$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/XFmEWo_N0m4cHM5k03sjRz73Pg4.cer File: XFmEWo_N0m4cHM5k03sjRz73Pg4.cer (raw, json) Hash identifier: shAFW3D/9aGRY188/M3Oqq94SYLlXkH83M0eMxEzh/Q= Subject key identifier: 5C:59:84:5A:8F:CD:D2:6E:1C:1C:CE:64:D3:7B:23:47:3E:F7:3E:0E Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 Certificate issuer: /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Certificate serial: 177B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20297/XFmEWo_N0m4cHM5k03sjRz73Pg4.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20297/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sat 15 Aug 2026 01:34:50 +0000 Certificate not after: Sun 15 Aug 2027 01:30:02 +0000 Subordinate resources: IP: 162.4.194.0/23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 28 Aug 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6011 (0x177b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Validity Not Before: Aug 15 01:34:50 2026 GMT Not After : Aug 15 01:30:02 2027 GMT Subject: CN=5C59845A8FCDD26E1C1CCE64D37B23473EF73E0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:80:1d:14:e1:e8:e0:f1:5a:97:3e:1a:d9:59: 91:59:a8:1f:83:d3:f6:60:82:d3:e4:46:71:cd:69: 81:ee:94:ce:f1:d5:db:02:85:bf:19:12:d7:96:85: 60:03:6a:c3:f4:00:37:8f:65:b4:fa:9e:16:4c:16: e0:c3:20:0b:16:b9:55:d5:8e:ec:ee:81:af:a7:a1: a4:5c:b3:1e:e2:49:c0:ef:4b:bf:80:82:ac:8f:7b: 54:c3:54:89:02:ed:7e:5f:fc:30:b1:4c:da:91:2b: bc:d3:2f:68:c5:59:cc:6c:81:be:02:b8:a6:5e:68: 26:49:64:17:37:75:87:67:fd:41:4d:a5:e9:89:bc: 66:34:ea:55:ed:a1:1e:cb:d1:5e:b3:1f:cf:b8:30: 73:4d:b0:60:f8:d2:74:a9:52:17:93:9d:8f:fd:ec: 8a:9c:7d:49:0e:97:45:17:47:62:8a:3d:70:72:f9: 58:82:1a:bf:0b:29:e3:46:14:e6:2b:db:0a:1d:fa: 57:7d:bb:30:fd:cc:bb:e7:7e:8c:67:51:9e:15:52: f2:77:8a:75:61:02:33:07:03:26:aa:58:37:c2:90: 87:d1:a3:a2:ea:8e:b8:b9:45:28:92:2f:b5:e8:eb: 87:e8:08:a3:a5:c0:38:7b:53:da:bf:8d:87:c0:10: 36:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:59:84:5A:8F:CD:D2:6E:1C:1C:CE:64:D3:7B:23:47:3E:F7:3E:0E X509v3 Authority Key Identifier: keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20297/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20297/XFmEWo_N0m4cHM5k03sjRz73Pg4.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 162.4.194.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:21:ea:47:ef:13:04:70:34:0f:f1:b7:55:f9:14:97:9e:1b: 0d:39:07:a1:94:64:ea:1e:2c:8e:ea:7c:b5:03:cb:20:bd:57: e2:93:6d:8f:37:f6:6d:a6:1b:7b:51:5f:b2:51:21:e0:b8:94: 1e:e4:1d:e4:6a:ee:bb:09:12:95:72:1a:aa:63:bc:78:74:f7: d5:60:ba:21:46:5b:66:de:92:7c:87:e3:ee:1b:eb:25:0c:ab: 13:32:6d:e1:48:c5:33:b6:68:44:32:e9:93:dd:74:42:09:1c: 1f:fa:4a:43:7b:d4:43:5d:6f:02:a0:93:69:a1:40:24:dc:42: 95:cf:c0:4e:ad:15:ff:f6:bb:90:41:db:7e:44:c2:bf:c8:14: 47:89:0d:b7:10:38:8b:41:f7:2d:ef:2d:81:c4:39:90:dd:b5: e7:7e:39:9f:95:03:a1:06:22:57:db:3c:6c:11:06:52:a1:61: 72:e9:3a:b1:ab:06:5b:e4:0e:78:85:be:62:8c:c2:c3:c2:9c: e9:ea:6f:14:ae:c6:40:94:c2:87:c5:78:fc:2e:a8:68:2a:e2: 2f:d5:cf:4c:07:8b:1a:a8:03:22:b1:1b:ef:01:60:be:06:f6: 9e:a6:65:ca:12:63:4f:da:0c:09:cc:60:8d:82:ef:a1:e6:84: e5:d3:a3:84 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICF3swDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyg2RjY4M0VBRTM5QTE3MzhBRTZDOTNGREYwNDFG MTE0OEU2NTM0REYyMB4XDTI2MDgxNTAxMzQ1MFoXDTI3MDgxNTAxMzAwMlowMzEx MC8GA1UEAxMoNUM1OTg0NUE4RkNERDI2RTFDMUNDRTY0RDM3QjIzNDczRUY3M0Uw RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANWAHRTh6ODxWpc+GtlZ kVmoH4PT9mCC0+RGcc1pge6UzvHV2wKFvxkS15aFYANqw/QAN49ltPqeFkwW4MMg Cxa5VdWO7O6Br6ehpFyzHuJJwO9Lv4CCrI97VMNUiQLtfl/8MLFM2pErvNMvaMVZ zGyBvgK4pl5oJklkFzd1h2f9QU2l6Ym8ZjTqVe2hHsvRXrMfz7gwc02wYPjSdKlS F5Odj/3sipx9SQ6XRRdHYoo9cHL5WIIavwsp40YU5ivbCh36V327MP3Mu+d+jGdR nhVS8neKdWECMwcDJqpYN8KQh9GjouqOuLlFKJIvtejrh+gIo6XAOHtT2r+Nh8AQ NisCAwEAAaOCAoswggKHMB0GA1UdDgQWBBRcWYRaj83SbhwczmTTeyNHPvc+DjAf BgNVHSMEGDAWgBRvaD6uOaFziubJP98EHxFI5lNN8jAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYjJnLXJqbWhjNHJteVRfZkJC OFJTT1pUVGZJLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFD ODgzN0M3MkZEMUZGMi9iMmctcmptaGM0cm15VF9mQkI4UlNPWlRUZkkuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAyOTcvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMjk3L1hG bUVXb19OMG00Y0hNNWswM3NqUno3M1BnNC5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGiBMIwDQYJKoZIhvcN AQELBQADggEBAF0h6kfvEwRwNA/xt1X5FJeeGw05B6GUZOoeLI7qfLUDyyC9V+KT bY839m2mG3tRX7JRIeC4lB7kHeRq7rsJEpVyGqpjvHh099VguiFGW2beknyH4+4b 6yUMqxMybeFIxTO2aEQy6ZPddEIJHB/6SkN71ENdbwKgk2mhQCTcQpXPwE6tFf/2 u5BB235Ewr/IFEeJDbcQOItB9y3vLYHEOZDdted+OZ+VA6EGIlfbPGwRBlKhYXLp OrGrBlvkDniFvmKMwsPCnOnqbxSuxkCUwofFePwuqGgq4i/Vz0wHixqoAyKxG+8B YL4G9p6mZcoSY0/aDAnMYI2C76HmhOXTo4Q= -----END CERTIFICATE-----Generated at Fri Aug 21 06:31:03 2026 by rpki-client