$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/hKujeIkYZIXdYwas0wAR8a4F8EI.cer File: hKujeIkYZIXdYwas0wAR8a4F8EI.cer (raw, json) Hash identifier: aK4+jdA2C2hmwTZ/DNbVVLnGA4L5RKle4Fc8BanwEBA= Subject key identifier: 84:AB:A3:78:89:18:64:85:DD:63:06:AC:D3:00:11:F1:AE:05:F0:42 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 6B1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30458/hKujeIkYZIXdYwas0wAR8a4F8EI.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30458/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Mon 15 Jun 2026 01:36:13 +0000 Certificate not after: Tue 15 Jun 2027 01:30:02 +0000 Subordinate resources: IP: 2402:54a0::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Jul 2026 09:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27422 (0x6b1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Jun 15 01:36:13 2026 GMT Not After : Jun 15 01:30:02 2027 GMT Subject: CN=84ABA37889186485DD6306ACD30011F1AE05F042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:23:9a:03:fb:61:0b:45:f3:bd:d0:44:14:8c: ee:fa:21:90:aa:f7:c5:3d:1d:09:bf:d3:7c:8e:79: 0a:0e:19:bf:a1:e9:c0:6e:ed:70:d8:3b:aa:ac:d8: ea:31:5e:2c:44:a0:a4:08:fb:f1:b0:4b:77:3a:6f: b9:29:19:48:8b:bd:93:a1:21:c2:5f:7c:d3:94:cb: 04:ec:b1:80:61:43:4b:3f:98:a5:52:fb:2d:2b:d3: 68:2a:58:9d:59:fb:7a:90:78:72:68:d4:8b:88:36: 52:02:6c:5a:5c:b6:e2:b0:64:00:5f:10:1c:eb:6f: ae:c9:0f:fb:c1:d6:51:90:46:f5:61:21:03:31:dd: 64:f1:e7:d8:5c:3f:0a:1e:75:80:b9:d3:39:a8:31: d6:24:60:76:44:ce:5f:0b:41:70:93:21:8f:4e:fd: 8b:64:ac:de:08:3f:44:f3:f7:c9:f8:13:1d:0b:87: 61:2d:9a:af:04:ec:83:3e:5f:96:17:fd:ba:9b:77: 50:0b:0a:0b:fc:3a:a4:84:d6:f7:48:88:73:80:82: f8:37:e1:17:49:4e:17:0a:5f:b8:ec:0f:88:4d:4c: b9:7f:8d:ac:0b:a6:3f:7c:4f:00:54:40:f8:6c:4d: d6:47:dc:af:76:89:66:fb:92:70:35:d6:7c:58:be: ed:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:AB:A3:78:89:18:64:85:DD:63:06:AC:D3:00:11:F1:AE:05:F0:42 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30458/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30458/hKujeIkYZIXdYwas0wAR8a4F8EI.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:54a0::/32 Signature Algorithm: sha256WithRSAEncryption 86:72:b7:fe:4e:c8:4e:b3:74:55:7e:4d:53:7e:53:d5:61:e2: f7:d5:35:69:13:fc:f3:d6:7c:92:06:88:38:77:94:47:d0:1d: dc:8e:f8:4a:a8:d1:bb:9f:59:45:0c:a4:0d:b3:36:32:fe:4e: 9f:1c:f6:32:ce:c6:b9:54:fa:61:f2:b3:56:ba:2a:d3:e1:7b: 88:22:a0:5c:b7:cd:4c:4a:11:a1:5b:3c:44:74:b1:1b:22:0f: 27:88:50:a8:17:5d:21:63:44:36:46:94:33:36:98:48:94:8b: ed:3b:ef:90:b7:1c:5a:2a:44:23:9c:e2:db:9c:f0:1e:d3:4c: 02:ff:54:c8:30:bc:5d:87:c3:da:ee:ec:65:0a:da:0e:bb:53: 15:7d:5a:2b:0f:b3:8f:24:a6:77:83:2a:80:20:dd:97:88:6a: c0:af:32:5c:d7:89:a3:a0:9e:ed:7d:82:b7:61:0a:c1:de:6b: c2:4b:45:3b:41:13:93:21:dd:6c:c0:f3:b3:b7:11:15:65:b3: d8:69:dc:52:f4:03:13:8a:db:29:62:62:24:33:f2:4f:89:c0: 5f:a0:1a:06:82:d7:5a:84:b4:63:9c:07:75:dd:dd:38:d8:ce: 9a:8d:05:66:5c:fc:2b:e8:2a:a0:81:84:3f:13:d7:72:a6:16: fd:be:36:1b -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICax4wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MDYxNTAxMzYxM1oXDTI3MDYxNTAxMzAwMlowMzEx MC8GA1UEAxMoODRBQkEzNzg4OTE4NjQ4NURENjMwNkFDRDMwMDExRjFBRTA1RjA0 MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMIjmgP7YQtF873QRBSM 7vohkKr3xT0dCb/TfI55Cg4Zv6HpwG7tcNg7qqzY6jFeLESgpAj78bBLdzpvuSkZ SIu9k6Ehwl9805TLBOyxgGFDSz+YpVL7LSvTaCpYnVn7epB4cmjUi4g2UgJsWly2 4rBkAF8QHOtvrskP+8HWUZBG9WEhAzHdZPHn2Fw/Ch51gLnTOagx1iRgdkTOXwtB cJMhj079i2Ss3gg/RPP3yfgTHQuHYS2arwTsgz5flhf9upt3UAsKC/w6pITW90iI c4CC+DfhF0lOFwpfuOwPiE1MuX+NrAumP3xPAFRA+GxN1kfcr3aJZvuScDXWfFi+ 7WECAwEAAaOCAowwggKIMB0GA1UdDgQWBBSEq6N4iRhkhd1jBqzTABHxrgXwQjAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzA0NTgvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwNDU4L2hL dWplSWtZWklYZFl3YXMwd0FSOGE0RjhFSS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAlSgMA0GCSqGSIb3 DQEBCwUAA4IBAQCGcrf+TshOs3RVfk1TflPVYeL31TVpE/zz1nySBog4d5RH0B3c jvhKqNG7n1lFDKQNszYy/k6fHPYyzsa5VPph8rNWuirT4XuIIqBct81MShGhWzxE dLEbIg8niFCoF10hY0Q2RpQzNphIlIvtO++QtxxaKkQjnOLbnPAe00wC/1TIMLxd h8Pa7uxlCtoOu1MVfVorD7OPJKZ3gyqAIN2XiGrArzJc14mjoJ7tfYK3YQrB3mvC S0U7QROTId1swPOztxEVZbPYadxS9AMTitspYmIkM/JPicBfoBoGgtdahLRjnAd1 3d042M6ajQVmXPwr6CqggYQ/E9dyphb9vjYb -----END CERTIFICATE-----Generated at Tue Jul 7 11:46:50 2026 by rpki-client