$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/hfuGICK75cxARi-_2La7gRNdZf0.cer File: hfuGICK75cxARi-_2La7gRNdZf0.cer (raw, json) Hash identifier: FiFvq7BPBQOrTRGIOn1G4QCUJ+Yyikq87aq9+vt7qcw= Subject key identifier: 85:FB:86:20:22:BB:E5:CC:40:46:2F:BF:D8:B6:BB:81:13:5D:65:FD Authority key identifier: C8:C0:FB:87:04:74:C3:E8:4C:AB:83:59:7C:46:A8:62:C4:7F:88:82 Certificate issuer: /CN=A91A73810000/serialNumber=C8C0FB870474C3E84CAB83597C46A862C47F8882 Certificate serial: 88 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yMD7hwR0w-hMq4NZfEaoYsR_iII.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/hfuGICK75cxARi-_2La7gRNdZf0.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Fri 15 May 2026 01:39:54 +0000 Certificate not after: Sat 15 May 2027 01:30:02 +0000 Subordinate resources: IP: 154.34.0.0/18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yMD7hwR0w-hMq4NZfEaoYsR_iII.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yMD7hwR0w-hMq4NZfEaoYsR_iII.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yMD7hwR0w-hMq4NZfEaoYsR_iII.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 May 2026 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=C8C0FB870474C3E84CAB83597C46A862C47F8882 Validity Not Before: May 15 01:39:54 2026 GMT Not After : May 15 01:30:02 2027 GMT Subject: CN=85FB862022BBE5CC40462FBFD8B6BB81135D65FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:3e:ea:3f:3a:47:3d:8a:0f:89:2a:ef:95:1c: fc:87:86:c2:f2:9f:19:4f:de:1e:57:50:78:26:5b: 06:a6:2b:76:da:35:86:3b:8b:cd:ed:0a:e3:f2:78: 0f:98:82:6c:79:dc:16:e5:9c:34:29:e3:b6:75:78: b8:d2:18:0e:e6:8d:68:3c:8f:3a:56:c0:69:b8:59: ab:e8:03:3e:2f:43:e5:ae:a4:a3:9a:79:2d:e9:0b: d2:4a:97:43:41:0f:28:02:0f:e5:83:7a:c3:f3:fa: dc:33:44:f6:39:69:17:dc:a1:e8:ed:15:44:a7:16: c6:4f:9f:41:ce:0a:70:bd:a6:6f:a6:f0:73:c8:f8: 6d:d3:3c:a6:e8:dc:bc:0d:a4:a2:44:fb:97:a8:d0: 17:d5:f7:b8:79:fc:b6:79:c3:2c:f8:0d:b2:08:0c: 5d:56:42:b8:33:fe:ae:69:b4:2a:9c:1f:56:e5:16: e5:a1:16:9c:c9:2e:90:fd:7f:2a:26:90:e8:20:74: 71:15:e5:8b:37:5b:48:32:4c:43:c3:d3:c6:9a:7c: c3:dd:70:69:6d:a7:a5:88:79:4e:bb:26:a1:af:d4: 56:91:51:a7:ea:dc:1e:5e:dd:ed:b4:79:db:70:91: 85:5c:27:27:ab:74:d1:a6:62:79:f7:5c:8a:71:cd: 1d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:FB:86:20:22:BB:E5:CC:40:46:2F:BF:D8:B6:BB:81:13:5D:65:FD X509v3 Authority Key Identifier: keyid:C8:C0:FB:87:04:74:C3:E8:4C:AB:83:59:7C:46:A8:62:C4:7F:88:82 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yMD7hwR0w-hMq4NZfEaoYsR_iII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yMD7hwR0w-hMq4NZfEaoYsR_iII.