$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/hfuGICK75cxARi-_2La7gRNdZf0.cer File: hfuGICK75cxARi-_2La7gRNdZf0.cer (raw, json) Hash identifier: hK/IlxDlv7Wetic1nsuOTdljjktAS1anDM6mWyU0c64= Subject key identifier: 85:FB:86:20:22:BB:E5:CC:40:46:2F:BF:D8:B6:BB:81:13:5D:65:FD Authority key identifier: C8:C0:FB:87:04:74:C3:E8:4C:AB:83:59:7C:46:A8:62:C4:7F:88:82 Certificate issuer: /CN=A91A73810000/serialNumber=C8C0FB870474C3E84CAB83597C46A862C47F8882 Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yMD7hwR0w-hMq4NZfEaoYsR_iII.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/hfuGICK75cxARi-_2La7gRNdZf0.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Mon 15 Jun 2026 01:43:24 +0000 Certificate not after: Tue 15 Jun 2027 01:30:02 +0000 Subordinate resources: IP: 154.34.0.0/18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yMD7hwR0w-hMq4NZfEaoYsR_iII.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yMD7hwR0w-hMq4NZfEaoYsR_iII.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yMD7hwR0w-hMq4NZfEaoYsR_iII.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 Jul 2026 15:25:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=C8C0FB870474C3E84CAB83597C46A862C47F8882 Validity Not Before: Jun 15 01:43:24 2026 GMT Not After : Jun 15 01:30:02 2027 GMT Subject: CN=85FB862022BBE5CC40462FBFD8B6BB81135D65FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:3e:ea:3f:3a:47:3d:8a:0f:89:2a:ef:95:1c: fc:87:86:c2:f2:9f:19:4f:de:1e:57:50:78:26:5b: 06:a6:2b:76:da:35:86:3b:8b:cd:ed:0a:e3:f2:78: 0f:98:82:6c:79:dc:16:e5:9c:34:29:e3:b6:75:78: b8:d2:18:0e:e6:8d:68:3c:8f:3a:56:c0:69:b8:59: ab:e8:03:3e:2f:43:e5:ae:a4:a3:9a:79:2d:e9:0b: d2:4a:97:43:41:0f:28:02:0f:e5:83:7a:c3:f3:fa: dc:33:44:f6:39:69:17:dc:a1:e8:ed:15:44:a7:16: c6:4f:9f:41:ce:0a:70:bd:a6:6f:a6:f0:73:c8:f8: 6d:d3:3c:a6:e8:dc:bc:0d:a4:a2:44:fb:97:a8:d0: 17:d5:f7:b8:79:fc:b6:79:c3:2c:f8:0d:b2:08:0c: 5d:56:42:b8:33:fe:ae:69:b4:2a:9c:1f:56:e5:16: e5:a1:16:9c:c9:2e:90:fd:7f:2a:26:90:e8:20:74: 71:15:e5:8b:37:5b:48:32:4c:43:c3:d3:c6:9a:7c: c3:dd:70:69:6d:a7:a5:88:79:4e:bb:26:a1:af:d4: 56:91:51:a7:ea:dc:1e:5e:dd:ed:b4:79:db:70:91: 85:5c:27:27:ab:74:d1:a6:62:79:f7:5c:8a:71:cd: 1d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:FB:86:20:22:BB:E5:CC:40:46:2F:BF:D8:B6:BB:81:13:5D:65:FD X509v3 Authority Key Identifier: keyid:C8:C0:FB:87:04:74:C3:E8:4C:AB:83:59:7C:46:A8:62:C4:7F:88:82 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yMD7hwR0w-hMq4NZfEaoYsR_iII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yMD7hwR0w-hMq4NZfEaoYsR_iII.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/hfuGICK75cxARi-_2La7gRNdZf0.