$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/YYky9kHWUNyGDXQRrIrrbDXInQQ.cer File: YYky9kHWUNyGDXQRrIrrbDXInQQ.cer (raw, json) Hash identifier: Ng6Gx+5UxboqosH5LzNqmBOboYwiSUKmCR8w0lnvrhY= Subject key identifier: 61:89:32:F6:41:D6:50:DC:86:0D:74:11:AC:8A:EB:6C:35:C8:9D:04 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 6F53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30180/YYky9kHWUNyGDXQRrIrrbDXInQQ.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30180/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sat 15 Aug 2026 01:33:13 +0000 Certificate not after: Sun 15 Aug 2027 01:30:02 +0000 Subordinate resources: IP: 2407:d600::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 13:57:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28499 (0x6f53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Aug 15 01:33:13 2026 GMT Not After : Aug 15 01:30:02 2027 GMT Subject: CN=618932F641D650DC860D7411AC8AEB6C35C89D04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:81:36:4e:71:f5:6f:02:0e:78:a4:03:a8:43: 00:b4:fe:28:05:32:e4:96:b6:a9:68:37:b1:31:fd: de:ed:f9:7a:6f:d2:a8:ea:d2:bc:d6:ed:31:15:7f: 1e:d9:a5:61:bf:18:db:a5:9f:74:a2:ba:a4:5c:c3: 18:4e:20:80:7c:a3:2c:49:a2:cf:59:2d:38:a0:a5: b8:a1:de:61:90:0b:ba:da:4f:cd:04:d5:f6:6a:16: ed:78:f1:19:18:0a:46:46:9f:80:21:96:8f:4d:a9: d5:da:6f:2b:cc:58:09:50:64:a8:92:fd:27:34:70: 8f:99:a9:a9:ce:71:45:2e:7d:1c:83:7b:ca:4a:a6: 7c:1e:ef:41:79:7c:67:a1:82:9a:98:d5:5a:45:d1: 16:e9:bb:af:92:c3:33:6a:7b:f5:15:4f:27:3a:ae: 6d:0a:38:5b:12:10:d1:7a:82:44:8e:d3:6b:7f:e0: 02:d9:92:08:55:1e:0b:e5:76:68:c7:27:f9:bc:9d: a6:de:8a:1d:20:c2:80:13:d1:00:fa:ea:fe:29:61: e9:3d:e7:05:03:5e:3e:f8:e7:59:22:6b:04:cb:2a: 9c:b1:3c:67:57:e9:66:99:b2:a5:18:39:7b:9f:4d: 2a:b9:7e:db:c0:e3:40:d0:28:f9:89:8d:98:80:8d: d7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:89:32:F6:41:D6:50:DC:86:0D:74:11:AC:8A:EB:6C:35:C8:9D:04 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30180/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30180/YYky9kHWUNyGDXQRrIrrbDXInQQ.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2407:d600::/32 Signature Algorithm: sha256WithRSAEncryption 63:ce:30:54:b4:60:5b:6e:27:2a:2e:fb:ed:73:93:ed:72:0e: 39:f0:54:95:ff:a2:43:fc:81:a4:fd:a8:cc:75:98:3c:f2:e7: 3a:4b:d2:01:20:fc:ae:ba:0e:0a:63:32:6d:2b:43:b5:63:5d: 29:b2:64:a7:0f:e4:2b:b4:dc:cd:6a:51:66:93:0a:22:cf:4f: 8a:3a:84:5b:64:eb:be:2f:09:78:92:4e:01:46:53:49:9c:56: d1:ac:59:db:fb:ad:d2:aa:a6:db:ca:f3:79:dc:27:14:ea:63: 34:82:f2:f5:51:6f:e6:d4:dc:56:cd:46:7d:a2:98:ef:23:f9: ba:f7:50:e6:60:21:b3:a6:31:2f:f4:97:38:9a:55:ff:fa:72: dc:72:bd:39:3a:d5:32:b8:2b:a9:f9:5e:92:d3:69:14:5c:9f: ce:7d:8b:4f:fa:dd:ff:48:cf:d7:ad:31:76:94:db:77:6a:e1: b0:c9:ee:d4:53:a7:95:a9:41:e6:26:c2:32:be:b6:55:06:61: dc:af:71:e1:ac:d2:ad:50:26:86:64:1e:99:b3:06:07:78:9b: 00:5d:b3:9f:ec:ec:f7:b3:a4:59:09:2f:bd:45:bc:08:37:3b: 11:06:01:73:33:d0:cf:b2:58:dd:fb:e7:91:57:79:6b:52:30: 9c:a9:a5:99 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICb1MwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MDgxNTAxMzMxM1oXDTI3MDgxNTAxMzAwMlowMzEx MC8GA1UEAxMoNjE4OTMyRjY0MUQ2NTBEQzg2MEQ3NDExQUM4QUVCNkMzNUM4OUQw NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJWBNk5x9W8CDnikA6hD ALT+KAUy5Ja2qWg3sTH93u35em/SqOrSvNbtMRV/HtmlYb8Y26WfdKK6pFzDGE4g gHyjLEmiz1ktOKCluKHeYZALutpPzQTV9moW7XjxGRgKRkafgCGWj02p1dpvK8xY CVBkqJL9JzRwj5mpqc5xRS59HIN7ykqmfB7vQXl8Z6GCmpjVWkXRFum7r5LDM2p7 9RVPJzqubQo4WxIQ0XqCRI7Ta3/gAtmSCFUeC+V2aMcn+bydpt6KHSDCgBPRAPrq /ilh6T3nBQNePvjnWSJrBMsqnLE8Z1fpZpmypRg5e59NKrl+28DjQNAo+YmNmICN 1/ECAwEAAaOCAowwggKIMB0GA1UdDgQWBBRhiTL2QdZQ3IYNdBGsiutsNcidBDAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAxODAvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMTgwL1lZ a3k5a0hXVU55R0RYUVJySXJyYkRYSW5RUS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkB9YAMA0GCSqGSIb3 DQEBCwUAA4IBAQBjzjBUtGBbbicqLvvtc5Ptcg458FSV/6JD/IGk/ajMdZg88uc6 S9IBIPyuug4KYzJtK0O1Y10psmSnD+QrtNzNalFmkwoiz0+KOoRbZOu+Lwl4kk4B RlNJnFbRrFnb+63SqqbbyvN53CcU6mM0gvL1UW/m1NxWzUZ9opjvI/m691DmYCGz pjEv9Jc4mlX/+nLccr05OtUyuCup+V6S02kUXJ/OfYtP+t3/SM/XrTF2lNt3auGw ye7UU6eVqUHmJsIyvrZVBmHcr3HhrNKtUCaGZB6ZswYHeJsAXbOf7Oz3s6RZCS+9 RbwINzsRBgFzM9DPsljd++eRV3lrUjCcqaWZ -----END CERTIFICATE-----Generated at Fri Sep 11 15:28:01 2026 by rpki-client