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/hfuGICK75cxARi-_2La7gRNdZf0.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.34.0.0/18 Signature Algorithm: sha256WithRSAEncryption 9c:d1:30:3e:5e:1f:59:bd:96:a3:27:02:98:aa:2f:d6:4d:f9: e5:6b:19:65:2e:16:79:52:74:3e:57:c1:f5:fa:79:b2:f4:9f: f9:6a:f3:4f:70:1d:fd:35:25:2c:9b:83:7e:62:44:d5:08:63: d0:23:4f:f1:76:62:18:6e:fe:a3:a1:52:61:c4:e6:e5:38:84: bf:bc:d5:ea:bb:50:57:46:5b:cc:38:01:31:d1:92:07:e6:c9: 11:65:78:c3:8c:1d:06:14:fa:db:04:c7:76:b7:e4:ec:1f:e9: c8:d9:ed:54:b5:fd:69:e4:6e:cc:88:b9:df:2b:45:6a:43:1f: 1c:12:06:cd:53:04:15:22:36:5c:a1:e0:ac:69:03:03:8d:f4: 95:41:78:2a:8e:66:21:43:08:c1:e3:dc:da:08:83:4a:b4:94: 8b:39:8b:fa:78:b6:9f:29:8a:ab:41:76:0f:2d:5b:0f:fd:a5: 12:f0:37:5d:77:65:3c:2a:f5:68:da:d5:01:26:d2:29:ee:9b: 22:a9:49:c5:08:84:fd:48:c1:73:bd:89:42:87:0f:c2:fc:c6: 95:6d:ed:51:80:63:cd:c8:42:fd:cf:59:22:14:38:8e:ec:06: 01:e6:9a:36:dc:ff:1a:b8:ce:bd:dd:12:32:0a:5c:83:f9:88: 7a:b2:33:85 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhDOEMwRkI4NzA0NzRDM0U4NENBQjgzNTk3QzQ2 QTg2MkM0N0Y4ODgyMB4XDTI2MDUxNTAxMzk1NFoXDTI3MDUxNTAxMzAwMlowMzEx MC8GA1UEAxMoODVGQjg2MjAyMkJCRTVDQzQwNDYyRkJGRDhCNkJCODExMzVENjVG RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOs+6j86Rz2KD4kq75Uc /IeGwvKfGU/eHldQeCZbBqYrdto1hjuLze0K4/J4D5iCbHncFuWcNCnjtnV4uNIY DuaNaDyPOlbAabhZq+gDPi9D5a6ko5p5LekL0kqXQ0EPKAIP5YN6w/P63DNE9jlp F9yh6O0VRKcWxk+fQc4KcL2mb6bwc8j4bdM8pujcvA2kokT7l6jQF9X3uHn8tnnD LPgNsggMXVZCuDP+rmm0KpwfVuUW5aEWnMkukP1/KiaQ6CB0cRXlizdbSDJMQ8PT xpp8w91waW2npYh5Trsmoa/UVpFRp+rcHl7d7bR523CRhVwnJ6t00aZiefdcinHN HbsCAwEAAaOCAoswggKHMB0GA1UdDgQWBBSF+4YgIrvlzEBGL7/YtruBE11l/TAf BgNVHSMEGDAWgBTIwPuHBHTD6Eyrg1l8RqhixH+IgjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAveU1EN2h3UjB3LWhNcTROWmZF YW9Zc1JfaUlJLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYy Rjg3N0M3MkZEMUZGMi95TUQ3aHdSMHctaE1xNE5aZkVhb1lzUl9pSUkuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjExMTYvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIxMTE2L2hm dUdJQ0s3NWN4QVJpLV8yTGE3Z1JOZFpmMC5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAaaIgAwDQYJKoZIhvcN AQELBQADggEBAJzRMD5eH1m9lqMnApiqL9ZN+eVrGWUuFnlSdD5XwfX6ebL0n/lq 809wHf01JSybg35iRNUIY9AjT/F2Yhhu/qOhUmHE5uU4hL+81eq7UFdGW8w4ATHR kgfmyRFleMOMHQYU+tsEx3a35Owf6cjZ7VS1/WnkbsyIud8rRWpDHxwSBs1TBBUi Nlyh4KxpAwON9JVBeCqOZiFDCMHj3NoIg0q0lIs5i/p4tp8piqtBdg8tWw/9pRLw N113ZTwq9Wja1QEm0inumyKpScUIhP1IwXO9iUKHD8L8xpVt7VGAY83IQv3PWSIU OI7sBgHmmjbc/xq4zr3dEjIKXIP5iHqyM4U= -----END CERTIFICATE-----Generated at Sat May 16 22:00:52 2026 by rpki-client