
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/rH7hXtDhk3RxKWvEju6wuFWP0Zw.cer
File: rH7hXtDhk3RxKWvEju6wuFWP0Zw.cer (raw, json)
Hash identifier: VmqefbaUHaeJvN+cqq7eXUWn/TUX5XYdmzxQOIliSKQ=
Subject key identifier: AC:7E:E1:5E:D0:E1:93:74:71:29:6B:C4:8E:EE:B0:B8:55:8F:D1:9C
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 6AF3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/719/rH7hXtDhk3RxKWvEju6wuFWP0Zw.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/719/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Mon 15 Jun 2026 01:34:49 +0000
Certificate not after: Tue 15 Jun 2027 01:30:02 +0000
Subordinate resources: IP: 103.3.48.0/22
IP: 124.248.144.0/20
IP: 133.18.0.0/16
IP: 153.127.224.0/19
IP: 203.142.192.0 -- 203.142.215.255
IP: 210.134.48.0/20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 09:53:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27379 (0x6af3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Jun 15 01:34:49 2026 GMT
Not After : Jun 15 01:30:02 2027 GMT
Subject: CN=AC7EE15ED0E1937471296BC48EEEB0B8558FD19C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:25:d4:0e:62:04:78:ef:51:7b:8d:22:69:dd:
a8:57:65:9c:0b:f4:21:38:0e:81:3c:89:8e:fd:89:
4a:9a:1f:f4:67:fc:c9:44:19:d3:74:c8:3e:d2:fd:
2a:7e:07:2a:9a:7c:13:c6:cd:84:8b:ad:05:90:42:
4d:d7:42:76:e8:b5:37:41:13:da:9f:8c:23:f8:d7:
80:9a:2a:af:d0:45:93:16:89:72:d8:33:97:2a:f1:
ee:cd:ad:f4:95:25:db:50:21:ef:b0:a6:23:c5:0f:
a0:22:31:a7:d1:a3:68:74:4f:a1:e5:45:a5:ef:e2:
31:0d:bf:91:92:8a:0e:7c:4b:09:5f:ae:9a:5d:13:
b0:ab:c5:14:48:e9:46:4f:03:ef:5c:c8:21:f5:df:
cf:b7:82:1e:cf:17:fd:02:85:c5:2b:b2:3b:38:3f:
a7:b8:55:11:15:d5:7a:7c:02:98:2d:10:c0:9a:15:
c8:cb:a4:d1:19:03:17:26:b0:ac:e6:4a:c4:b8:af:
0e:cf:fe:8e:16:cf:82:63:a1:a5:d8:bf:40:2f:74:
28:31:c2:27:50:45:9f:b8:a1:55:52:b6:71:6c:60:
35:4b:45:68:79:6f:dc:e1:51:9e:04:c5:90:73:a6:
60:99:5b:9a:49:3a:68:76:f5:6b:13:03:0b:f9:12:
47:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:7E:E1:5E:D0:E1:93:74:71:29:6B:C4:8E:EE:B0:B8:55:8F:D1:9C
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/719/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/719/rH7hXtDhk3RxKWvEju6wuFWP0Zw.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.3.48.0/22
124.248.144.0/20
133.18.0.0/16
153.127.224.0/19
203.142.192.0-203.142.215.255
210.134.48.0/20
Signature Algorithm: sha256WithRSAEncryption
28:55:d0:55:0e:89:2c:8b:42:64:42:b9:b9:f9:38:31:72:7e:
36:10:f6:cd:05:67:6e:94:0d:d4:a0:ac:0d:db:6a:03:14:95:
27:d2:d8:92:e2:39:ec:9d:b8:b4:66:dc:1a:2c:f2:27:53:75:
fe:eb:74:47:06:1e:75:0f:37:95:f8:e2:9e:28:b0:d3:38:0e:
d7:11:0f:bb:9e:14:13:6b:45:28:d2:64:9f:b2:03:71:47:57:
83:85:45:1c:98:ee:b8:09:8a:3b:bd:95:7d:d3:30:1d:7f:a9:
fb:4b:ae:7d:cf:4e:d7:fc:56:6d:80:62:91:a8:a4:72:d2:db:
99:ae:fe:fd:cc:26:6b:d6:54:a1:0f:a7:af:0e:b4:d9:dd:39:
03:e9:41:af:3a:91:36:1c:91:27:e3:36:a5:80:7a:6f:c2:44:
70:cb:e1:71:b8:b4:84:01:14:69:5f:f9:da:25:c4:42:fe:7e:
ed:d6:82:bb:1b:54:fe:f9:b0:e1:b5:8c:9c:08:35:16:b1:80:
19:c2:e0:7f:8d:ab:14:cd:66:50:c0:83:45:ea:f8:da:69:4a:
21:ca:1c:41:1f:95:9b:c2:51:ea:59:db:f0:e3:f2:7f:dd:08:
35:72:d9:64:3d:e2:99:60:f2:e6:fa:ec:3f:10:2b:73:1e:8a:
c9:a6:64:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:49:57 2026 by rpki-client