
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/apWCSYAD-L9tk8FR84y0iWpLLVw.cer
File: apWCSYAD-L9tk8FR84y0iWpLLVw.cer (raw, json)
Hash identifier: QAol3Q95ZlkvjAq/vM2/yHsZ2WxyBi2bTvJ+EyRomjU=
Subject key identifier: 6A:95:82:49:80:03:F8:BF:6D:93:C1:51:F3:8C:B4:89:6A:4B:2D:5C
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 70B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1492/apWCSYAD-L9tk8FR84y0iWpLLVw.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1492/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Sat 15 Aug 2026 01:41:20 +0000
Certificate not after: Sun 15 Aug 2027 01:30:02 +0000
Subordinate resources: IP: 202.253.252.0/23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 10:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28857 (0x70b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Aug 15 01:41:20 2026 GMT
Not After : Aug 15 01:30:02 2027 GMT
Subject: CN=6A9582498003F8BF6D93C151F38CB4896A4B2D5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8a:18:b3:bf:9b:21:ed:7e:d1:13:6b:dd:5b:
69:7d:30:a7:a7:c1:ac:84:da:9d:60:9b:76:fc:5d:
c5:14:ad:ed:66:f2:43:42:34:cb:bf:c2:98:51:89:
81:2b:c0:cf:88:f9:ef:c8:86:8d:1e:4c:16:45:d9:
ec:28:dd:66:19:ea:d0:f9:19:d9:57:db:95:7a:a1:
8a:b1:8f:fc:93:4b:b4:ff:56:7a:85:69:34:e1:05:
c9:d9:a8:21:09:d5:e0:5a:78:9f:05:3f:0e:aa:65:
95:28:de:2c:5c:d0:f7:4c:53:2a:f1:49:76:12:63:
ae:a4:17:46:bd:bc:f0:9b:51:7f:31:51:20:c3:b7:
16:d7:da:07:b2:67:60:f2:d5:78:fb:c3:0c:05:8f:
99:9c:c3:b7:28:14:94:63:ed:18:2c:ed:28:9b:6f:
4c:14:81:43:f9:f2:34:a3:65:54:01:61:2e:ae:f7:
56:c4:46:b9:46:99:5a:63:6a:27:4c:9f:62:97:c5:
56:ab:4b:cb:a5:69:eb:3d:e4:0d:f9:c2:6e:32:a0:
fd:5d:b8:4f:58:ab:11:0e:99:f9:b6:f7:91:21:50:
a2:f7:fa:7a:91:2a:d2:0f:3b:12:c8:09:56:d4:ec:
7a:3f:b2:90:3f:20:c6:9b:86:24:ad:8b:53:9e:37:
52:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:95:82:49:80:03:F8:BF:6D:93:C1:51:F3:8C:B4:89:6A:4B:2D:5C
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1492/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1492/apWCSYAD-L9tk8FR84y0iWpLLVw.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.253.252.0/23
Signature Algorithm: sha256WithRSAEncryption
21:e9:ca:17:58:73:f0:7f:ab:c2:b7:e4:6d:da:98:0e:18:2c:
84:38:93:f8:18:f2:26:28:af:c6:dd:69:45:74:49:50:1e:cb:
c0:ed:ab:d7:fc:c6:21:7e:49:c9:a1:11:b7:d7:d7:e9:29:b4:
4a:1f:34:f5:46:46:53:ec:aa:62:67:c0:d3:79:e4:06:16:c1:
b2:31:d9:67:86:f7:0b:6c:8d:a1:4e:32:2f:46:59:53:4b:e9:
e7:0e:d3:bf:ff:31:b1:71:6c:18:13:bd:db:e2:51:5a:04:5c:
e9:60:1e:f2:87:8e:b5:72:ce:ed:62:26:6a:3e:42:d2:47:48:
25:18:11:c9:c0:84:16:85:3f:b3:92:6b:29:83:f8:bf:f6:09:
31:0d:15:d0:ad:1f:1e:fc:d1:fd:a8:d4:d8:d6:06:d1:36:40:
92:25:78:ca:06:72:09:c3:de:f4:3f:a7:ab:36:75:35:de:3a:
7f:92:c4:27:e6:85:dc:83:c2:a9:c1:34:45:19:fb:aa:69:68:
ea:7f:f6:84:1b:0c:29:a1:63:1b:d1:53:1f:e0:e2:58:58:6f:
5d:69:b9:bc:94:06:1b:62:3b:f0:64:26:6d:de:82:13:51:27:
e4:80:e8:05:52:48:d5:52:8c:6f:41:3f:51:2a:df:df:a3:40:
77:52:b0:88
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICcLkwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC
NTIwREFBQzdEQThGMB4XDTI2MDgxNTAxNDEyMFoXDTI3MDgxNTAxMzAwMlowMzEx
MC8GA1UEAxMoNkE5NTgyNDk4MDAzRjhCRjZEOTNDMTUxRjM4Q0I0ODk2QTRCMkQ1
QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK6KGLO/myHtftETa91b
aX0wp6fBrITanWCbdvxdxRSt7WbyQ0I0y7/CmFGJgSvAz4j578iGjR5MFkXZ7Cjd
Zhnq0PkZ2VfblXqhirGP/JNLtP9WeoVpNOEFydmoIQnV4Fp4nwU/DqpllSjeLFzQ
90xTKvFJdhJjrqQXRr288JtRfzFRIMO3FtfaB7JnYPLVePvDDAWPmZzDtygUlGPt
GCztKJtvTBSBQ/nyNKNlVAFhLq73VsRGuUaZWmNqJ0yfYpfFVqtLy6Vp6z3kDfnC
bjKg/V24T1irEQ6Z+bb3kSFQovf6epEq0g87EsgJVtTsej+ykD8gxpuGJK2LU543
Ut8CAwEAAaOCAokwggKFMB0GA1UdDgQWBBRqlYJJgAP4v22TwVHzjLSJakstXDAf
BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0
b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa
dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j
Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0
NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G
A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAQYIKwYBBQUHAQsEgfQw
gfEwQwYIKwYBBQUHMAWGN3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9hcC9BOTFBNzM4MTAwMDAvMTQ5Mi8wYgYIKwYBBQUHMAqGVnJzeW5jOi8vcnBr
aS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMTQ5Mi9hcFdD
U1lBRC1MOXRrOEZSODR5MGlXcExMVncubWZ0MEYGCCsGAQUFBzANhjpodHRwczov
L3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQByv38MA0GCSqGSIb3DQEB
CwUAA4IBAQAh6coXWHPwf6vCt+Rt2pgOGCyEOJP4GPImKK/G3WlFdElQHsvA7avX
/MYhfknJoRG319fpKbRKHzT1RkZT7KpiZ8DTeeQGFsGyMdlnhvcLbI2hTjIvRllT
S+nnDtO//zGxcWwYE73b4lFaBFzpYB7yh461cs7tYiZqPkLSR0glGBHJwIQWhT+z
kmspg/i/9gkxDRXQrR8e/NH9qNTY1gbRNkCSJXjKBnIJw970P6erNnU13jp/ksQn
5oXcg8KpwTRFGfuqaWjqf/aEGwwpoWMb0VMf4OJYWG9dabm8lAYbYjvwZCZt3oIT
USfkgOgFUkjVUoxvQT9RKt/fo0B3UrCI
-----END CERTIFICATE-----
Generated at Fri Aug 21 23:55:42 2026 by rpki-client