
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/cQ8h-ENs0DYxVkw45JQL2fyj8Rw.cer
File: cQ8h-ENs0DYxVkw45JQL2fyj8Rw.cer (raw, json)
Hash identifier: MvvBjYuW6x/2LMAP4b3ZRHQO0i+8UB6vjnPjue+8t3E=
Subject key identifier: 71:0F:21:F8:43:6C:D0:36:31:56:4C:38:E4:94:0B:D9:FC:A3:F1:1C
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 62A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/880/cQ8h-ENs0DYxVkw45JQL2fyj8Rw.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/880/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Sun 15 Feb 2026 01:36:51 +0000
Certificate not after: Mon 15 Feb 2027 01:30:02 +0000
Subordinate resources: IP: 103.78.118.0/23
IP: 202.71.48.0/20
IP: 202.90.208.0/20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Feb 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25257 (0x62a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Feb 15 01:36:51 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=710F21F8436CD03631564C38E4940BD9FCA3F11C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:74:9a:61:67:e5:45:8a:b0:14:74:7b:78:c0:
c7:d8:82:36:31:08:31:05:1f:9f:09:5d:8d:cb:dd:
39:26:a6:0e:27:15:ca:64:6b:c4:25:ac:f9:28:a3:
4f:bd:61:13:da:f1:71:0d:fb:b5:e3:70:70:e2:b3:
ac:40:fa:12:41:a7:c6:20:4d:60:65:79:8b:41:99:
16:43:bc:02:f0:5d:2c:25:7f:6a:18:b5:06:44:00:
e0:b9:bb:e3:71:c9:35:14:38:ab:4e:81:7a:3c:43:
c7:a2:f7:71:44:c6:36:6c:92:3c:eb:bc:5e:c4:bf:
1e:6e:8a:9f:71:8d:cd:2f:6a:34:d2:83:cd:fc:8a:
d9:0c:56:35:63:66:0a:01:c3:ed:c4:ba:47:5b:27:
95:6b:6e:a4:de:c8:81:2f:7d:9a:21:c9:68:5a:01:
2d:c5:48:b5:81:fc:e1:5c:5f:40:2d:a6:d4:91:40:
44:fd:de:7a:98:12:e9:78:41:ca:05:e2:29:d5:c9:
59:e1:a2:77:8c:4d:72:b3:7f:2b:36:65:9b:2e:b5:
77:9f:ee:f8:58:13:b0:25:2d:84:18:19:03:74:8b:
d1:bc:18:b2:6e:77:ac:f0:c7:f9:be:01:bc:75:cc:
d3:b4:98:57:0d:97:9b:96:19:2a:61:a9:d8:4c:52:
c1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:0F:21:F8:43:6C:D0:36:31:56:4C:38:E4:94:0B:D9:FC:A3:F1:1C
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/880/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/880/cQ8h-ENs0DYxVkw45JQL2fyj8Rw.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.78.118.0/23
202.71.48.0/20
202.90.208.0/20
Signature Algorithm: sha256WithRSAEncryption
7a:ac:91:3d:72:50:f4:10:a6:69:be:75:d7:95:1d:c8:76:a9:
3d:eb:71:49:f7:4f:a1:79:46:27:f0:58:0d:ac:3c:5e:0f:ff:
4a:15:45:a2:85:21:60:e7:38:be:c5:73:fb:12:f0:9a:f6:23:
7b:85:cf:92:b8:ba:68:00:41:8b:93:2e:cd:48:21:e4:f2:ee:
62:e4:c1:ee:15:ca:7a:64:30:f4:0c:50:12:01:fd:7a:69:a8:
a5:bd:fa:24:d8:ae:54:de:72:ae:b4:8f:31:c1:f6:7c:ae:c2:
70:69:d7:b9:0a:ab:d6:02:5b:78:53:95:a9:47:81:b1:77:c7:
68:96:f3:ce:0e:ac:53:23:7f:6d:ef:7b:af:29:c7:e2:c0:67:
b5:ba:78:ed:78:53:c5:8f:3a:1e:ba:29:99:32:35:f3:b2:73:
4d:40:b7:8e:6a:f1:54:d0:4b:b0:61:db:2c:5d:ba:1a:01:5d:
13:dd:25:fa:bc:99:31:34:ed:34:12:69:72:35:be:c2:ac:e6:
06:b2:52:5f:c4:f4:80:6e:37:0b:e1:c7:56:ba:fc:27:c9:df:
0e:77:5b:c5:d0:f0:b2:45:e2:b9:07:34:a0:24:6b:f6:ce:dd:
00:18:c8:e7:db:dd:bc:cf:db:2c:64:01:3d:9e:30:73:a8:aa:
29:a4:39:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 12:31:24 2026 by rpki-client