$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/Z1gV23NJwqz7xIqnUwZSAFDCYkg.cer File: Z1gV23NJwqz7xIqnUwZSAFDCYkg.cer (raw, json) Hash identifier: jkp7MQwZwTOXXYrEmaFT0almuay6Y7gD2tk7ZOpEaIs= Subject key identifier: 67:58:15:DB:73:49:C2:AC:FB:C4:8A:A7:53:06:52:00:50:C2:62:48 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 6EE2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30359/Z1gV23NJwqz7xIqnUwZSAFDCYkg.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30359/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sat 15 Aug 2026 01:31:05 +0000 Certificate not after: Sun 15 Aug 2027 01:30:02 +0000 Subordinate resources: IP: 2405:8500::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28386 (0x6ee2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Aug 15 01:31:05 2026 GMT Not After : Aug 15 01:30:02 2027 GMT Subject: CN=675815DB7349C2ACFBC48AA75306520050C26248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e0:40:e6:6b:c6:85:0d:0e:6d:bf:b3:31:a7: c6:c7:40:94:06:99:eb:94:ed:ad:df:6d:bc:e7:5b: 80:9c:d4:04:45:38:e9:13:10:fd:70:9a:f1:6f:24: 34:38:d6:08:9c:b6:81:25:45:58:c6:67:14:69:8a: b7:ee:c6:68:4f:69:d0:b8:24:88:94:27:06:10:99: 54:aa:f0:5f:f0:59:21:b3:07:36:78:cc:29:f0:ad: 4a:d1:ad:40:0b:f4:32:79:e9:68:df:d4:ac:3f:29: 98:a6:cf:7d:1a:94:cb:8c:17:fa:43:4b:e7:18:5f: 45:00:df:9c:79:77:e1:84:3b:b3:ef:85:4c:63:ad: 11:e3:56:64:90:7b:b7:c3:e3:6a:88:59:87:88:11: de:8c:a1:c1:e5:55:63:e4:0a:25:7f:76:8b:5c:5e: 35:f3:1d:65:e7:ed:8a:c3:b1:50:19:d2:da:b3:78: 4c:6f:55:af:53:a6:3b:9f:38:0d:a9:30:65:5d:35: 86:94:e8:80:65:da:cb:16:32:81:0d:20:31:8d:51: b5:6e:6a:29:30:0d:b8:b3:3d:5b:3b:c8:db:62:bf: bf:26:97:f3:93:e3:fb:f1:5a:10:b3:3a:b1:92:23: 58:8c:d5:bf:ed:9e:d2:cb:35:0c:3d:06:45:36:b3: fa:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:58:15:DB:73:49:C2:AC:FB:C4:8A:A7:53:06:52:00:50:C2:62:48 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30359/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30359/Z1gV23NJwqz7xIqnUwZSAFDCYkg.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2405:8500::/32 Signature Algorithm: sha256WithRSAEncryption 7c:28:4a:55:cd:af:32:b9:2a:1d:55:0f:a1:03:ab:e9:fe:c1: b8:40:5c:a0:fe:65:da:6a:85:36:f9:6b:c5:3e:f3:b0:99:ce: 7b:58:d5:23:a7:33:17:90:7e:b6:97:f3:a7:13:f1:b9:19:44: ef:04:bb:09:fd:ac:67:cc:a9:6d:ce:b9:2c:21:44:c8:3f:39: 81:d9:5e:b4:33:cf:c4:92:d8:9a:f0:fe:c9:80:16:83:79:13: 5b:74:14:e1:23:79:d4:5b:39:ef:ef:13:2e:05:61:56:2c:ec: b8:20:cc:a2:62:fa:c8:58:84:71:ac:15:6a:f0:bd:3a:b4:55: 2b:4d:6f:c5:6d:eb:0a:c5:a9:4b:e5:02:73:f4:bc:5e:99:2b: d0:e0:2a:84:ba:7e:7b:2a:51:fc:bd:40:4d:80:99:b3:ad:16: 30:47:32:77:ad:9a:f5:6b:0f:ed:96:2c:6d:b3:28:ac:3e:e5: ab:44:ff:f0:a1:b1:50:ef:4b:80:a0:39:47:78:2b:50:db:81: 8d:37:5d:0a:26:b1:e3:98:7b:2e:5b:f1:40:8d:22:08:73:6c: c6:5c:1e:3b:9c:35:b3:8b:bf:66:86:a5:fb:b7:cb:11:69:e7: 7c:37:ae:9e:9b:71:7d:5a:86:c8:19:bd:5e:8d:ee:69:89:4a: 5d:1a:86:ae -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICbuIwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MDgxNTAxMzEwNVoXDTI3MDgxNTAxMzAwMlowMzEx MC8GA1UEAxMoNjc1ODE1REI3MzQ5QzJBQ0ZCQzQ4QUE3NTMwNjUyMDA1MEMyNjI0 ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL/gQOZrxoUNDm2/szGn xsdAlAaZ65Ttrd9tvOdbgJzUBEU46RMQ/XCa8W8kNDjWCJy2gSVFWMZnFGmKt+7G aE9p0LgkiJQnBhCZVKrwX/BZIbMHNnjMKfCtStGtQAv0MnnpaN/UrD8pmKbPfRqU y4wX+kNL5xhfRQDfnHl34YQ7s++FTGOtEeNWZJB7t8PjaohZh4gR3oyhweVVY+QK JX92i1xeNfMdZeftisOxUBnS2rN4TG9Vr1OmO584DakwZV01hpTogGXayxYygQ0g MY1RtW5qKTANuLM9WzvI22K/vyaX85Pj+/FaELM6sZIjWIzVv+2e0ss1DD0GRTaz +pECAwEAAaOCAowwggKIMB0GA1UdDgQWBBRnWBXbc0nCrPvEiqdTBlIAUMJiSDAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAzNTkvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMzU5L1ox Z1YyM05Kd3F6N3hJcW5Vd1pTQUZEQ1lrZy5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBYUAMA0GCSqGSIb3 DQEBCwUAA4IBAQB8KEpVza8yuSodVQ+hA6vp/sG4QFyg/mXaaoU2+WvFPvOwmc57 WNUjpzMXkH62l/OnE/G5GUTvBLsJ/axnzKltzrksIUTIPzmB2V60M8/Ektia8P7J gBaDeRNbdBThI3nUWznv7xMuBWFWLOy4IMyiYvrIWIRxrBVq8L06tFUrTW/FbesK xalL5QJz9LxemSvQ4CqEun57KlH8vUBNgJmzrRYwRzJ3rZr1aw/tlixtsyisPuWr RP/wobFQ70uAoDlHeCtQ24GNN10KJrHjmHsuW/FAjSIIc2zGXB47nDWzi79mhqX7 t8sRaed8N66em3F9WobIGb1eje5piUpdGoau -----END CERTIFICATE-----Generated at Fri Aug 21 23:57:57 2026 by rpki-client