
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/l_K0uP4loMDH9Nb9T6G6fK5hKhI.cer
File: l_K0uP4loMDH9Nb9T6G6fK5hKhI.cer (raw, json)
Hash identifier: iZCaLivd5XvJxeEuPP9N/X3t7xw5YfsAqsL8ZiRr8/E=
Subject key identifier: 97:F2:B4:B8:FE:25:A0:C0:C7:F4:D6:FD:4F:A1:BA:7C:AE:61:2A:12
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 687D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30260/l_K0uP4loMDH9Nb9T6G6fK5hKhI.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30260/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Fri 15 May 2026 01:32:51 +0000
Certificate not after: Sat 15 May 2027 01:30:02 +0000
Subordinate resources: IP: 2001:2f0::/32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26749 (0x687d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: May 15 01:32:51 2026 GMT
Not After : May 15 01:30:02 2027 GMT
Subject: CN=97F2B4B8FE25A0C0C7F4D6FD4FA1BA7CAE612A12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:38:2c:56:40:ef:1b:56:45:1a:b9:05:ca:99:
ac:68:6e:70:37:ff:db:c6:95:0b:aa:72:46:b8:ef:
b3:5f:d5:ba:0e:6b:ba:d6:8b:d7:82:24:9c:34:ac:
57:98:3a:5a:e6:a8:0d:65:2f:75:36:34:b5:5a:c5:
f2:f1:12:6c:9e:ea:ac:2f:16:02:5f:e7:06:ba:10:
f5:3f:dd:97:57:fd:7a:64:12:99:a7:1f:08:91:f5:
7f:a9:f6:56:19:d5:a0:e7:04:8f:6f:6c:88:e6:a2:
50:c6:27:2e:e6:c1:00:87:5d:f0:13:39:b8:bb:51:
c7:b9:39:19:d5:9f:d2:73:a3:15:55:d7:ac:b0:0e:
87:b6:25:17:1e:62:a7:c4:64:ec:a6:87:64:9b:2e:
f2:65:44:6b:a1:67:4a:85:fd:44:8c:23:d8:20:58:
11:f0:18:5a:0c:d1:9a:76:28:26:9b:2d:1d:ed:48:
1b:5c:94:01:ce:bd:3b:79:aa:08:2e:75:aa:7a:02:
ed:b3:94:dc:5c:67:f3:58:64:b0:cd:6b:80:ab:d2:
34:32:12:c3:08:7d:0f:40:be:a1:22:01:92:89:24:
58:f6:b6:c0:8d:b3:fe:38:fc:0a:0b:b5:41:b8:00:
7f:2a:2c:4f:9a:00:99:58:49:80:08:21:22:3f:79:
4a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F2:B4:B8:FE:25:A0:C0:C7:F4:D6:FD:4F:A1:BA:7C:AE:61:2A:12
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30260/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30260/l_K0uP4loMDH9Nb9T6G6fK5hKhI.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:2f0::/32
Signature Algorithm: sha256WithRSAEncryption
70:28:0c:dd:b2:f9:2b:6c:d3:7e:bf:ed:97:66:9e:95:fb:ff:
c2:8b:94:f0:d5:f6:f2:3d:0d:e1:43:47:d0:ae:88:fc:ee:7a:
a7:f9:61:88:5e:bc:fd:35:50:2c:71:ba:ea:b5:e4:7f:fa:05:
46:6d:2e:9c:8c:16:7f:be:45:e2:dc:d5:72:e1:b9:7b:76:82:
97:4c:b3:df:26:42:46:e2:13:b4:1e:a9:f4:68:fa:8b:a0:6b:
c0:8a:cd:0a:92:22:3d:45:b2:2f:92:6f:89:bd:d4:2a:7b:1b:
b5:23:9e:b6:c8:1d:ad:32:fc:fd:8b:72:38:1e:ac:3e:62:cf:
5b:38:4c:e1:21:22:61:b8:b7:d2:2f:27:9c:fb:53:5c:39:b3:
cd:f3:d9:b8:c4:4c:06:71:c2:83:d8:73:ed:92:70:2c:1d:31:
83:80:d9:f7:04:de:a4:25:f9:67:92:d1:79:42:7f:9c:60:e2:
ce:0d:3d:8f:5e:8f:76:e0:c0:bb:bb:82:8e:97:14:48:e5:7b:
ed:d5:2d:42:1a:31:63:29:2e:08:e0:44:bf:8c:17:b8:da:6e:
a1:11:a1:2a:b9:f2:1f:3f:92:2b:5f:9b:06:48:0d:3c:a4:87:
7e:4d:35:a2:23:0b:17:cc:76:23:46:be:ac:74:3e:07:db:1f:
1c:98:4f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 04:27:20 2026 by rpki-client