
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/URZN3OfziPgkTEUhkPaWTxrwaF0.cer
File: URZN3OfziPgkTEUhkPaWTxrwaF0.cer (raw, json)
Hash identifier: faCGtoGWXatIDAD8P+/J/eHJ1Vox+eAV+3VkhanEM9U=
Subject key identifier: 51:16:4D:DC:E7:F3:88:F8:24:4C:45:21:90:F6:96:4F:1A:F0:68:5D
Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2
Certificate issuer: /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2
Certificate serial: 18BB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/URZN3OfziPgkTEUhkPaWTxrwaF0.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Thu 15 Oct 2026 01:42:45 +0000
Certificate not after: Fri 15 Oct 2027 01:30:02 +0000
Subordinate resources: IP: 128.22.0.0/16
IP: 128.27.0.0/16
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6331 (0x18bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2
Validity
Not Before: Oct 15 01:42:45 2026 GMT
Not After : Oct 15 01:30:02 2027 GMT
Subject: CN=51164DDCE7F388F8244C452190F6964F1AF0685D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8d:c9:73:04:22:dd:77:56:79:c9:50:91:ea:
8c:a5:78:b2:0c:b3:5f:54:73:b4:5a:e6:f3:a4:8a:
25:b1:a6:20:1b:34:fc:98:da:43:ea:b0:77:2a:6f:
cb:5a:6a:1b:71:32:72:6b:b0:c1:25:78:60:dc:a6:
7b:9f:17:85:b5:eb:32:ad:ec:d5:ad:5f:09:6c:28:
2d:0e:a9:b0:94:3c:37:9a:db:3a:98:98:ea:ca:04:
bf:05:af:5d:17:30:c6:56:bf:3c:10:fc:37:53:2c:
35:f5:01:5a:0a:41:ff:07:b6:74:a9:0c:db:ab:ed:
4a:6a:80:f3:88:f4:a8:51:9f:aa:6c:20:f1:5c:c4:
6f:d6:ed:cf:20:7c:fe:bb:45:5d:d8:1e:c2:38:e2:
e1:46:27:44:92:f5:a7:57:6e:33:46:8c:64:ec:3c:
a6:63:65:8f:3e:54:a2:32:21:04:68:1d:3d:48:17:
37:50:44:28:89:e4:c9:b2:6e:67:b2:83:d1:6f:4c:
ab:57:e7:dc:eb:0f:38:82:34:00:9b:eb:6e:94:10:
92:2d:62:fd:82:a6:5e:af:d1:71:64:2b:a7:01:05:
6b:a9:10:32:94:66:df:a1:bb:e5:56:68:ec:61:5c:
25:19:a6:f9:2d:1a:33:99:5b:15:35:df:ff:18:5b:
45:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:16:4D:DC:E7:F3:88:F8:24:4C:45:21:90:F6:96:4F:1A:F0:68:5D
X509v3 Authority Key Identifier:
keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/URZN3OfziPgkTEUhkPaWTxrwaF0.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
128.22.0.0/16
128.27.0.0/16
Signature Algorithm: sha256WithRSAEncryption
76:f3:f8:af:08:84:c1:c6:b2:e0:de:70:14:75:d8:d0:ce:9c:
fb:db:ae:80:13:46:d9:38:88:7d:92:c2:75:79:06:a4:09:5b:
5f:aa:0a:30:9c:27:5a:59:b9:59:59:bd:e4:28:ab:84:3e:57:
b6:84:3d:26:e1:59:a4:ca:1c:1b:ca:d3:3a:8a:6c:14:19:e3:
cc:a5:fb:7c:14:51:19:b3:25:c5:88:00:02:5f:79:64:d8:f4:
32:ed:de:b7:62:14:b2:c4:4a:ec:f9:39:72:12:d6:27:6a:d8:
