
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/bN5CfYSZqDSfFydfS6OBRUYVoL4.cer
File: bN5CfYSZqDSfFydfS6OBRUYVoL4.cer (raw, json)
Hash identifier: EDC2D3mSt/OGvSwFmEFusUWaGfD4B5Izx70RHP+Vmjs=
Subject key identifier: 6C:DE:42:7D:84:99:A8:34:9F:17:27:5F:4B:A3:81:45:46:15:A0:BE
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 7419
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/566/bN5CfYSZqDSfFydfS6OBRUYVoL4.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/566/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Thu 15 Oct 2026 01:34:57 +0000
Certificate not after: Fri 15 Oct 2027 01:30:02 +0000
Subordinate resources: IP: 103.225.152.0/22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 15:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29721 (0x7419)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Oct 15 01:34:57 2026 GMT
Not After : Oct 15 01:30:02 2027 GMT
Subject: CN=6CDE427D8499A8349F17275F4BA381454615A0BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8b:42:85:06:34:96:24:bb:2e:37:28:cc:69:
b5:6a:b4:21:ee:c1:0c:17:62:30:0f:d1:6c:43:14:
6f:52:69:ad:42:f6:c8:76:96:3e:b2:2e:e6:04:3e:
92:2d:1b:ce:95:0c:1a:fe:83:6e:c0:46:fe:6a:3d:
03:14:75:9c:89:d4:11:ea:cc:bb:8a:2e:0b:05:3f:
43:39:be:47:bf:37:bc:0a:5e:4c:3f:6a:ee:66:27:
cc:4c:e0:b7:91:99:53:5e:7b:ac:23:24:bd:ca:af:
5a:ff:ba:d4:d2:d9:58:ca:f4:b5:02:2b:32:c0:00:
99:27:cf:0c:56:6a:8a:35:a8:67:7e:ce:e5:bf:55:
4b:67:11:32:20:c9:09:39:d1:02:6b:39:d8:d0:93:
18:b6:6c:a7:11:a0:8b:31:fe:6f:8e:93:45:df:26:
fc:7c:e4:84:21:15:30:ae:ff:89:ba:c4:c4:65:37:
81:cc:d0:8a:83:b2:cf:9f:4d:72:e4:15:76:af:25:
ed:bd:f4:5b:5e:ea:a8:c8:52:79:7e:5e:ea:2d:28:
38:e1:98:94:d4:fa:c3:da:1c:61:3d:4b:4a:f2:c8:
a9:10:3b:7f:97:16:cd:5f:1d:aa:99:21:a7:57:77:
35:3e:78:70:d5:c0:02:35:0d:20:51:43:84:d2:66:
db:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:DE:42:7D:84:99:A8:34:9F:17:27:5F:4B:A3:81:45:46:15:A0:BE
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/566/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/566/bN5CfYSZqDSfFydfS6OBRUYVoL4.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.225.152.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:46:9c:61:40:9a:23:7b:a6:70:23:1c:4a:48:86:bf:60:f5:
13:6e:05:ec:c0:9c:b2:6f:8c:e3:50:90:2e:ec:0a:b7:e8:06:
44:4e:26:56:a9:bc:51:55:9a:e1:6d:cb:3e:e9:48:5d:7a:0c:
39:10:40:23:f8:7f:81:80:cc:4c:1b:87:f3:99:22:69:3b:2d:
72:6c:08:fd:2d:b5:91:67:64:61:3d:8b:c5:df:62:7a:77:e8:
88:fc:e9:e1:4f:33:01:d2:6f:f1:78:56:e6:8b:5a:32:08:bb:
85:f8:6d:f6:c4:71:5e:7e:49:3c:b4:9d:60:43:60:58:e2:b2:
93:f8:cd:4c:72:38:ae:52:7d:e9:d5:37:f3:f6:2e:94:2b:26:
25:58:b8:01:cf:7b:a9:21:d4:9d:db:37:41:f0:99:92:d5:98:
9b:53:ab:b6:1c:d9:cc:3e:5f:a5:ae:2b:00:9d:6c:be:44:bd:
66:37:d8:83:93:16:a7:30:aa:e1:0c:86:a2:00:83:ba:6a:63:
e6:40:17:d0:db:cd:f3:b0:6e:23:de:b4:2c:5e:7f:de:ec:78:
fe:cf:2f:6d:bd:c5:d5:76:67:61:f9:9b:6c:9c:55:86:32:3f:
36:f9:f7:ff:22:c1:d8:32:d5:32:75:b4:5a:e3:e6:ef:06:57:
f1:29:7f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:11:37 2026 by rpki-client