$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/XFmEWo_N0m4cHM5k03sjRz73Pg4.cer File: XFmEWo_N0m4cHM5k03sjRz73Pg4.cer (raw, json) Hash identifier: WZmbgOJU8oY73DQ/7W5UXuB0EJfybtyD8o93c1VPs4g= Subject key identifier: 5C:59:84:5A:8F:CD:D2:6E:1C:1C:CE:64:D3:7B:23:47:3E:F7:3E:0E Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 Certificate issuer: /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Certificate serial: 16CA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20297/XFmEWo_N0m4cHM5k03sjRz73Pg4.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20297/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Wed 01 Jul 2026 01:08:26 +0000 Certificate not after: Thu 01 Jul 2027 01:02:04 +0000 Subordinate resources: IP: 162.4.194.0/23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Jul 2026 02:27:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5834 (0x16ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Validity Not Before: Jul 1 01:08:26 2026 GMT Not After : Jul 1 01:02:04 2027 GMT Subject: CN=5C59845A8FCDD26E1C1CCE64D37B23473EF73E0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:80:1d:14:e1:e8:e0:f1:5a:97:3e:1a:d9:59: 91:59:a8:1f:83:d3:f6:60:82:d3:e4:46:71:cd:69: 81:ee:94:ce:f1:d5:db:02:85:bf:19:12:d7:96:85: 60:03:6a:c3:f4:00:37:8f:65:b4:fa:9e:16:4c:16: e0:c3:20:0b:16:b9:55:d5:8e:ec:ee:81:af:a7:a1: a4:5c:b3:1e:e2:49:c0:ef:4b:bf:80:82:ac:8f:7b: 54:c3:54:89:02:ed:7e:5f:fc:30:b1:4c:da:91:2b: bc:d3:2f:68:c5:59:cc:6c:81:be:02:b8:a6:5e:68: 26:49:64:17:37:75:87:67:fd:41:4d:a5:e9:89:bc: 66:34:ea:55:ed:a1:1e:cb:d1:5e:b3:1f:cf:b8:30: 73:4d:b0:60:f8:d2:74:a9:52:17:93:9d:8f:fd:ec: 8a:9c:7d:49:0e:97:45:17:47:62:8a:3d:70:72:f9: 58:82:1a:bf:0b:29:e3:46:14:e6:2b:db:0a:1d:fa: 57:7d:bb:30:fd:cc:bb:e7:7e:8c:67:51:9e:15:52: f2:77:8a:75:61:02:33:07:03:26:aa:58:37:c2:90: 87:d1:a3:a2:ea:8e:b8:b9:45:28:92:2f:b5:e8:eb: 87:e8:08:a3:a5:c0:38:7b:53:da:bf:8d:87:c0:10: 36:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:59:84:5A:8F:CD:D2:6E:1C:1C:CE:64:D3:7B:23:47:3E:F7:3E:0E X509v3 Authority Key Identifier: keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20297/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20297/XFmEWo_N0m4cHM5k03sjRz73Pg4.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 162.4.194.0/23 Signature Algorithm: sha256WithRSAEncryption 59:0d:3e:32:ab:16:fa:77:ef:b1:b7:f7:99:98:9b:a3:28:5a: cd:37:30:8a:04:77:44:4b:37:a4:fc:72:a2:fb:59:b4:95:ed: 46:a8:e7:91:10:29:ee:0d:b0:01:7f:e2:d8:31:bf:15:58:ca: 1e:b2:bb:5b:64:61:54:44:77:1e:19:e6:58:1d:2b:d8:4e:72: e4:3b:9e:c8:fc:1a:e5:79:5b:a8:b1:f7:81:79:ce:b0:f9:ee: 4a:59:f3:c3:ff:f9:40:c0:ef:02:ae:6f:80:04:0e:21:a6:35: 1a:e8:c1:5b:ec:86:7a:cd:5f:a5:10:dc:30:b6:e6:d3:2f:cb: 8c:fa:c0:c7:9e:4f:80:49:16:04:58:95:e1:cf:0b:89:b1:77: 7b:9b:46:59:69:9b:8d:5b:4f:df:46:16:2a:fb:1b:ff:06:6c: 71:9c:e8:30:5a:bf:cb:fb:ea:d9:ab:9c:d5:83:cc:94:85:61: 8a:b2:c3:49:40:f7:ee:f0:89:82:8f:7c:a2:4f:bd:35:d7:f2: 54:dd:22:a8:61:74:ee:93:a3:5b:a0:e4:c9:9d:94:ac:45:a6: 49:98:fc:f2:58:58:06:ef:90:be:d5:74:c9:ff:65:61:fa:e1: 29:6a:a2:39:86:11:67:d2:ed:5c:53:06:18:65:43:39:c7:47: 3c:2b:31:1f -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICFsowDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyg2RjY4M0VBRTM5QTE3MzhBRTZDOTNGREYwNDFG MTE0OEU2NTM0REYyMB4XDTI2MDcwMTAxMDgyNloXDTI3MDcwMTAxMDIwNFowMzEx MC8GA1UEAxMoNUM1OTg0NUE4RkNERDI2RTFDMUNDRTY0RDM3QjIzNDczRUY3M0Uw RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANWAHRTh6ODxWpc+GtlZ kVmoH4PT9mCC0+RGcc1pge6UzvHV2wKFvxkS15aFYANqw/QAN49ltPqeFkwW4MMg Cxa5VdWO7O6Br6ehpFyzHuJJwO9Lv4CCrI97VMNUiQLtfl/8MLFM2pErvNMvaMVZ zGyBvgK4pl5oJklkFzd1h2f9QU2l6Ym8ZjTqVe2hHsvRXrMfz7gwc02wYPjSdKlS F5Odj/3sipx9SQ6XRRdHYoo9cHL5WIIavwsp40YU5ivbCh36V327MP3Mu+d+jGdR nhVS8neKdWECMwcDJqpYN8KQh9GjouqOuLlFKJIvtejrh+gIo6XAOHtT2r+Nh8AQ NisCAwEAAaOCAoswggKHMB0GA1UdDgQWBBRcWYRaj83SbhwczmTTeyNHPvc+DjAf BgNVHSMEGDAWgBRvaD6uOaFziubJP98EHxFI5lNN8jAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYjJnLXJqbWhjNHJteVRfZkJC OFJTT1pUVGZJLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFD ODgzN0M3MkZEMUZGMi9iMmctcmptaGM0cm15VF9mQkI4UlNPWlRUZkkuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAyOTcvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMjk3L1hG bUVXb19OMG00Y0hNNWswM3NqUno3M1BnNC5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGiBMIwDQYJKoZIhvcN AQELBQADggEBAFkNPjKrFvp377G395mYm6MoWs03MIoEd0RLN6T8cqL7WbSV7Uao 55EQKe4NsAF/4tgxvxVYyh6yu1tkYVREdx4Z5lgdK9hOcuQ7nsj8GuV5W6ix94F5 zrD57kpZ88P/+UDA7wKub4AEDiGmNRrowVvshnrNX6UQ3DC25tMvy4z6wMeeT4BJ FgRYleHPC4mxd3ubRllpm41bT99GFir7G/8GbHGc6DBav8v76tmrnNWDzJSFYYqy w0lA9+7wiYKPfKJPvTXX8lTdIqhhdO6To1ug5MmdlKxFpkmY/PJYWAbvkL7VdMn/ ZWH64SlqojmGEWfS7VxTBhhlQznHRzwrMR8= -----END CERTIFICATE-----Generated at Tue Jul 7 03:25:16 2026 by rpki-client