$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/q2yEZLBStyD10sACDmQmtsftGGs.cer File: q2yEZLBStyD10sACDmQmtsftGGs.cer (raw, json) Hash identifier: /zAcxpRlURdZq2VtG5r2XxQzd3ZxpcWvVKLh8AQzggI= Subject key identifier: AB:6C:84:64:B0:52:B7:20:F5:D2:C0:02:0E:64:26:B6:C7:ED:18:6B Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 6C21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30323/q2yEZLBStyD10sACDmQmtsftGGs.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30323/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Mon 15 Jun 2026 01:44:18 +0000 Certificate not after: Tue 15 Jun 2027 01:30:02 +0000 Subordinate resources: IP: 2402:c840::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Jul 2026 09:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27681 (0x6c21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Jun 15 01:44:18 2026 GMT Not After : Jun 15 01:30:02 2027 GMT Subject: CN=AB6C8464B052B720F5D2C0020E6426B6C7ED186B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b9:3f:74:49:c7:35:ae:fe:42:62:bf:12:cf: 3c:88:59:43:85:96:f3:e2:a7:7c:b4:7c:d4:9b:a8: ff:3b:7b:eb:e5:dc:69:3b:ba:b5:d7:6c:df:48:bb: 27:52:ac:b6:b4:66:a6:10:56:c7:26:0f:b4:f2:24: 1c:ce:98:b4:3f:b3:44:01:fb:d2:88:16:73:2f:86: 73:53:b6:e9:02:ae:54:b7:02:44:a0:1f:f0:c2:47: 17:51:31:41:28:87:02:f7:db:0c:be:1c:57:77:fe: 72:8a:c1:64:45:35:48:41:ed:af:4f:bd:19:c2:30: b2:3a:a1:76:fd:ca:0e:2b:37:5a:8c:d1:74:26:5b: 66:4b:bf:1a:2e:ad:04:d6:f6:35:30:fd:9f:81:44: 4d:2b:00:65:33:88:7b:f6:62:9c:ac:0f:cd:7d:5d: 88:5d:49:ac:90:f2:a8:71:da:35:5c:9b:5f:62:ef: 1f:f2:1b:48:74:e1:53:58:56:a4:fe:e4:ac:e1:f2: 88:c8:2d:ab:1d:42:9c:c0:be:89:4e:11:5a:26:f4: 86:d4:45:28:f7:01:1c:e5:0e:a0:db:77:de:bc:6f: 8a:2f:77:4d:15:88:6f:a2:34:19:e8:93:6c:1d:09: ab:47:33:2e:e4:29:3c:75:b1:53:e4:80:92:b1:94: 9a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:6C:84:64:B0:52:B7:20:F5:D2:C0:02:0E:64:26:B6:C7:ED:18:6B X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30323/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30323/q2yEZLBStyD10sACDmQmtsftGGs.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:c840::/32 Signature Algorithm: sha256WithRSAEncryption 27:de:63:f2:13:28:20:da:bf:a6:b6:38:49:d2:83:22:4a:45: cd:ab:15:52:5a:48:b8:3c:31:58:ba:e7:cf:78:a4:b4:81:57: 12:99:05:ea:77:b1:91:e4:58:6f:df:01:95:13:8a:4a:d5:2c: 8b:4c:c8:27:20:26:7b:76:e8:d0:88:64:0e:b7:a2:f0:39:2d: 77:88:c7:5d:b6:4c:7a:8a:6d:c3:9e:eb:ff:da:cc:d7:16:8b: 3e:da:0a:8f:7f:bb:0e:3f:74:ba:fa:14:00:c9:a1:b4:13:ed: 92:91:4f:81:43:60:d9:fe:1b:d9:db:34:cb:94:94:c7:ca:31: 79:50:e5:ff:da:0b:0c:8e:f3:ae:2d:9a:17:cd:dd:4b:07:c5: a8:95:08:01:7a:31:c9:1b:df:66:86:82:ba:e0:a0:ca:5d:95: 5c:42:4d:8f:40:ec:c2:72:86:6d:e3:6a:26:9c:a7:bb:92:53: bc:7b:5f:f4:b1:aa:47:d9:d6:1c:37:91:b3:82:d0:45:57:92: d9:b5:8b:b8:30:86:9b:28:ef:37:d8:51:fd:c3:b8:de:77:25: 7c:4c:83:63:6f:15:81:e9:cf:2e:f9:2d:85:d6:88:4c:98:c1: de:38:f7:4e:1f:eb:7d:33:1d:bc:fe:80:4e:7c:7f:64:c4:0f: cb:95:95:63 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICbCEwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MDYxNTAxNDQxOFoXDTI3MDYxNTAxMzAwMlowMzEx MC8GA1UEAxMoQUI2Qzg0NjRCMDUyQjcyMEY1RDJDMDAyMEU2NDI2QjZDN0VEMTg2 QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANC5P3RJxzWu/kJivxLP PIhZQ4WW8+KnfLR81Juo/zt76+XcaTu6tdds30i7J1KstrRmphBWxyYPtPIkHM6Y tD+zRAH70ogWcy+Gc1O26QKuVLcCRKAf8MJHF1ExQSiHAvfbDL4cV3f+corBZEU1 SEHtr0+9GcIwsjqhdv3KDis3WozRdCZbZku/Gi6tBNb2NTD9n4FETSsAZTOIe/Zi nKwPzX1diF1JrJDyqHHaNVybX2LvH/IbSHThU1hWpP7krOHyiMgtqx1CnMC+iU4R Wib0htRFKPcBHOUOoNt33rxvii93TRWIb6I0GeiTbB0Jq0czLuQpPHWxU+SAkrGU mg8CAwEAAaOCAowwggKIMB0GA1UdDgQWBBSrbIRksFK3IPXSwAIOZCa2x+0YazAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAzMjMvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMzIzL3Ey eUVaTEJTdHlEMTBzQUNEbVFtdHNmdEdHcy5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAshAMA0GCSqGSIb3 DQEBCwUAA4IBAQAn3mPyEygg2r+mtjhJ0oMiSkXNqxVSWki4PDFYuufPeKS0gVcS mQXqd7GR5Fhv3wGVE4pK1SyLTMgnICZ7dujQiGQOt6LwOS13iMddtkx6im3Dnuv/ 2szXFos+2gqPf7sOP3S6+hQAyaG0E+2SkU+BQ2DZ/hvZ2zTLlJTHyjF5UOX/2gsM jvOuLZoXzd1LB8WolQgBejHJG99mhoK64KDKXZVcQk2PQOzCcoZt42omnKe7klO8 e1/0sapH2dYcN5GzgtBFV5LZtYu4MIabKO832FH9w7jedyV8TINjbxWB6c8u+S2F 1ohMmMHeOPdOH+t9Mx28/oBOfH9kxA/LlZVj -----END CERTIFICATE-----Generated at Tue Jul 7 11:46:40 2026 by rpki-client