$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/hfuGICK75cxARi-_2La7gRNdZf0.cer File: hfuGICK75cxARi-_2La7gRNdZf0.cer (raw, json) Hash identifier: h8KMDfPoitKW2DXJd+MmA4Hxrxz5kTCuEMgcGvdCc1I= Subject key identifier: 85:FB:86:20:22:BB:E5:CC:40:46:2F:BF:D8:B6:BB:81:13:5D:65:FD Authority key identifier: C8:C0:FB:87:04:74:C3:E8:4C:AB:83:59:7C:46:A8:62:C4:7F:88:82 Certificate issuer: /CN=A91A73810000/serialNumber=C8C0FB870474C3E84CAB83597C46A862C47F8882 Certificate serial: 8F Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yMD7hwR0w-hMq4NZfEaoYsR_iII.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/hfuGICK75cxARi-_2La7gRNdZf0.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sat 15 Aug 2026 01:31:06 +0000 Certificate not after: Sun 15 Aug 2027 01:30:02 +0000 Subordinate resources: IP: 154.34.0.0/18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yMD7hwR0w-hMq4NZfEaoYsR_iII.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yMD7hwR0w-hMq4NZfEaoYsR_iII.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yMD7hwR0w-hMq4NZfEaoYsR_iII.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Aug 2026 14:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 143 (0x8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=C8C0FB870474C3E84CAB83597C46A862C47F8882 Validity Not Before: Aug 15 01:31:06 2026 GMT Not After : Aug 15 01:30:02 2027 GMT Subject: CN=85FB862022BBE5CC40462FBFD8B6BB81135D65FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:3e:ea:3f:3a:47:3d:8a:0f:89:2a:ef:95:1c: fc:87:86:c2:f2:9f:19:4f:de:1e:57:50:78:26:5b: 06:a6:2b:76:da:35:86:3b:8b:cd:ed:0a:e3:f2:78: 0f:98:82:6c:79:dc:16:e5:9c:34:29:e3:b6:75:78: b8:d2:18:0e:e6:8d:68:3c:8f:3a:56:c0:69:b8:59: ab:e8:03:3e:2f:43:e5:ae:a4:a3:9a:79:2d:e9:0b: d2:4a:97:43:41:0f:28:02:0f:e5:83:7a:c3:f3:fa: dc:33:44:f6:39:69:17:dc:a1:e8:ed:15:44:a7:16: c6:4f:9f:41:ce:0a:70:bd:a6:6f:a6:f0:73:c8:f8: 6d:d3:3c:a6:e8:dc:bc:0d:a4:a2:44:fb:97:a8:d0: 17:d5:f7:b8:79:fc:b6:79:c3:2c:f8:0d:b2:08:0c: 5d:56:42:b8:33:fe:ae:69:b4:2a:9c:1f:56:e5:16: e5:a1:16:9c:c9:2e:90:fd:7f:2a:26:90:e8:20:74: 71:15:e5:8b:37:5b:48:32:4c:43:c3:d3:c6:9a:7c: c3:dd:70:69:6d:a7:a5:88:79:4e:bb:26:a1:af:d4: 56:91:51:a7:ea:dc:1e:5e:dd:ed:b4:79:db:70:91: 85:5c:27:27:ab:74:d1:a6:62:79:f7:5c:8a:71:cd: 1d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:FB:86:20:22:BB:E5:CC:40:46:2F:BF:D8:B6:BB:81:13:5D:65:FD X509v3 Authority Key Identifier: keyid:C8:C0:FB:87:04:74:C3:E8:4C:AB:83:59:7C:46:A8:62:C4:7F:88:82 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yMD7hwR0w-hMq4NZfEaoYsR_iII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yMD7hwR0w-hMq4NZfEaoYsR_iII.