
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer
File: 14hnjmTSkYTCPaqttZS_2briQFw.cer (raw, json)
Hash identifier: fmy3mBzQQveC8I+8zo85RbjpaMHSTNReV98MwrrmI9c=
Subject key identifier: D7:88:67:8E:64:D2:91:84:C2:3D:AA:AD:B5:94:BF:D9:BA:E2:40:5C
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 697A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Fri 15 May 2026 01:40:13 +0000
Certificate not after: Sat 15 May 2027 01:30:02 +0000
Subordinate resources: IP: 61.125.160.0/20
IP: 61.213.240.0/20
IP: 202.25.192.0/20
IP: 210.166.32.0/19
IP: 210.236.0.0/19
IP: 210.253.32.0/19
IP: 211.1.128.0/19
IP: 211.12.224.0/19
IP: 219.118.32.0/20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27002 (0x697a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: May 15 01:40:13 2026 GMT
Not After : May 15 01:30:02 2027 GMT
Subject: CN=D788678E64D29184C23DAAADB594BFD9BAE2405C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bf:9f:cc:05:e8:d8:2b:c8:f3:4e:10:4e:cf:
89:f5:de:33:63:04:53:85:64:a8:0a:77:bf:12:f6:
de:b1:5f:a8:f5:bc:07:07:22:f9:f3:48:cb:ad:98:
b6:ec:82:df:f9:90:27:22:da:c0:90:44:f3:d1:a5:
e7:98:d5:87:19:aa:ab:d4:5d:cd:04:f9:f9:49:50:
3e:bf:0d:73:9d:b6:ac:c8:79:81:e8:23:a4:19:b4:
5b:be:70:c0:70:a3:fd:1a:37:aa:3d:31:7b:48:3b:
ef:6e:d6:83:68:0d:30:66:b1:a1:56:57:55:ed:e2:
a1:b9:a5:b6:fa:3c:4e:ea:be:fe:e4:9c:45:89:31:
ad:16:59:3f:9a:98:34:3e:d2:07:45:ab:e0:09:10:
8e:c3:e4:08:59:8a:01:8e:dc:1a:2f:39:85:87:7e:
ed:20:7c:27:1f:5a:4d:8c:ca:e5:28:13:90:99:82:
8f:43:cd:dc:f8:82:32:6d:2f:82:0d:c7:56:e7:c6:
35:a5:f4:1e:46:e5:db:b5:f4:9f:53:fe:6f:c6:4e:
bc:d9:40:d0:6b:92:c0:27:70:89:2f:9f:7a:03:fa:
5e:73:79:4f:95:fe:b8:af:74:13:93:bf:89:b5:2f:
63:8c:bd:1d:be:31:73:38:f2:7d:1b:01:d1:0e:33:
b7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:88:67:8E:64:D2:91:84:C2:3D:AA:AD:B5:94:BF:D9:BA:E2:40:5C
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.125.160.0/20
61.213.240.0/20
202.25.192.0/20
210.166.32.0/19
210.236.0.0/19
210.253.32.0/19
211.1.128.0/19
211.12.224.0/19
219.118.32.0/20
Signature Algorithm: sha256WithRSAEncryption
06:2f:f2:08:3a:1d:36:3c:f7:74:18:b8:4f:c5:61:bc:58:be:
d6:b0:ae:a9:03:af:82:6c:3f:74:49:63:6b:d7:9d:62:8a:c7:
be:6a:df:41:5d:a4:a5:de:14:f7:7f:11:f5:48:35:8a:36:91:
e1:19:6a:bd:65:7b:5a:6a:17:8b:37:d5:bb:51:8c:a2:95:04:
ae:e7:03:a7:2a:39:f4:bd:94:c4:2c:b9:77:1d:4e:be:b2:b2:
96:c0:f2:03:df:c1:61:cc:db:3f:72:76:67:32:04:a1:ba:d0:
e4:4c:06:59:d0:19:65:01:32:f3:c4:33:98:90:e7:28:f6:28:
00:05:51:75:51:3c:bc:b8:a2:47:3c:ad:79:db:b0:9c:5d:e5:
84:b2:15:b4:e5:68:80:fe:6c:6e:98:39:76:f8:56:c2:95:ee:
87:74:97:f2:84:43:02:cc:16:3a:ff:39:91:c2:87:d0:56:4f:
8d:1b:4b:70:50:b5:07:d3:31:fa:07:93:23:23:98:d5:ba:06:
4f:b8:bb:e8:bf:41:90:81:8e:a6:a5:c7:8a:3f:ae:30:2f:11:
34:25:ff:e2:71:59:72:e5:53:a8:f1:56:ba:85:cf:13:60:29:
63:f2:ad:5a:f7:29:71:d0:b2:2d:d1:a1:99:f7:32:27:b8:6d:
8f:9b:ab:aa
-----BEGIN CERTIFICATE-----
MIIFsTCCBJmgAwIBAgICaXowDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC
NTIwREFBQzdEQThGMB4XDTI2MDUxNTAxNDAxM1oXDTI3MDUxNTAxMzAwMlowMzEx
MC8GA1UEAxMoRDc4ODY3OEU2NEQyOTE4NEMyM0RBQUFEQjU5NEJGRDlCQUUyNDA1
QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMS/n8wF6NgryPNOEE7P
ifXeM2MEU4VkqAp3vxL23rFfqPW8Bwci+fNIy62YtuyC3/mQJyLawJBE89Gl55jV
hxmqq9RdzQT5+UlQPr8Nc522rMh5gegjpBm0W75wwHCj/Ro3qj0xe0g7727Wg2gN
MGaxoVZXVe3iobmltvo8Tuq+/uScRYkxrRZZP5qYND7SB0Wr4AkQjsPkCFmKAY7c
Gi85hYd+7SB8Jx9aTYzK5SgTkJmCj0PN3PiCMm0vgg3HVufGNaX0Hkbl27X0n1P+
b8ZOvNlA0GuSwCdwiS+fegP6XnN5T5X+uK90E5O/ibUvY4y9Hb4xczjyfRsB0Q4z
t/cCAwEAAaOCArYwggKyMB0GA1UdDgQWBBTXiGeOZNKRhMI9qq21lL/ZuuJAXDAf
BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0
b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa
dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j
Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0
NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G
A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB
7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw
L2FwL0E5MUE3MzgxMDAwMC8yMzMvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt
cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIzMy8xNGhuam1U
U2tZVENQYXF0dFpTXzJicmlRRncubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw
a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s
ME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQEPX2gAwQEPdXwAwQEyhnAAwQF
0qYgAwQF0uwAAwQF0v0gAwQF0wGAAwQF0wzgAwQE23YgMA0GCSqGSIb3DQEBCwUA
A4IBAQAGL/IIOh02PPd0GLhPxWG8WL7WsK6pA6+CbD90SWNr151iise+at9BXaSl
3hT3fxH1SDWKNpHhGWq9ZXtaaheLN9W7UYyilQSu5wOnKjn0vZTELLl3HU6+srKW
wPID38FhzNs/cnZnMgShutDkTAZZ0BllATLzxDOYkOco9igABVF1UTy8uKJHPK15
27CcXeWEshW05WiA/mxumDl2+FbCle6HdJfyhEMCzBY6/zmRwofQVk+NG0twULUH
0zH6B5MjI5jVugZPuLvov0GQgY6mpceKP64wLxE0Jf/icVly5VOo8Va6hc8TYClj
8q1a9ylx0LIt0aGZ9zInuG2Pm6uq
-----END CERTIFICATE-----
Generated at Sat May 23 04:27:03 2026 by rpki-client