
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer
File: D38zCPyVIyRZg2_fFZr2tPqrrJE.cer (raw, json)
Hash identifier: Rsxd06YRPphv3cxsCcmHL8Xu22keFpXgLyyIaCGxymY=
Subject key identifier: 0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 68B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Fri 15 May 2026 01:34:20 +0000
Certificate not after: Sat 15 May 2027 01:30:02 +0000
Subordinate resources: IP: 103.2.96.0/22
IP: 133.226.160.0/20
IP: 180.178.80.0/21
IP: 218.40.96.0/20
IP: 219.103.48.0/20
IP: 220.247.184.0/21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26801 (0x68b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: May 15 01:34:20 2026 GMT
Not After : May 15 01:30:02 2027 GMT
Subject: CN=0F7F3308FC95232459836FDF159AF6B4FAABAC91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8e:a3:b2:54:63:b5:e1:7f:d9:52:38:f4:28:
59:7a:b0:db:49:4a:0d:a8:95:ab:f7:b1:c1:ba:0d:
e3:4e:80:e6:b6:65:02:b7:77:6c:fb:a9:c4:d8:63:
62:ca:5a:f5:32:f4:95:bd:97:ea:16:ef:a9:5f:7a:
e5:9f:d7:91:66:fb:83:07:8c:88:89:6f:45:2e:d3:
5b:c1:84:df:80:90:96:08:87:44:f4:0d:02:18:25:
59:fb:46:50:16:85:87:85:62:29:47:24:36:25:2b:
bc:2d:b6:62:b2:4b:a1:37:b8:97:43:f4:50:60:50:
39:e5:53:e1:f2:65:a3:89:67:17:54:66:09:17:c8:
1b:7c:10:f1:7c:14:10:ce:dd:55:85:ee:fd:df:09:
68:73:82:9e:71:fd:1b:1c:f3:dd:d6:fb:0b:03:d1:
84:81:8c:fb:8c:3c:5a:a6:33:79:ee:80:9a:78:b1:
06:c7:9e:a0:db:d9:22:4b:9c:ee:eb:94:8b:a3:00:
bc:bf:5f:d1:1e:ad:84:25:b4:94:b7:78:bc:82:e9:
47:c8:c9:65:12:cc:87:45:ee:94:0d:38:37:b0:26:
71:42:37:77:89:0d:79:4a:bf:8d:c8:95:f0:d3:d7:
87:a9:d0:47:fd:f6:c9:56:0b:5d:a1:40:4b:9b:13:
ea:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.2.96.0/22
133.226.160.0/20
180.178.80.0/21
218.40.96.0/20
219.103.48.0/20
220.247.184.0/21
Signature Algorithm: sha256WithRSAEncryption
21:ad:f8:9e:af:a0:ad:6d:ce:fc:83:1e:91:d0:0d:fa:d9:c0:
b2:06:8d:49:42:14:e3:ea:7a:75:6c:0d:9d:1a:8e:26:12:88:
77:38:b2:fe:88:cf:56:4c:89:ff:fc:21:6a:a7:a0:25:bc:b0:
16:57:7e:5d:66:8b:61:58:20:c3:e1:ba:33:27:ba:65:cf:c8:
42:cf:c0:98:8e:d4:e6:78:9c:b8:3a:41:2a:44:55:13:0b:14:
84:5b:ac:94:b5:37:b7:ae:b2:c9:58:6a:36:46:93:48:4e:1b:
32:da:8a:47:61:44:be:00:4f:19:cd:8d:a4:62:b8:27:dd:b9:
56:82:91:1a:8a:1a:fe:33:96:f9:5a:70:e9:0c:d1:e8:ad:34:
38:42:2f:56:8d:30:97:57:0b:8d:cb:83:11:eb:ad:62:35:e7:
92:f6:66:20:e3:ab:eb:93:3d:8a:55:c7:28:32:93:e3:4c:37:
b5:23:7c:74:73:0a:88:a2:22:36:ed:91:44:dc:45:dd:bf:71:
bc:a6:90:c0:0c:94:49:f5:e0:ab:99:90:b3:04:63:a2:d4:dc:
8c:c4:87:9a:27:ba:a6:15:e5:e9:56:eb:36:7a:ae:89:8d:1a:
39:d8:61:1b:fb:4e:2c:7a:1e:18:b2:19:50:05:d8:ed:f5:e9:
c5:c5:e4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 21:58:32 2026 by rpki-client