
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/LZ2S-D9eDO9f6t2-NKj7kI2hjRQ.cer
File: LZ2S-D9eDO9f6t2-NKj7kI2hjRQ.cer (raw, json)
Hash identifier: WFGgh4d4E+ecKZJsYdW2tngRrTZq2LMSCoWNVADMm+8=
Subject key identifier: 2D:9D:92:F8:3F:5E:0C:EF:5F:EA:DD:BE:34:A8:FB:90:8D:A1:8D:14
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 6312
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30422/LZ2S-D9eDO9f6t2-NKj7kI2hjRQ.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30422/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Sun 15 Feb 2026 01:39:50 +0000
Certificate not after: Mon 15 Feb 2027 01:30:02 +0000
Subordinate resources: IP: 2401:c20::/32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Feb 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25362 (0x6312)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Feb 15 01:39:50 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=2D9D92F83F5E0CEF5FEADDBE34A8FB908DA18D14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9f:ce:b1:bb:00:e5:97:95:9d:bd:6c:52:7d:
6a:fb:bf:19:47:9a:8d:de:1d:b5:e1:6f:ee:34:54:
be:58:6b:4b:1a:18:cb:74:1d:71:c4:eb:e5:0e:09:
fc:a8:50:10:6f:ab:49:bf:5d:1a:eb:e0:bc:f6:44:
b4:34:9d:f0:86:52:36:32:78:86:22:8d:22:66:53:
32:e7:e5:d7:aa:a2:8f:25:b8:04:b7:25:4c:61:57:
16:27:df:9d:c9:2e:c9:81:28:fc:c3:44:ca:e8:7e:
57:57:c9:44:51:53:d7:ab:0d:49:8b:84:35:9f:f0:
a6:f0:48:b7:9e:36:94:84:c4:7b:f2:e2:60:ad:8f:
61:ab:6c:36:96:e0:d6:51:91:b6:76:ab:00:b9:9e:
9a:c2:7b:6c:af:d4:89:f1:ed:d0:29:f8:9e:f1:17:
0a:bd:1a:4b:38:1c:ae:35:6d:f6:55:7b:f0:9e:50:
7b:ab:e2:27:9d:d4:76:25:d1:9d:70:68:7f:19:58:
37:f7:ef:f6:9b:34:8d:e0:33:19:3e:61:c1:34:65:
00:8d:96:30:50:ed:7f:06:1b:03:f5:42:ee:01:0d:
ef:31:56:a5:8e:3a:a1:9d:a8:5b:43:7f:bc:94:df:
bb:3f:ee:9a:77:6c:38:22:58:d5:3d:58:d7:a0:7a:
50:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:9D:92:F8:3F:5E:0C:EF:5F:EA:DD:BE:34:A8:FB:90:8D:A1:8D:14
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30422/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30422/LZ2S-D9eDO9f6t2-NKj7kI2hjRQ.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:c20::/32
Signature Algorithm: sha256WithRSAEncryption
0d:00:01:0d:b2:58:66:3f:19:b6:79:68:50:18:3f:14:72:a1:
2d:e9:88:79:da:e3:e3:9d:d3:92:71:a8:be:59:cb:a8:e1:4e:
51:40:47:43:5c:f0:b5:65:5e:0e:bf:a6:40:cc:be:e7:f3:9a:
c5:da:a7:87:0b:d8:74:de:52:fb:a5:44:50:31:1a:69:8d:53:
20:46:d1:b9:da:3b:89:37:9a:48:09:2b:18:1c:b5:cb:8f:0c:
cc:74:64:58:cf:e2:5b:5d:41:26:81:f3:b3:0a:7d:a8:99:77:
46:c8:ce:33:a3:f3:69:4c:ad:20:cc:ac:36:fc:1d:3f:13:34:
24:0c:81:b8:a7:84:e3:0d:2f:98:76:82:e5:d1:7d:54:59:f0:
5e:79:8d:98:80:08:4a:78:ec:a7:6e:23:4c:17:e6:03:3a:da:
b8:c8:53:5f:00:89:71:7a:b0:0f:15:ec:51:4e:d8:77:f8:18:
bd:24:6d:d8:b1:6f:63:3a:81:2f:8f:2a:0a:38:bd:dc:25:ec:
12:e8:f2:78:2b:3e:cf:88:29:02:c8:f7:0f:9b:37:d1:38:d6:
1a:b6:d0:3a:2d:dd:89:31:b3:3b:9a:c1:40:77:60:73:93:1d:
b0:12:02:e3:7d:a1:2e:f4:eb:88:80:ea:50:4f:d8:43:e1:eb:
4b:ed:fa:8e
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgICYxIwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC
NTIwREFBQzdEQThGMB4XDTI2MDIxNTAxMzk1MFoXDTI3MDIxNTAxMzAwMlowMzEx
MC8GA1UEAxMoMkQ5RDkyRjgzRjVFMENFRjVGRUFEREJFMzRBOEZCOTA4REExOEQx
NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM+fzrG7AOWXlZ29bFJ9
avu/GUeajd4dteFv7jRUvlhrSxoYy3QdccTr5Q4J/KhQEG+rSb9dGuvgvPZEtDSd
8IZSNjJ4hiKNImZTMufl16qijyW4BLclTGFXFiffnckuyYEo/MNEyuh+V1fJRFFT
16sNSYuENZ/wpvBIt542lITEe/LiYK2PYatsNpbg1lGRtnarALmemsJ7bK/UifHt
0Cn4nvEXCr0aSzgcrjVt9lV78J5Qe6viJ53UdiXRnXBofxlYN/fv9ps0jeAzGT5h
wTRlAI2WMFDtfwYbA/VC7gEN7zFWpY46oZ2oW0N/vJTfuz/umndsOCJY1T1Y16B6
UCMCAwEAAaOCAowwggKIMB0GA1UdDgQWBBQtnZL4P14M71/q3b40qPuQjaGNFDAf
BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0
b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa
dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j
Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0
NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G
A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw
gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9hcC9BOTFBNzM4MTAwMDAvMzA0MjIvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw
a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwNDIyL0xa
MlMtRDllRE85ZjZ0Mi1OS2o3a0kyaGpSUS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz
Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv
bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAQwgMA0GCSqGSIb3
DQEBCwUAA4IBAQANAAENslhmPxm2eWhQGD8UcqEt6Yh52uPjndOScai+Wcuo4U5R
QEdDXPC1ZV4Ov6ZAzL7n85rF2qeHC9h03lL7pURQMRppjVMgRtG52juJN5pICSsY
HLXLjwzMdGRYz+JbXUEmgfOzCn2omXdGyM4zo/NpTK0gzKw2/B0/EzQkDIG4p4Tj
DS+YdoLl0X1UWfBeeY2YgAhKeOynbiNMF+YDOtq4yFNfAIlxerAPFexRTth3+Bi9
JG3YsW9jOoEvjyoKOL3cJewS6PJ4Kz7PiCkCyPcPmzfRONYattA6Ld2JMbM7msFA
d2Bzkx2wEgLjfaEu9OuIgOpQT9hD4etL7fqO
-----END CERTIFICATE-----
Generated at Sat Feb 21 12:29:45 2026 by rpki-client