
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/YfJYFOjD6u0sDZypzzsIcLnm4HY.cer
File: YfJYFOjD6u0sDZypzzsIcLnm4HY.cer (raw, json)
Hash identifier: 9TpTTw74V6PEOvvlNSW3QMgHwMAulE2pujeLeh2fooM=
Subject key identifier: 61:F2:58:14:E8:C3:EA:ED:2C:0D:9C:A9:CF:3B:08:70:B9:E6:E0:76
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 69CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20109/YfJYFOjD6u0sDZypzzsIcLnm4HY.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20109/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Fri 15 May 2026 01:42:33 +0000
Certificate not after: Sat 15 May 2027 01:30:02 +0000
Subordinate resources: IP: 103.146.64.0/23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 00:21:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27084 (0x69cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: May 15 01:42:33 2026 GMT
Not After : May 15 01:30:02 2027 GMT
Subject: CN=61F25814E8C3EAED2C0D9CA9CF3B0870B9E6E076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:45:9b:d0:25:4d:c8:e8:03:4b:09:f8:8f:3f:
5a:91:4d:45:d3:37:b0:c3:12:87:69:5c:fd:44:83:
6d:08:5e:25:f4:d3:82:d0:12:69:d1:4a:38:3e:ee:
7d:47:77:35:ee:db:d5:62:ca:95:75:db:ae:d9:b8:
7b:4a:eb:36:4c:27:e1:70:a9:cb:2e:59:ab:2c:8c:
1d:50:0e:8e:be:fb:5f:72:02:76:73:ae:4b:0c:96:
ec:c3:97:50:a0:01:01:e8:8c:a8:0b:ee:a7:d2:e9:
63:3f:28:ac:f7:73:12:9e:85:e0:bc:ba:30:c5:a0:
6b:10:47:1a:f1:fd:0c:28:b6:24:ed:77:c0:0f:6f:
c7:2e:cc:0f:ec:56:77:9c:38:06:5e:f8:77:3e:f6:
43:79:54:1a:a1:9c:ab:cf:da:07:52:70:22:d6:d6:
eb:cc:62:ab:45:86:9e:22:15:aa:83:3f:fc:0f:03:
b7:ea:8d:ad:6f:be:29:22:08:cb:9b:d1:03:cb:dd:
2d:9c:b2:9f:a3:eb:1b:6f:ff:64:10:1a:1d:36:03:
94:0e:36:71:0f:2c:ed:44:92:d6:34:64:cc:ef:92:
a9:67:f0:c2:82:24:d7:a3:6d:9e:e8:41:42:69:fa:
0a:e9:59:81:a8:d2:6f:0a:7d:c2:b2:63:5b:47:13:
bc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F2:58:14:E8:C3:EA:ED:2C:0D:9C:A9:CF:3B:08:70:B9:E6:E0:76
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20109/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20109/YfJYFOjD6u0sDZypzzsIcLnm4HY.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.146.64.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:c3:e9:2f:57:38:c3:24:18:ef:e8:9f:3a:8f:87:93:b0:ec:
67:00:b9:c3:2f:2c:54:91:2b:f7:8d:fe:77:3c:5f:35:db:6f:
45:7d:1b:e3:ac:56:93:36:09:fb:36:1a:cd:fb:70:94:21:22:
68:51:12:a0:37:84:54:69:11:9b:0c:d8:c8:df:f3:f2:1a:46:
47:eb:09:74:c9:74:de:5f:75:51:3d:63:c5:93:49:5d:f6:96:
e6:08:e9:5f:a2:cc:b6:5b:0e:ac:a5:69:65:9a:9c:e4:7a:11:
2f:51:98:2b:89:66:45:bf:36:61:20:75:3a:87:9f:a6:fc:5f:
50:d1:cc:64:32:d7:d1:ec:2f:dc:09:d7:1d:19:cb:48:dd:0e:
23:c6:92:0e:07:54:43:8c:79:9d:0c:75:b2:9a:80:e6:9a:ac:
84:1a:31:0e:68:94:df:44:d3:79:1b:82:9b:c8:f5:7d:19:13:
48:21:ad:28:2e:5e:a0:1e:de:f4:07:51:14:72:d4:0c:f9:98:
21:8f:48:9e:2e:3b:0e:1e:37:b3:63:c6:bc:ed:de:fc:b9:ac:
ec:38:3d:6f:62:7d:da:79:f6:d5:12:5d:fa:fd:4d:87:11:7a:
c4:2d:f7:4a:8d:57:da:e7:c8:19:a5:77:d2:c3:64:86:92:26:
b3:85:04:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 04:27:32 2026 by rpki-client