9b:5f:9b:bf:db:90:2b:a5:e4:2f:ad:53:e2:e6:2c:e2:0e:a3:
7e:60:39:00:d2:a5:d8:9b:40:5b:ae:cc:c5:23:61:82:07:b2:
4b:42:3b:85:b7:60:00:cd:58:11:60:6a:67:c6:7d:eb:63:9b:
30:1a:85:e9:88:b1:28:76:d7:78:1b:d1:e9:f8:2d:4e:bc:b9:
87:e8:a1:81:d0:b6:d6:47:d0:99:7a:93:f6:99:fb:22:7c:9d:
f7:26:00:6b:f3:7e:a1:d8:2d:7f:cd:6b:01:a9:85:d7:26:a1:
1b:e5:f2:2b:22:c2:3e:49:e5:93:0a:93:cd:fe:38:6a:a7:72:
c5:e1:2a:13:54:15:87:f5:44:84:67:09:8f:8d:d8:f7:f6:db:
cd:2d:ad:a6
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgICGLswDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QTczODEwMDAwMTEwLwYDVQQFEyg2RjY4M0VBRTM5QTE3MzhBRTZDOTNGREYwNDFG
MTE0OEU2NTM0REYyMB4XDTI2MTAxNTAxNDI0NVoXDTI3MTAxNTAxMzAwMlowMzEx
MC8GA1UEAxMoNTExNjRERENFN0YzODhGODI0NEM0NTIxOTBGNjk2NEYxQUYwNjg1
RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMONyXMEIt13VnnJUJHq
jKV4sgyzX1RztFrm86SKJbGmIBs0/JjaQ+qwdypvy1pqG3EycmuwwSV4YNyme58X
hbXrMq3s1a1fCWwoLQ6psJQ8N5rbOpiY6soEvwWvXRcwxla/PBD8N1MsNfUBWgpB
/we2dKkM26vtSmqA84j0qFGfqmwg8VzEb9btzyB8/rtFXdgewjji4UYnRJL1p1du
M0aMZOw8pmNljz5UojIhBGgdPUgXN1BEKInkybJuZ7KD0W9Mq1fn3OsPOII0AJvr
bpQQki1i/YKmXq/RcWQrpwEFa6kQMpRm36G75VZo7GFcJRmm+S0aM5lbFTXf/xhb
RVECAwEAAaOCAoowggKGMB0GA1UdDgQWBBRRFk3c5/OI+CRMRSGQ9pZPGvBoXTAf
BgNVHSMEGDAWgBRvaD6uOaFziubJP98EHxFI5lNN8jAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0
b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYjJnLXJqbWhjNHJteVRfZkJC
OFJTT1pUVGZJLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j
Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFD
ODgzN0M3MkZEMUZGMi9iMmctcmptaGM0cm15VF9mQkI4UlNPWlRUZkkuY2VyMA8G
A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB
7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw
L2FwL0E5MUE3MzgxMDAwMC80OTMvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt
cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzQ5My9VUlpOM09m
emlQZ2tURVVoa1BhV1R4cndhRjAubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw
a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s
MCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMAgBYDAwCAGzANBgkqhkiG9w0B
AQsFAAOCAQEAdvP4rwiEwcay4N5wFHXY0M6c+9uugBNG2TiIfZLCdXkGpAlbX6oK
MJwnWlm5WVm95CirhD5XtoQ9JuFZpMocG8rTOopsFBnjzKX7fBRRGbMlxYgAAl95
ZNj0Mu3et2IUssRK7Pk5chLWJ2rYm1+bv9uQK6XkL61T4uYs4g6jfmA5ANKl2JtA
W67MxSNhggeyS0I7hbdgAM1YEWBqZ8Z962ObMBqF6YixKHbXeBvR6fgtTry5h+ih
gdC21kfQmXqT9pn7Inyd9yYAa/N+odgtf81rAamF1yahG+XyKyLCPknlkwqTzf44
aqdyxeEqE1QVh/VEhGcJj43Y9/bbzS2tpg==
-----END CERTIFICATE-----
Generated at Mon Oct 26 12:43:22 2026 by rpki-client