$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/zV4jHr9Ex6QDmi946DS2zz1q-hQ.cer File: zV4jHr9Ex6QDmi946DS2zz1q-hQ.cer (raw, json) Hash identifier: NcKj93HNSc93Lnc008KvZrmowztkeRznrgMuJIL4ags= Subject key identifier: CD:5E:23:1E:BF:44:C7:A4:03:9A:2F:78:E8:34:B6:CF:3D:6A:FA:14 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 6A88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/zV4jHr9Ex6QDmi946DS2zz1q-hQ.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Mon 15 Jun 2026 01:31:50 +0000 Certificate not after: Tue 15 Jun 2027 01:30:02 +0000 Subordinate resources: IP: 202.55.136.0/22 IP: 202.73.64.0/19 IP: 202.233.0.0/18 IP: 210.166.192.0/20 IP: 223.223.164.0/22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Jul 2026 09:28:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27272 (0x6a88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Jun 15 01:31:50 2026 GMT Not After : Jun 15 01:30:02 2027 GMT Subject: CN=CD5E231EBF44C7A4039A2F78E834B6CF3D6AFA14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1a:a6:2b:53:a0:36:ec:70:b0:06:00:88:1f: 04:99:37:8d:bf:03:45:e8:7d:50:33:c3:ca:6b:3a: b1:8a:39:e4:02:72:e6:d5:6a:53:bc:08:2b:eb:60: 74:e2:15:7e:0c:d5:6f:a9:0e:a8:d5:1e:83:75:30: 0f:db:04:56:6e:01:9e:50:15:63:28:40:5f:16:0e: e8:9d:69:a4:ea:37:56:fc:21:31:99:1e:ad:c5:4a: 48:15:8c:66:b9:4c:f8:e1:d5:2b:f9:c7:f2:24:58: dc:8e:22:33:b5:2d:43:62:44:62:bd:22:c8:94:ce: 0a:8c:1e:d5:21:5e:98:d1:3f:ae:b1:c8:12:99:ac: a3:0d:5b:d0:28:a4:f2:a1:c3:cf:de:a0:7c:8f:a5: f6:0b:f5:9c:6d:23:bd:38:87:60:a6:c8:67:27:ff: 1a:8c:74:6b:ba:c1:d6:8f:d4:7f:5c:c7:cf:bb:b4: 8d:de:3f:69:52:b2:51:2c:6c:fb:73:3f:13:90:2e: 05:67:50:6b:75:32:a0:a1:12:c3:6d:2e:5e:23:26: 19:f1:66:fa:f1:e0:f0:cc:63:4b:6c:ac:bd:b9:a4: 01:2a:32:49:ee:36:19:cd:30:14:d6:91:a3:fd:42: c1:1a:82:b0:a1:a1:77:6e:78:97:98:72:96:cf:01: e0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:5E:23:1E:BF:44:C7:A4:03:9A:2F:78:E8:34:B6:CF:3D:6A:FA:14 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/zV4jHr9Ex6QDmi946DS2zz1q-hQ.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.55.136.0/22 202.73.64.0/19 202.233.0.0/18 210.166.192.0/20 223.223.164.0/22 Signature Algorithm: sha256WithRSAEncryption 67:b4:1f:7a:8a:f3:8e:6a:9c:47:c5:9d:ce:08:cc:fd:85:41: 85:16:18:d3:23:9f:97:a7:02:f6:e6:b9:c9:24:78:dd:aa:4e: ec:5f:70:96:1b:fb:79:c4:1c:3a:86:87:2c:6b:20:65:0f:48: 1c:ee:49:ce:eb:dc:fc:44:c8:83:e3:c9:f3:8c:cd:55:a7:a0: c9:b8:dd:d7:05:31:05:a6:7d:87:16:01:5b:93:6e:7d:fb:cc: f8:8c:80:c9:04:9a:b7:65:57:c5:7b:34:37:ed:57:b2:ba:43: 12:74:30:74:c0:3f:52:d6:18:10:fe:8e:1d:d3:e2:78:a6:bb: c0:a1:b3:75:25:36:85:05:d7:96:7f:0e:a0:6d:32:c2:9c:44: aa:ab:78:64:8c:ec:c9:88:65:9b:af:b4:84:4b:f4:7d:5e:3d: 07:10:f2:2a:e9:bc:ad:9d:56:2a:bb:59:ac:31:24:a4:35:cc: c1:4b:2f:5a:bd:3e:e4:24:e8:10:37:80:f9:b3:29:c1:76:74: 7a:c7:4a:9b:ad:29:de:06:19:ff:4d:71:f9:5f:71:a2:be:29: 9e:72:c7:06:05:41:ee:04:9f:1f:93:30:af:8f:b2:4a:dd:84: 63:2a:3d:cf:2e:44:61:81:92:16:11:c5:f7:56:5f:b0:73:a4: 72:2d:d2:f9 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgICaogwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MDYxNTAxMzE1MFoXDTI3MDYxNTAxMzAwMlowMzEx MC8GA1UEAxMoQ0Q1RTIzMUVCRjQ0QzdBNDAzOUEyRjc4RTgzNEI2Q0YzRDZBRkEx NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJgapitToDbscLAGAIgf BJk3jb8DReh9UDPDyms6sYo55AJy5tVqU7wIK+tgdOIVfgzVb6kOqNUeg3UwD9sE Vm4BnlAVYyhAXxYO6J1ppOo3VvwhMZkercVKSBWMZrlM+OHVK/nH8iRY3I4iM7Ut Q2JEYr0iyJTOCowe1SFemNE/rrHIEpmsow1b0Cik8qHDz96gfI+l9gv1nG0jvTiH YKbIZyf/Gox0a7rB1o/Uf1zHz7u0jd4/aVKyUSxs+3M/E5AuBWdQa3UyoKESw20u XiMmGfFm+vHg8MxjS2ysvbmkASoySe42Gc0wFNaRo/1CwRqCsKGhd254l5hyls8B 4G0CAwEAAaOCApwwggKYMB0GA1UdDgQWBBTNXiMev0THpAOaL3joNLbPPWr6FDAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH9BggrBgEFBQcBCwSB8DCB 7TBBBggrBgEFBQcwBYY1cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC81MS8wYAYIKwYBBQUHMAqGVHJzeW5jOi8vcnBraS1y ZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNTEvelY0akhyOUV4 NlFEbWk5NDZEUzJ6ejFxLWhRLm1mdDBGBggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtp LXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAvYXAvbm90aWZpY2F0aW9uLnhtbDA3 BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAso3iAMEBcpJQAMEBsrpAAMEBNKm wAMEAt/fpDANBgkqhkiG9w0BAQsFAAOCAQEAZ7QfeorzjmqcR8WdzgjM/YVBhRYY 0yOfl6cC9ua5ySR43apO7F9wlhv7ecQcOoaHLGsgZQ9IHO5Jzuvc/ETIg+PJ84zN Vaegybjd1wUxBaZ9hxYBW5NuffvM+IyAyQSat2VXxXs0N+1XsrpDEnQwdMA/UtYY EP6OHdPieKa7wKGzdSU2hQXXln8OoG0ywpxEqqt4ZIzsyYhlm6+0hEv0fV49BxDy Kum8rZ1WKrtZrDEkpDXMwUsvWr0+5CToEDeA+bMpwXZ0esdKm60p3gYZ/01x+V9x or4pnnLHBgVB7gSfH5Mwr4+ySt2EYyo9zy5EYYGSFhHF91ZfsHOkci3S+Q== -----END CERTIFICATE-----Generated at Sun Jul 5 12:34:36 2026 by rpki-client