
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/Xe_54al9RszcEvYG7rOKPmTbyB8.cer
File: Xe_54al9RszcEvYG7rOKPmTbyB8.cer (raw, json)
Hash identifier: MMCUccdOM1jM7Z1bNxJ6TsulBPIx6m8mp0FcNexgt+E=
Subject key identifier: 5D:EF:F9:E1:A9:7D:46:CC:DC:12:F6:06:EE:B3:8A:3E:64:DB:C8:1F
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 6F34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30040/Xe_54al9RszcEvYG7rOKPmTbyB8.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30040/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Sat 15 Aug 2026 01:32:39 +0000
Certificate not after: Sun 15 Aug 2027 01:30:02 +0000
Subordinate resources: IP: 2001:cf8::/32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 10:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28468 (0x6f34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Aug 15 01:32:39 2026 GMT
Not After : Aug 15 01:30:02 2027 GMT
Subject: CN=5DEFF9E1A97D46CCDC12F606EEB38A3E64DBC81F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fd:44:dd:75:3b:49:ca:3d:52:07:6f:da:65:
10:ec:82:57:65:44:b5:c9:7e:f8:e9:9b:32:16:cb:
0b:f6:2b:42:e4:46:94:1d:4a:a5:6d:8f:2f:6c:bb:
8f:d5:c6:2d:74:b4:45:55:04:cc:a6:8e:04:b7:d3:
6a:97:14:65:f9:67:3f:b9:f3:42:11:6f:5c:76:06:
cd:c2:b8:fb:70:70:58:c5:a8:62:b4:3e:fc:1f:0d:
93:bf:74:71:51:3b:b8:cf:77:f5:29:17:09:0f:67:
f6:d0:63:29:82:c6:14:35:00:10:83:68:1c:7d:36:
f3:e3:97:09:29:ff:0e:8d:8e:6b:1d:6c:bc:4a:72:
ce:f0:93:81:3f:b6:fc:a5:d0:82:a7:1c:f6:4a:83:
dc:18:ac:c3:c0:6c:f7:0e:14:1c:41:e2:4e:0b:fc:
5f:3c:fd:4a:14:fd:3f:ac:58:76:d6:39:16:c6:d4:
04:31:99:e3:e0:15:24:c4:b3:44:9f:9b:ca:aa:1d:
a0:8f:a4:5a:3b:98:1b:2f:2f:b4:f3:1b:59:5e:29:
88:51:0c:d8:07:a0:17:fd:35:57:84:a5:a0:3f:87:
dc:36:8d:d7:4e:ca:1a:79:96:82:dc:4b:b1:1f:c0:
30:f9:1d:2b:6e:3a:25:57:94:f3:7d:d2:9f:6d:8b:
45:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:EF:F9:E1:A9:7D:46:CC:DC:12:F6:06:EE:B3:8A:3E:64:DB:C8:1F
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30040/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30040/Xe_54al9RszcEvYG7rOKPmTbyB8.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:cf8::/32
Signature Algorithm: sha256WithRSAEncryption
0a:7e:89:28:63:c9:40:9c:a6:77:23:4f:9c:dc:da:1f:36:91:
92:f0:4d:95:c5:d7:55:a0:e5:e3:7a:74:65:b2:27:d7:4c:53:
20:f1:38:d7:2e:ee:3c:b9:c2:ec:9f:87:e8:f4:89:be:ff:90:
cd:a7:69:cf:8a:8b:c0:bc:b2:b6:97:75:26:ae:5d:88:c9:3a:
05:da:38:71:67:fc:ec:46:47:eb:bb:04:19:89:1d:cb:a9:da:
be:8c:d7:81:1e:df:36:3f:fb:1c:04:d0:35:33:2a:9c:ca:e8:
83:41:98:e5:f1:d1:e2:f9:7f:13:e7:ff:5b:7c:00:8f:34:5e:
d5:86:c3:cd:19:fd:6a:c7:af:18:a1:9f:ef:22:dd:43:c4:76:
52:bc:0c:9e:c0:78:2e:da:60:7e:05:b5:fd:7b:13:21:0d:3e:
fb:8e:c7:00:00:00:86:f8:49:6b:16:d6:29:87:ae:d4:98:4c:
76:c9:44:28:2c:c4:5e:ed:2d:97:a6:b9:df:93:33:79:a0:2a:
a3:84:b7:99:49:e2:33:75:1a:40:91:2d:8b:58:25:65:49:e2:
e1:1b:30:b3:5c:aa:8d:e3:bd:4b:a1:0d:6b:c0:98:10:fa:d0:
bb:4a:e7:5a:02:21:e6:8c:31:71:43:7f:f2:83:6c:12:57:d0:
7a:9a:d0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 23:57:25 2026 by rpki-client