
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/C3ZM4M3C5xJcx64zzZwPdxD0_sY.cer
File: C3ZM4M3C5xJcx64zzZwPdxD0_sY.cer (raw, json)
Hash identifier: ogYFAtZB1BTltt540SyugqUGezo19F5InDk5ijiT+qg=
Subject key identifier: 0B:76:4C:E0:CD:C2:E7:12:5C:C7:AE:33:CD:9C:0F:77:10:F4:FE:C6
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 6B1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20072/C3ZM4M3C5xJcx64zzZwPdxD0_sY.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20072/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Mon 15 Jun 2026 01:36:10 +0000
Certificate not after: Tue 15 Jun 2027 01:30:02 +0000
Subordinate resources: IP: 103.118.92.0/22
IP: 202.223.12.0/22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 09:53:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27419 (0x6b1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Jun 15 01:36:10 2026 GMT
Not After : Jun 15 01:30:02 2027 GMT
Subject: CN=0B764CE0CDC2E7125CC7AE33CD9C0F7710F4FEC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f0:df:50:c8:5e:8b:f5:ee:ef:f3:a6:5e:eb:
2c:b1:19:68:35:c3:af:d9:af:6c:7b:7c:8e:9a:f3:
00:4f:78:d1:df:86:93:3c:9c:2c:8c:b9:9f:14:ed:
e6:fd:8c:fa:f3:f1:66:ae:e1:79:0b:61:f6:95:14:
97:f5:17:12:1c:d1:d6:23:db:cc:97:56:bd:27:80:
54:65:e1:99:2c:0c:29:08:0c:96:f0:0f:53:79:72:
51:1b:b1:0a:da:fc:c7:42:e2:ee:41:b4:8f:81:2f:
23:b8:b9:fd:95:50:20:46:26:22:fc:5a:c4:7b:df:
1a:4f:6e:d0:16:8b:23:ae:92:54:72:e2:b1:cb:9f:
6e:0d:64:6f:c3:8d:1e:0d:14:3c:c5:45:a5:e6:2a:
e4:6b:9e:49:2d:36:ea:3a:53:96:a4:f7:08:46:2b:
02:c1:ea:55:36:b0:75:fc:bd:90:6e:3a:30:ec:95:
c6:04:6b:21:3a:9c:29:1c:71:45:f8:05:cd:e6:1c:
87:56:19:f7:05:b4:ea:df:c6:83:57:2f:60:ae:3a:
ec:71:b8:70:8b:8d:14:25:b7:10:a8:38:d8:ab:08:
e4:9f:78:59:c5:fb:e5:8f:78:90:40:25:5c:3c:a1:
da:f1:d8:c9:af:47:c2:7b:28:d7:0f:b5:4b:13:87:
7f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:76:4C:E0:CD:C2:E7:12:5C:C7:AE:33:CD:9C:0F:77:10:F4:FE:C6
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20072/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20072/C3ZM4M3C5xJcx64zzZwPdxD0_sY.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.118.92.0/22
202.223.12.0/22
Signature Algorithm: sha256WithRSAEncryption
99:f9:4b:71:d5:b3:1a:34:18:e9:cd:cf:d4:ad:40:4e:92:31:
8c:86:0e:7e:64:4e:76:07:4b:40:e2:68:50:44:56:94:6e:47:
5d:2c:d6:b9:60:0c:14:f6:e1:23:68:1c:6f:86:58:5d:21:61:
17:16:1f:e9:5a:2c:cf:ad:d0:ef:aa:6b:0c:96:4b:c4:02:bc:
ca:22:84:7a:da:3c:3d:aa:c7:81:0e:9d:23:48:9a:ca:2b:e2:
b7:60:db:95:83:45:f2:07:7d:d6:fe:1a:40:ca:cb:af:7d:6d:
45:c3:22:3f:dd:da:97:97:c1:97:75:67:8d:69:30:61:30:d8:
93:da:41:d1:6b:e9:be:d5:63:f2:9b:f1:a8:1d:45:49:c2:d5:
43:4b:ea:4d:a5:40:99:6b:e5:14:d0:bb:d4:fa:36:4c:b2:f3:
48:85:6a:e1:e5:f6:16:65:4e:21:19:dc:50:d1:fc:ca:11:5f:
8a:57:01:24:f0:cc:7b:e8:97:8a:25:ee:d7:ec:36:7e:c5:16:
da:81:01:06:e6:95:ec:64:79:80:cf:99:d6:b0:bf:79:cc:d0:
8c:59:9d:e6:07:6e:db:ab:af:30:1a:28:00:7d:c2:37:7a:6e:
8b:39:f2:67:35:0f:da:07:cb:cb:7a:6f:07:7d:db:17:ac:26:
1f:ae:b1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:47:29 2026 by rpki-client