Certificate
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer
File: O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer (raw, json)
Hash identifier: eCDYy9t48zId2ONEcLGPC1845A46k/saNB+QaN86W34=
Subject key identifier: 3B:D3:06:EC:E6:04:39:01:E5:2A:8E:8B:66:14:AA:A4:56:AB:A7:56
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 6972
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Fri 15 May 2026 01:39:57 +0000
Certificate not after: Sat 15 May 2027 01:30:02 +0000
Subordinate resources: IP: 58.147.192.0/18
IP: 103.28.236.0/22
IP: 114.129.0.0/21
IP: 114.129.48.0/20
IP: 117.58.224.0/20
IP: 119.235.104.0/21
IP: 124.241.192.0/18
IP: 202.71.64.0/19
IP: 202.78.208.0/20
IP: 202.189.176.0/21
IP: 202.211.112.0/20
IP: 203.78.224.0/19
IP: 203.184.96.0/19
IP: 203.211.160.0 -- 203.211.255.255
IP: 210.89.192.0/18
IP: 210.172.32.0/19
IP: 211.1.224.0/19
IP: 219.96.64.0/19
IP: 219.103.32.0/20
IP: 219.113.64.0/20
IP: 219.124.32.0/20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 17:25:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26994 (0x6972)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: May 15 01:39:57 2026 GMT
Not After : May 15 01:30:02 2027 GMT
Subject: CN=3BD306ECE6043901E52A8E8B6614AAA456ABA756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:00:77:27:0c:24:0e:db:02:02:bd:e4:23:da:
b1:82:4e:13:a9:1c:c9:b1:60:d5:83:bf:ff:8f:d4:
45:b1:0a:94:c4:f9:ce:1b:02:15:69:90:00:73:a6:
5b:77:a1:ce:f3:74:db:9c:c2:86:12:5d:dc:30:fa:
f8:30:60:ac:83:15:70:ce:55:1b:98:b5:c7:65:79:
90:b6:13:db:a6:f0:a2:ea:a9:42:7b:bc:e3:32:a1:
05:5e:f3:4e:31:f8:39:b6:a7:ea:3c:90:e4:f0:2a:
7a:f1:b3:a1:87:8c:d4:53:e6:d7:b1:f3:3b:da:a2:
f5:56:5f:e0:2f:32:4d:3f:55:11:2b:b3:59:70:a0:
c0:90:b4:a2:60:03:23:0a:e5:5c:fd:96:3c:f0:d3:
df:0d:9d:ff:6d:cf:92:b5:1c:8e:94:4c:f5:09:65:
f9:de:d9:b6:42:83:e3:35:59:7d:d4:3d:18:2c:28:
29:d2:46:8f:65:e8:64:8d:9b:d3:29:2f:74:55:50:
5b:83:aa:7a:60:ab:5c:e1:3b:d2:d2:cb:84:e8:94:
8b:b2:25:3d:66:bd:3b:75:f3:43:98:31:62:fb:e5:
ed:8a:8f:b9:29:11:3e:ce:1d:c9:42:73:8d:c8:a2:
26:4a:95:05:40:fa:e2:fe:a2:54:76:51:90:0a:1f:
55:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D3:06:EC:E6:04:39:01:E5:2A:8E:8B:66:14:AA:A4:56:AB:A7:56
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
58.147.192.0/18
103.28.236.0/22
114.129.0.0/21
114.129.48.0/20
117.58.224.0/20
119.235.104.0/21
124.241.192.0/18
202.71.64.0/19
202.78.208.0/20
202.189.176.0/21
202.211.112.0/20
203.78.224.0/19
203.184.96.0/19
203.211.160.0-203.211.255.255
210.89.192.0/18
210.172.32.0/19
211.1.224.0/19
219.96.64.0/19
219.103.32.0/20
219.113.64.0/20
219.124.32.0/20
Signature Algorithm: sha256WithRSAEncryption
38:b3:be:3f:48:17:bd:c6:3c:2a:31:43:f1:04:4e:f1:de:67:
e4:8a:46:9a:d8:04:e8:7e:d3:27:2e:25:a1:25:0f:86:cf:53:
6b:c0:a2:84:dd:af:19:3d:8e:e0:73:b6:db:21:2f:45:4e:33:
42:42:be:ce:d5:ea:78:a2:f6:72:2b:b0:2b:ca:7c:71:39:5c:
68:fe:d2:64:9d:69:3e:f4:8d:05:08:a5:bd:d0:7b:e9:73:3e:
5d:03:50:d9:bc:c6:05:32:03:e5:6a:bf:3f:da:07:d2:fe:c3:
5e:e7:4b:1f:8d:03:64:d9:be:d3:1e:30:26:67:8c:89:2b:30:
3b:09:f5:de:5a:80:4d:74:11:fc:43:51:91:52:4a:c1:0b:88:
a1:7b:05:ba:ef:bd:fc:55:4c:09:1b:0b:bd:45:5d:0d:2b:19:
fd:ba:72:4d:de:6e:77:da:45:4b:4b:15:ca:48:d5:82:ef:42:
d5:99:98:75:8a:0c:97:48:85:da:a4:cf:4a:9a:40:3b:c9:e2:
3c:9c:6e:eb:9a:1a:62:e0:e4:2c:4f:09:8a:d1:c5:55:8a:56:
3d:79:0d:6a:2e:fe:38:5a:00:b5:4f:00:e0:5d:8a:ad:04:50:
06:70:d2:bb:a9:a8:a6:3f:56:91:a5:80:08:27:b6:88:92:e5:
d1:76:cb:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 19:26:26 2026 by rpki-client