:94:6f:bd:92: 18:2d:b8:76:89:bc:d5:fc:47:05:34:ba:76:32:8a:d0:99:91: 37:0f:cd:f5:f2:09:5e:09:a7:e4:50:fc:0d:13:94:f8:5d:74: 17:47:27:a3:7e:60:4e:f7:e7:a1:c5:df:5d:ba:cd:97:30:eb: 54:e5:31:29:ee:59:45:1c:07:18:23:eb:78:c9:94:93:79:fa: 72:85:39:ea:2f:b5:7c:f1:96:93:00:28:81:a7:15:38:1f:2a: 9d:c2:9d:19:0b:a9:52:d2:af:6b:46:a6:ff:67:b7:da:8b:2c: 8d:dc:fc:63:c6:d7:f2:4b:7d:19:f6:af:f3:7c:04:fa:f1:9d: c5:9e:07:11:c0:de:0a:31:91:02:a1:37:13:38:ba:79:9b:b4: 25:e9:e0:1c:03:54:e6:04:2a:60:17:aa:b0:39:23:5f:64:10: a6:77:54:a0:57:c7:54:4c:e0:94:7f:4a:f8:93:6f:5b:ed:cd: 91:71:24:3d:6d:ad:4a:2a:72:96:f9:a5:56:d5:8b:8a:b0:a9: d9:42:56:92:ed:56:bd:e8:3a:8e:41:cd:17:bb:71:18:45:5a: fa:1a:40:54 -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgICAvEwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhEMTk1N0VDNThDMDhGMzVCQUE2QkZFNzdFNDVB OTc0MEJBNDcxRjlFMB4XDTI2MDgxNTAxNDAyOVoXDTI3MDgxNTAxMzAwMlowMzEx MC8GA1UEAxMoMzM3OUU4RTY1MzVGMDFBN0VERjI0NzA1RjkzRUZDRURGRjI5QkE0 ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMZGmKGvMIzuY9bya3im R4zEOrtrXQM9lfm5epqp3hKOe1fUxk0/9F1C6PQZjduACKmqjkk0k+KrK7Y9XB1Z gpIT7gyKBV6MbSL9zeqsM66mKijSgXfczQ4nCErEoKwqyhhWWTS4vCvsaDamzs+d y139K+RTLkXqkBtsFX0vK589v8/BnwbZ7fyliRRSF9bkr2zbshKgizLcvBfNswYW k40M9pmoD2e1HYUVaEQh3Z+iuIdyu5yROoPERwmAxxdfwiPweWbs3lVC9QYy8wJ1 28L0Z1ejS0LkNwCp8Cpoh6UJIzUEnR9mMMsRmzijQh8JrZ2ggIf+p6nq2H5IoGm1 JCsCAwEAAaOCAoEwggJ9MB0GA1UdDgQWBBQzeejmU18Bp+3yRwX5Pvzt/ym6SDAf BgNVHSMEGDAWgBTRlX7FjAjzW6pr/nfkWpdAukcfnjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMFpWLXhZd0k4MXVxYV81MzVG cVhRTHBISDU0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CMzIyQTVGNDFENjYxMUUyQTNG MjdGN0M3MkZEMUZGMi8wWlYteFl3STgxdXFhXzUzNUZxWFFMcEhINTQuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH7BggrBgEFBQcBCwSB7jCB 6zBABggrBgEFBQcwBYY0cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC82LzBfBggrBgEFBQcwCoZTcnN5bmM6Ly9ycGtpLXJl cG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC82L00zbm81bE5mQWFm dDhrY0YtVDc4N2Y4cHVrZy5tZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1y ZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYI KwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwBRyzANBgkqhkiG9w0BAQsFAAOCAQEA CgD/z2SKXX+tynPMEAUQi++L1P9AEoEXo4rfpscHlX6Ub72SGC24dom81fxHBTS6 djKK0JmRNw/N9fIJXgmn5FD8DROU+F10F0cno35gTvfnocXfXbrNlzDrVOUxKe5Z RRwHGCPreMmUk3n6coU56i+1fPGWkwAogacVOB8qncKdGQupUtKva0am/2e32oss jdz8Y8bX8kt9Gfav83wE+vGdxZ4HEcDeCjGRAqE3Ezi6eZu0JengHANU5gQqYBeq sDkjX2QQpndUoFfHVEzglH9K+JNvW+3NkXEkPW2tSipylvmlVtWLirCp2UJWku1W veg6jkHNF7txGEVa+hpAVA== -----END CERTIFICATE-----Generated at Sat Sep 5 00:26:29 2026 by rpki-client