$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/ahkLoshIbchJHYaNdzjT9N0PKjw.cer File: ahkLoshIbchJHYaNdzjT9N0PKjw.cer (raw, json) Hash identifier: cNo4DVCE9M8r+mcOH3/L3rQvIH22AE8NuH3y9PAajbk= Subject key identifier: 6A:19:0B:A2:C8:48:6D:C8:49:1D:86:8D:77:38:D3:F4:DD:0F:2A:3C Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 70DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/849/ahkLoshIbchJHYaNdzjT9N0PKjw.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/849/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sat 15 Aug 2026 01:41:59 +0000 Certificate not after: Sun 15 Aug 2027 01:30:02 +0000 Subordinate resources: IP: 103.171.252.0/23 IP: 211.2.176.0/21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28891 (0x70db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Aug 15 01:41:59 2026 GMT Not After : Aug 15 01:30:02 2027 GMT Subject: CN=6A190BA2C8486DC8491D868D7738D3F4DD0F2A3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:02:b9:92:e3:51:f2:ba:43:fb:44:c6:f7:3b: c8:61:fc:ca:8f:df:5c:a0:8d:8f:91:a1:aa:42:20: ea:84:5f:0a:dc:33:58:e3:38:c0:c6:e7:48:93:2a: 2d:ec:ac:27:ed:23:12:e4:e0:ee:65:e9:15:eb:f7: 99:bf:66:00:0b:6a:a7:41:f5:70:3a:5e:ce:2e:e9: a8:90:50:74:90:40:db:7a:c4:f3:52:0f:70:6d:69: 79:d8:a8:4c:bc:e8:d2:46:cb:f3:8b:fc:bd:37:6d: 6e:54:2e:66:96:24:d4:f4:8d:89:14:e9:b0:62:5e: 47:05:de:b1:25:80:58:00:70:3d:7a:9e:ee:8c:98: bb:10:df:68:de:6a:bd:e5:0b:a6:73:b4:06:93:fa: 82:b6:cf:99:b1:a4:ca:be:92:ce:b9:97:28:7c:91: 63:dc:2e:16:4b:01:04:48:54:e1:4c:5d:b0:d2:07: f9:06:e7:09:b8:33:3f:f8:77:a4:5d:2d:55:fa:66: 4f:60:49:fb:11:cb:68:96:8b:c7:34:13:74:63:bc: b3:eb:aa:fb:68:dc:50:52:92:dc:76:d5:97:d5:6d: fa:a8:89:c4:5f:f3:6f:0a:e3:ed:20:15:ef:00:4f: bc:7c:62:50:c1:79:f0:23:9f:cf:76:c8:52:77:51: ca:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:19:0B:A2:C8:48:6D:C8:49:1D:86:8D:77:38:D3:F4:DD:0F:2A:3C X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/849/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/849/ahkLoshIbchJHYaNdzjT9N0PKjw.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.171.252.0/23 211.2.176.0/21 Signature Algorithm: sha256WithRSAEncryption 1e:07:90:d4:76:95:32:49:81:db:55:c1:bc:d2:15:98:90:5f: 3d:28:f2:a0:df:1a:9e:72:92:aa:1b:65:f6:00:6f:e0:a2:7a: 03:70:9c:de:9e:08:d1:0e:ab:9f:dd:b4:fd:58:c5:a3:5d:92: 63:0d:dc:80:52:f4:8c:fb:41:0f:8d:87:cf:a2:24:e8:64:a0: 70:9f:fd:da:86:ef:c0:2f:83:9b:6a:4d:fc:d3:24:2d:6f:63: 04:04:05:36:76:73:59:2f:20:40:4c:db:07:05:c9:0a:3a:3e: 5e:c4:c6:b9:56:db:36:61:04:c1:4c:cd:b1:ed:9f:db:2e:8b: 87:9e:d2:5c:63:85:00:59:cb:c3:91:fc:6c:0e:2f:8a:f7:c2: a2:6e:78:36:8b:c9:56:29:81:a5:ff:df:39:0d:d2:37:ce:2b: d7:a7:55:8b:73:6b:10:b1:85:03:43:3e:1e:11:67:b2:9b:b7: 53:d3:cc:81:03:fd:c7:58:74:3c:bb:4c:9d:05:23:ee:1d:f4: f2:eb:58:e2:67:e9:67:fb:8d:b2:6a:89:e5:11:ea:4b:88:e7: 68:6f:a1:1e:ca:c3:13:2e:cd:f7:02:5f:20:85:65:e5:05:8a: 45:0f:46:fa:a3:02:02:26:97:29:57:d3:dd:34:a3:af:8b:f0: 9c:e3:58:67 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICcNswDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MDgxNTAxNDE1OVoXDTI3MDgxNTAxMzAwMlowMzEx MC8GA1UEAxMoNkExOTBCQTJDODQ4NkRDODQ5MUQ4NjhENzczOEQzRjRERDBGMkEz QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKkCuZLjUfK6Q/tExvc7 yGH8yo/fXKCNj5GhqkIg6oRfCtwzWOM4wMbnSJMqLeysJ+0jEuTg7mXpFev3mb9m AAtqp0H1cDpezi7pqJBQdJBA23rE81IPcG1pedioTLzo0kbL84v8vTdtblQuZpYk 1PSNiRTpsGJeRwXesSWAWABwPXqe7oyYuxDfaN5qveULpnO0BpP6grbPmbGkyr6S zrmXKHyRY9wuFksBBEhU4UxdsNIH+QbnCbgzP/h3pF0tVfpmT2BJ+xHLaJaLxzQT dGO8s+uq+2jcUFKS3HbVl9Vt+qiJxF/zbwrj7SAV7wBPvHxiUMF58COfz3bIUndR yqECAwEAAaOCAowwggKIMB0GA1UdDgQWBBRqGQuiyEhtyEkdho13ONP03Q8qPDAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB 7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC84NDkvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzg0OS9haGtMb3No SWJjaEpIWWFOZHpqVDlOMFBLancubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBZ6v8AwQD0wKwMA0GCSqGSIb3 DQEBCwUAA4IBAQAeB5DUdpUySYHbVcG80hWYkF89KPKg3xqecpKqG2X2AG/gonoD cJzengjRDquf3bT9WMWjXZJjDdyAUvSM+0EPjYfPoiToZKBwn/3ahu/AL4Obak38 0yQtb2MEBAU2dnNZLyBATNsHBckKOj5exMa5Vts2YQTBTM2x7Z/bLouHntJcY4UA WcvDkfxsDi+K98Kibng2i8lWKYGl/985DdI3zivXp1WLc2sQsYUDQz4eEWeym7dT 08yBA/3HWHQ8u0ydBSPuHfTy61jiZ+ln+42yaonlEepLiOdob6EeysMTLs33Al8g hWXlBYpFD0b6owICJpcpV9PdNKOvi/Cc41hn -----END CERTIFICATE-----Generated at Fri Aug 21 23:57:50 2026 by rpki-client