
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/3xqHujDAmc6Oq3G0QL_tv33MZ-A.cer
File: 3xqHujDAmc6Oq3G0QL_tv33MZ-A.cer (raw, json)
Hash identifier: q4sA0YHIfqL+zO+xVyLoPnlBY2jPDGMa0CJlfQK8aRo=
Subject key identifier: DF:1A:87:BA:30:C0:99:CE:8E:AB:71:B4:40:BF:ED:BF:7D:CC:67:E0
Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2
Certificate issuer: /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2
Certificate serial: 184F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2441/3xqHujDAmc6Oq3G0QL_tv33MZ-A.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2441/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Thu 15 Oct 2026 01:31:19 +0000
Certificate not after: Fri 15 Oct 2027 01:30:02 +0000
Subordinate resources: IP: 157.64.0.0/16
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6223 (0x184f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2
Validity
Not Before: Oct 15 01:31:19 2026 GMT
Not After : Oct 15 01:30:02 2027 GMT
Subject: CN=DF1A87BA30C099CE8EAB71B440BFEDBF7DCC67E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:42:d6:9c:10:2a:ed:6d:0c:03:77:18:0d:96:
0e:e8:5c:0c:63:7b:9f:e9:1d:14:8e:7b:97:4d:69:
1d:0e:d4:62:f8:ea:36:92:36:c9:bb:67:c2:2e:41:
ea:50:75:ef:30:ff:c1:86:c8:a9:ea:54:a3:7b:72:
cb:ed:d4:7a:ec:1f:54:fc:22:67:c6:b6:b5:a8:e2:
02:f2:6e:28:9c:37:48:0a:63:9e:a6:e2:25:7e:69:
42:bd:a7:7b:c1:49:b4:31:e3:42:fb:99:29:c5:94:
f9:67:35:9a:df:93:d5:35:d1:df:28:ec:4a:f1:4f:
91:d3:25:06:36:43:eb:91:51:2c:ef:3f:85:c3:7f:
cd:95:81:7f:09:dd:72:db:0b:47:00:18:cc:f6:06:
8e:c7:44:45:4f:19:7e:2b:a5:c4:81:ff:c0:65:52:
89:97:2d:ed:2b:f8:e8:2a:fc:76:e4:3c:00:e1:be:
25:30:39:ca:f4:ea:72:de:75:f6:24:ef:c2:94:c8:
63:0a:4e:92:3b:15:3b:c3:01:96:ef:b5:17:96:28:
df:ed:0b:04:39:cb:4f:2e:dc:4c:58:2e:7d:9b:1b:
f5:6e:53:4b:01:da:16:c8:40:73:f9:36:be:86:4f:
24:82:88:e9:8e:89:ea:1c:b7:69:1b:fb:ed:bb:a1:
64:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:1A:87:BA:30:C0:99:CE:8E:AB:71:B4:40:BF:ED:BF:7D:CC:67:E0
X509v3 Authority Key Identifier:
keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2441/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2441/3xqHujDAmc6Oq3G0QL_tv33MZ-A.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.64.0.0/16
Signature Algorithm: sha256WithRSAEncryption
95:e6:f2:92:75:e2:83:92:93:4e:45:bc:17:5d:c8:cd:02:ac:
0c:65:c7:88:c9:c1:cf:6f:db:de:6a:9f:4e:5b:7d:a5:06:82:
ca:1b:35:50:4f:2c:e0:81:f2:6d:47:3c:3d:27:6f:60:d8:c0:
13:61:42:75:ce:1c:02:9a:7f:56:d2:20:e8:be:f0:16:d6:b3:
ff:9c:2b:f6:22:a2:82:d9:ec:81:ba:e6:75:18:71:fb:11:69:
8c:39:31:4c:72:6d:5e:c4:98:e7:49:28:2f:10:cc:59:e9:f5:
c4:2b:1a:68:75:29:4c:f7:2e:1d:b1:3e:8d:d7:89:18:2d:5f:
f3:11:03:b0:ee:13:1c:a9:28:ca:ee:c3:47:45:00:91:b2:40:
02:26:47:60:23:0e:89:0c:f3:9a:d5:44:77:fa:65:10:1f:b1:
1a:ed:c5:b8:a2:bf:93:8b:14:c7:41:52:9f:2a:f0:05:f2:e7:
5a:8b:db:24:4a:33:a7:68:3a:f7:6b:ed:fe:0b:87:68:81:d6:
86:ca:84:4a:62:e4:e1:31:c1:fb:79:1f:02:00:01:6e:3f:6a:
03:da:dd:ca:fa:84:f2:d1:69:2b:c6:3d:71:7f:20:a0:86:52:
8b:45:e2:15:7a:af:81:b7:51:f0:05:da:54:5e:e7:6d:f2:f6:
a2:7d:f6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 19:01:57 2026 by rpki-client