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/hfuGICK75cxARi-_2La7gRNdZf0.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.34.0.0/18 Signature Algorithm: sha256WithRSAEncryption 00:4d:0c:2a:7c:1d:74:bb:2a:c6:a9:c5:3d:c2:58:ab:1a:79: 20:d8:d8:84:f8:7d:a1:01:7e:a0:34:79:77:ae:34:72:27:a0: f5:c1:b7:07:d3:15:61:b9:2b:bf:cc:f9:f6:84:2e:e2:e9:8c: 13:c5:74:06:ed:02:f8:e5:5c:5a:7c:f3:53:ac:ce:2d:63:0a: 00:37:30:05:a3:e4:75:aa:22:c4:5c:b3:e5:17:fd:09:bd:a3: c5:72:14:7b:5c:18:bc:d1:ca:1e:80:37:9b:12:5e:b6:20:ad: 5b:ef:c6:76:df:41:6f:e4:66:a8:4f:dd:a0:72:3f:ec:35:5d: 08:30:af:77:25:37:b4:db:b5:50:56:5d:f7:3c:5a:8e:e0:47: 66:a2:0f:4a:20:47:5b:57:f1:eb:0a:3c:26:ec:b5:2e:58:fd: ff:ee:86:92:5f:ae:54:01:a7:51:6a:9b:ea:43:90:3b:3e:fa: 85:93:4e:3d:a5:57:b4:13:85:b3:04:58:28:b4:da:04:08:5b: 6f:45:09:35:ff:17:47:31:80:d3:38:21:a1:e4:81:37:0f:44: 74:3c:23:d9:2f:de:cf:67:06:d2:08:18:f6:91:d1:d0:fa:5b: cf:3c:96:22:7c:91:1a:84:3c:7c:0b:78:c5:9d:32:a0:4e:72: 00:19:e7:bb -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhDOEMwRkI4NzA0NzRDM0U4NENBQjgzNTk3QzQ2 QTg2MkM0N0Y4ODgyMB4XDTI2MDgxNTAxMzEwNloXDTI3MDgxNTAxMzAwMlowMzEx MC8GA1UEAxMoODVGQjg2MjAyMkJCRTVDQzQwNDYyRkJGRDhCNkJCODExMzVENjVG RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOs+6j86Rz2KD4kq75Uc /IeGwvKfGU/eHldQeCZbBqYrdto1hjuLze0K4/J4D5iCbHncFuWcNCnjtnV4uNIY DuaNaDyPOlbAabhZq+gDPi9D5a6ko5p5LekL0kqXQ0EPKAIP5YN6w/P63DNE9jlp F9yh6O0VRKcWxk+fQc4KcL2mb6bwc8j4bdM8pujcvA2kokT7l6jQF9X3uHn8tnnD LPgNsggMXVZCuDP+rmm0KpwfVuUW5aEWnMkukP1/KiaQ6CB0cRXlizdbSDJMQ8PT xpp8w91waW2npYh5Trsmoa/UVpFRp+rcHl7d7bR523CRhVwnJ6t00aZiefdcinHN HbsCAwEAAaOCAoswggKHMB0GA1UdDgQWBBSF+4YgIrvlzEBGL7/YtruBE11l/TAf BgNVHSMEGDAWgBTIwPuHBHTD6Eyrg1l8RqhixH+IgjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAveU1EN2h3UjB3LWhNcTROWmZF YW9Zc1JfaUlJLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYy Rjg3N0M3MkZEMUZGMi95TUQ3aHdSMHctaE1xNE5aZkVhb1lzUl9pSUkuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjExMTYvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIxMTE2L2hm dUdJQ0s3NWN4QVJpLV8yTGE3Z1JOZFpmMC5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAaaIgAwDQYJKoZIhvcN AQELBQADggEBAABNDCp8HXS7KsapxT3CWKsaeSDY2IT4faEBfqA0eXeuNHInoPXB twfTFWG5K7/M+faELuLpjBPFdAbtAvjlXFp881Oszi1jCgA3MAWj5HWqIsRcs+UX /Qm9o8VyFHtcGLzRyh6AN5sSXrYgrVvvxnbfQW/kZqhP3aByP+w1XQgwr3clN7Tb tVBWXfc8Wo7gR2aiD0ogR1tX8esKPCbstS5Y/f/uhpJfrlQBp1Fqm+pDkDs++oWT Tj2lV7QThbMEWCi02gQIW29FCTX/F0cxgNM4IaHkgTcPRHQ8I9kv3s9nBtIIGPaR 0dD6W888liJ8kRqEPHwLeMWdMqBOcgAZ57s= -----END CERTIFICATE-----Generated at Sat Aug 15 18:20:55 2026 by rpki-client