
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/Znb2kUBjXPStKjqc9e8lut0txy0.cer
File: Znb2kUBjXPStKjqc9e8lut0txy0.cer (raw, json)
Hash identifier: /hR5d9Bcg6uhb0U2uYnCDOgp5k1/3i+bexm2A9RoUPw=
Subject key identifier: 66:76:F6:91:40:63:5C:F4:AD:2A:3A:9C:F5:EF:25:BA:DD:2D:C7:2D
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 7368
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/964/Znb2kUBjXPStKjqc9e8lut0txy0.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/964/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Thu 15 Oct 2026 01:31:27 +0000
Certificate not after: Fri 15 Oct 2027 01:30:02 +0000
Subordinate resources: IP: 203.170.52.0/22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 04:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29544 (0x7368)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Oct 15 01:31:27 2026 GMT
Not After : Oct 15 01:30:02 2027 GMT
Subject: CN=6676F69140635CF4AD2A3A9CF5EF25BADD2DC72D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fe:78:a0:71:63:5a:95:74:57:11:16:d3:6e:
40:e3:61:92:87:e6:19:23:fe:1a:6c:97:59:9b:0b:
8d:34:d2:2e:c9:45:fc:1e:b4:28:6f:ee:28:63:16:
66:a4:4d:90:f7:bc:06:3f:f7:3d:67:bc:dd:68:ff:
73:09:e4:39:ac:b3:d1:76:19:f2:07:a3:12:3c:c8:
2f:eb:56:e9:51:31:f9:03:ee:f8:f1:7e:96:42:72:
4e:5a:f0:85:8d:9b:63:42:a6:26:41:07:65:d4:38:
3e:f8:e1:ce:2d:06:da:93:6f:81:a1:a4:4d:54:cd:
aa:82:c5:a8:6a:91:8a:fe:08:2e:ba:35:3f:d3:50:
a5:f2:e0:ae:2a:b6:aa:d7:cf:e8:6e:ff:da:6d:94:
5a:68:5d:ef:ff:06:20:06:f0:0a:43:89:77:d5:82:
7b:63:f6:fc:5a:2f:1c:aa:35:fa:c2:09:6a:aa:c1:
cb:47:be:e1:51:35:74:64:18:8f:26:17:ac:5a:62:
77:73:18:64:ec:31:56:ea:1f:db:be:1f:57:f4:54:
c4:a9:91:f4:5d:fd:a3:75:26:96:0f:d8:af:f5:00:
2d:ed:16:ea:28:d2:f9:b5:d4:f3:cc:8a:4a:81:a2:
25:f4:52:dc:61:f0:ec:b5:f4:ba:7f:e1:07:70:f8:
24:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:76:F6:91:40:63:5C:F4:AD:2A:3A:9C:F5:EF:25:BA:DD:2D:C7:2D
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/964/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/964/Znb2kUBjXPStKjqc9e8lut0txy0.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.170.52.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:bb:ab:e2:85:3a:d6:7f:08:bf:19:5a:57:72:be:eb:13:e4:
5e:82:ab:d1:fb:fc:af:2c:f3:2f:34:d8:69:52:a1:cb:0d:6d:
6c:4d:d3:d7:12:4a:e0:a4:30:58:e8:ce:ed:6d:df:ee:4b:32:
dd:19:ad:4a:76:a8:c5:13:16:07:64:d2:c2:c0:b6:98:71:30:
ba:68:1a:ab:5a:b3:db:f9:a1:5a:f8:59:97:8a:16:2c:0b:99:
b1:00:38:c5:01:91:c5:c7:2a:ce:a0:63:af:7f:ab:65:14:4e:
79:92:85:38:87:56:48:65:dd:67:13:d0:33:3d:7f:12:2d:6d:
c8:da:49:f8:64:c0:d5:30:f6:32:19:61:cc:a0:c2:f2:98:1e:
62:22:72:a9:36:5d:d8:b6:d3:11:25:9e:ca:5f:a1:73:b1:34:
00:e3:b9:81:b3:0a:1a:8d:62:05:2e:ba:69:ed:05:17:4b:fc:
d6:56:22:cc:a5:9d:a6:8f:5b:9f:fe:0f:6e:a9:25:36:97:23:
e5:26:dd:04:2f:08:32:73:4c:9d:6e:d5:47:5a:6d:ee:02:b7:
e4:06:5f:24:08:1b:56:55:2e:08:65:49:c2:ee:01:92:56:59:
0d:97:31:c0:ce:69:b5:0b:fe:aa:b8:dd:f4:7c:51:e8:1a:2e:
d4:d7:41:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 03:17:39 2026 by rpki-client