
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/JXco2IS3-bpoWu8ll-xxS-IjkBE.cer
File: JXco2IS3-bpoWu8ll-xxS-IjkBE.cer (raw, json)
Hash identifier: SASCyvrRObWpzV9yoQrHPxESp2PgG2Evr4w1+PvIqMA=
Subject key identifier: 25:77:28:D8:84:B7:F9:BA:68:5A:EF:25:97:EC:71:4B:E2:23:90:11
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 6BD4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30383/JXco2IS3-bpoWu8ll-xxS-IjkBE.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30383/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Mon 15 Jun 2026 01:41:50 +0000
Certificate not after: Tue 15 Jun 2027 01:30:02 +0000
Subordinate resources: IP: 2407:d440::/32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 09:53:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27604 (0x6bd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Jun 15 01:41:50 2026 GMT
Not After : Jun 15 01:30:02 2027 GMT
Subject: CN=257728D884B7F9BA685AEF2597EC714BE2239011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:16:b6:12:54:e8:b1:24:4b:41:a1:a8:2f:30:
04:f9:79:7d:be:8b:50:04:55:1c:01:cf:45:bd:8d:
ca:38:0e:dd:c5:4d:e8:de:95:5b:7a:64:4a:eb:05:
c8:d1:8d:e6:72:df:74:ff:24:4e:6a:db:0b:04:63:
9d:f3:ea:c8:26:0d:6e:59:f2:a6:ad:c4:52:c8:c1:
78:bc:e6:fa:0f:67:9e:9a:a5:59:f8:37:49:ae:87:
25:71:07:02:1b:4f:9a:f3:a5:a1:75:55:40:74:3c:
2d:29:13:7d:40:99:26:d2:08:be:fb:f7:e9:f6:2d:
f5:63:9a:94:d1:38:9e:96:12:89:da:e4:87:d5:7d:
44:9c:28:98:cc:e5:ea:8c:a4:4e:fe:f5:6b:1d:8c:
19:01:64:e1:74:ce:c5:b1:2b:0f:82:f1:1a:03:83:
e7:99:39:5f:aa:31:3a:71:fb:f0:08:32:a9:07:7a:
19:84:d0:13:96:0c:2c:db:a2:fb:06:bf:16:1a:8f:
a8:35:f9:fb:58:cc:aa:8b:9e:ef:31:3b:49:32:88:
c9:71:29:a9:b5:a2:37:13:8c:af:79:35:b9:26:04:
4a:80:c2:5c:0d:bc:ce:0f:24:8e:ae:d5:d2:dd:10:
af:b1:cd:c7:62:0b:38:7c:8d:20:c5:51:57:e0:82:
9e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:77:28:D8:84:B7:F9:BA:68:5A:EF:25:97:EC:71:4B:E2:23:90:11
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30383/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30383/JXco2IS3-bpoWu8ll-xxS-IjkBE.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:d440::/32
Signature Algorithm: sha256WithRSAEncryption
76:6b:1b:59:31:83:e7:69:1b:26:24:f5:12:64:4f:a8:d5:19:
6d:f9:41:da:9d:41:e8:66:6f:ce:ba:5e:53:f0:49:0c:e0:9e:
d6:ce:49:eb:c9:de:2a:b0:ad:ae:37:70:87:4b:05:5e:3a:bf:
3f:03:eb:c4:ca:dc:5d:05:50:9a:5a:3f:d7:14:8f:06:87:74:
6b:a0:87:2e:56:2d:83:52:16:63:c2:30:59:b9:74:e6:58:c0:
33:36:1f:cb:92:2f:d6:f7:c1:f9:23:f3:62:c4:33:93:09:29:
5b:7a:6e:ca:71:99:fe:d6:dd:f9:30:3b:93:62:d8:16:d6:2f:
98:63:d0:3e:d0:ab:1d:4e:05:38:45:eb:4d:f3:cc:e7:86:d7:
ff:66:8e:1c:7e:46:59:68:72:16:db:7a:5e:11:89:03:9d:b6:
3b:1d:83:c7:a4:48:ed:4e:f0:a9:c4:52:92:fa:7d:bc:72:8f:
2f:69:ce:18:a3:37:4f:50:e9:3c:be:11:2c:aa:9c:ec:9e:eb:
95:82:ba:98:2b:4b:a6:86:da:06:9a:9f:0f:59:c8:6c:86:ce:
58:e0:26:e4:3f:fe:91:4e:7c:8a:7b:d6:76:f3:d4:b9:41:d9:
fe:65:e8:4b:a1:c7:e5:c7:a9:4a:b3:8d:f8:d0:fd:1f:6f:95:
e6:e0:f4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:48:46 2026 by rpki-client