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.34.0.0/18 Signature Algorithm: sha256WithRSAEncryption b6:37:34:ea:56:47:ff:ff:c2:78:53:4f:b8:b6:8b:4d:d6:74: ad:1b:4e:4d:55:99:d4:84:7d:b6:7e:2e:6b:42:52:e0:cb:bd: 82:a3:cf:0a:15:61:5f:c8:21:ea:21:af:ee:33:10:28:1a:48: 1a:c3:53:15:0d:25:d4:78:d2:60:b2:98:15:46:03:74:1b:fd: 9f:7c:ba:1c:f0:8f:ee:c0:57:7f:b7:91:3c:92:e9:57:90:fc: 3a:7a:b5:cf:6e:f0:e3:0e:01:29:4d:12:91:7d:76:b8:49:0e: 2d:8a:98:11:49:af:55:5e:1a:7d:48:76:f2:48:f9:28:4a:8c: 58:62:f4:eb:a7:79:2b:bf:f7:91:c9:70:98:9b:78:f3:e0:16: b4:ff:56:46:23:8a:0b:cf:a9:71:bb:17:1c:52:9a:00:ca:d3: 81:ef:35:ca:a1:81:1b:43:4a:83:61:2c:46:f9:5a:5c:6d:9c: 03:cb:6f:ba:7d:dc:4b:b7:46:e9:79:02:ea:6c:79:4f:34:39: 7f:29:52:98:d2:4d:04:f8:59:74:b7:c3:0a:c8:18:80:d7:b9: ef:8c:de:7e:79:e8:41:34:36:ef:90:62:3d:6e:77:52:6f:d7: 20:56:13:c4:c0:19:e8:0d:5c:86:7c:2d:82:1f:56:08:c7:a6: 2a:98:a4:4f -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICAIowDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhDOEMwRkI4NzA0NzRDM0U4NENBQjgzNTk3QzQ2 QTg2MkM0N0Y4ODgyMB4XDTI2MDYxNTAxNDMyNFoXDTI3MDYxNTAxMzAwMlowMzEx MC8GA1UEAxMoODVGQjg2MjAyMkJCRTVDQzQwNDYyRkJGRDhCNkJCODExMzVENjVG RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOs+6j86Rz2KD4kq75Uc /IeGwvKfGU/eHldQeCZbBqYrdto1hjuLze0K4/J4D5iCbHncFuWcNCnjtnV4uNIY DuaNaDyPOlbAabhZq+gDPi9D5a6ko5p5LekL0kqXQ0EPKAIP5YN6w/P63DNE9jlp F9yh6O0VRKcWxk+fQc4KcL2mb6bwc8j4bdM8pujcvA2kokT7l6jQF9X3uHn8tnnD LPgNsggMXVZCuDP+rmm0KpwfVuUW5aEWnMkukP1/KiaQ6CB0cRXlizdbSDJMQ8PT xpp8w91waW2npYh5Trsmoa/UVpFRp+rcHl7d7bR523CRhVwnJ6t00aZiefdcinHN HbsCAwEAAaOCAoswggKHMB0GA1UdDgQWBBSF+4YgIrvlzEBGL7/YtruBE11l/TAf BgNVHSMEGDAWgBTIwPuHBHTD6Eyrg1l8RqhixH+IgjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAveU1EN2h3UjB3LWhNcTROWmZF YW9Zc1JfaUlJLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYy Rjg3N0M3MkZEMUZGMi95TUQ3aHdSMHctaE1xNE5aZkVhb1lzUl9pSUkuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjExMTYvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIxMTE2L2hm dUdJQ0s3NWN4QVJpLV8yTGE3Z1JOZFpmMC5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAaaIgAwDQYJKoZIhvcN AQELBQADggEBALY3NOpWR///wnhTT7i2i03WdK0bTk1VmdSEfbZ+LmtCUuDLvYKj zwoVYV/IIeohr+4zECgaSBrDUxUNJdR40mCymBVGA3Qb/Z98uhzwj+7AV3+3kTyS 6VeQ/Dp6tc9u8OMOASlNEpF9drhJDi2KmBFJr1VeGn1IdvJI+ShKjFhi9OuneSu/ 95HJcJibePPgFrT/VkYjigvPqXG7FxxSmgDK04HvNcqhgRtDSoNhLEb5WlxtnAPL b7p93Eu3Rul5AupseU80OX8pUpjSTQT4WXS3wwrIGIDXue+M3n556EE0Nu+QYj1u d1Jv1yBWE8TAGegNXIZ8LYIfVgjHpiqYpE8= -----END CERTIFICATE-----Generated at Wed Jul 1 02:16:27 2026 by rpki-client