$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/y6MvRLwy8eHhkv4sVHPA1yn4jE4.cer File: y6MvRLwy8eHhkv4sVHPA1yn4jE4.cer (raw, json) Hash identifier: hlnaY3stTiafC72fBhefZJ+kTjpkTDcEUYw4+IrqeUM= Subject key identifier: CB:A3:2F:44:BC:32:F1:E1:E1:92:FE:2C:54:73:C0:D7:29:F8:8C:4E Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 6BD9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30450/y6MvRLwy8eHhkv4sVHPA1yn4jE4.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30450/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Mon 15 Jun 2026 01:41:58 +0000 Certificate not after: Tue 15 Jun 2027 01:30:02 +0000 Subordinate resources: IP: 2402:2f60::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Jul 2026 09:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27609 (0x6bd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Jun 15 01:41:58 2026 GMT Not After : Jun 15 01:30:02 2027 GMT Subject: CN=CBA32F44BC32F1E1E192FE2C5473C0D729F88C4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:de:01:43:19:a7:c6:9e:f7:a2:cd:57:41:1e: 6c:c2:a5:cc:08:82:c6:36:fd:60:e8:fe:d0:53:43: 1c:ea:ea:64:a4:36:69:27:5d:78:b2:ce:fc:94:24: c9:64:70:fc:00:92:5e:36:78:fe:5b:12:70:6d:ff: ad:df:ac:df:cc:0b:7d:58:0a:6f:3b:e8:01:52:1d: 0b:42:8c:4a:42:84:28:de:b6:28:8a:9d:84:06:88: 29:ee:9e:b6:e5:b4:62:e4:f2:53:35:30:8e:2a:84: aa:e5:6c:a3:0b:63:82:fa:67:c2:9a:3d:31:e0:61: f7:b8:63:d6:5c:c1:98:e1:33:ff:5a:23:13:c7:d1: 53:f6:fa:ff:df:68:76:72:cc:8f:9b:80:3b:a7:f5: 84:24:fc:76:d4:c4:4e:1c:fb:a7:5c:64:fe:6e:c9: 05:70:a6:33:9f:a9:61:ac:72:02:19:f8:4d:3c:0f: d0:5d:61:f4:43:c7:b4:c2:32:c9:55:69:0c:02:8e: f7:14:10:ad:9f:3f:c5:c7:6f:d6:46:08:76:63:a7: c4:72:8e:6a:c4:dc:c8:8b:5b:66:ae:21:ef:26:07: 3b:d5:e1:20:78:8d:5f:a9:25:3b:50:f1:89:4c:d4: c1:c7:a8:71:98:2e:ad:5c:a3:ad:93:6a:cd:96:90: 8c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:A3:2F:44:BC:32:F1:E1:E1:92:FE:2C:54:73:C0:D7:29:F8:8C:4E X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30450/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30450/y6MvRLwy8eHhkv4sVHPA1yn4jE4.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:2f60::/32 Signature Algorithm: sha256WithRSAEncryption 0c:9b:73:97:af:d9:d5:a0:b6:1d:52:74:24:d1:15:e6:3a:23: a5:82:b2:4f:42:3e:bc:1d:1e:fc:56:40:0c:84:79:0a:cd:4f: be:da:94:97:f2:7d:7c:05:04:74:3d:27:ac:af:d8:f2:b6:5e: 26:c8:c5:03:61:ba:72:1b:b2:68:4f:81:be:33:6f:27:17:e6: b9:dc:0a:50:94:0c:f7:22:8f:69:d5:c8:c8:bf:d8:24:21:a1: 99:4a:70:1e:72:ea:69:91:f9:f4:7c:81:46:13:70:13:e6:6a: 65:16:4d:26:a6:90:d3:0b:69:24:1b:2a:a9:24:ae:0f:fd:37: da:98:85:be:be:0a:91:12:e4:ec:39:e5:ae:c2:96:6a:aa:f7: 47:80:49:65:53:f3:6c:95:e9:80:0f:fb:bd:fb:0c:8e:6a:4b: f6:d8:44:9d:70:e8:ee:b2:58:eb:c0:00:dc:81:cb:21:96:be: c6:07:c5:7e:92:5c:91:63:4e:fa:4e:92:68:01:b9:8f:57:c6: 0d:d3:38:ce:59:c5:72:ae:b2:a4:0c:69:ad:b6:31:8d:8d:c9: d2:8f:df:92:4c:90:77:ee:88:73:03:2a:48:09:4c:b4:56:ae: fa:74:2c:cf:44:70:d0:8b:c1:f5:b1:aa:51:d4:05:05:60:0e: 21:eb:10:10 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICa9kwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MDYxNTAxNDE1OFoXDTI3MDYxNTAxMzAwMlowMzEx MC8GA1UEAxMoQ0JBMzJGNDRCQzMyRjFFMUUxOTJGRTJDNTQ3M0MwRDcyOUY4OEM0 RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ7eAUMZp8ae96LNV0Ee bMKlzAiCxjb9YOj+0FNDHOrqZKQ2aSddeLLO/JQkyWRw/ACSXjZ4/lsScG3/rd+s 38wLfVgKbzvoAVIdC0KMSkKEKN62KIqdhAaIKe6etuW0YuTyUzUwjiqEquVsowtj gvpnwpo9MeBh97hj1lzBmOEz/1ojE8fRU/b6/99odnLMj5uAO6f1hCT8dtTEThz7 p1xk/m7JBXCmM5+pYaxyAhn4TTwP0F1h9EPHtMIyyVVpDAKO9xQQrZ8/xcdv1kYI dmOnxHKOasTcyItbZq4h7yYHO9XhIHiNX6klO1DxiUzUwceocZgurVyjrZNqzZaQ jG8CAwEAAaOCAowwggKIMB0GA1UdDgQWBBTLoy9EvDLx4eGS/ixUc8DXKfiMTjAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzA0NTAvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwNDUwL3k2 TXZSTHd5OGVIaGt2NHNWSFBBMXluNGpFNC5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAi9gMA0GCSqGSIb3 DQEBCwUAA4IBAQAMm3OXr9nVoLYdUnQk0RXmOiOlgrJPQj68HR78VkAMhHkKzU++ 2pSX8n18BQR0PSesr9jytl4myMUDYbpyG7JoT4G+M28nF+a53ApQlAz3Io9p1cjI v9gkIaGZSnAecuppkfn0fIFGE3AT5mplFk0mppDTC2kkGyqpJK4P/TfamIW+vgqR EuTsOeWuwpZqqvdHgEllU/NslemAD/u9+wyOakv22ESdcOjusljrwADcgcshlr7G B8V+klyRY076TpJoAbmPV8YN0zjOWcVyrrKkDGmttjGNjcnSj9+STJB37ohzAypI CUy0Vq76dCzPRHDQi8H1sapR1AUFYA4h6xAQ -----END CERTIFICATE-----Generated at Tue Jul 7 11:48:02 2026 by rpki-client