
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/uN0dbXf_M5Mb90i6m_Dr9JOdgDE.cer
File: uN0dbXf_M5Mb90i6m_Dr9JOdgDE.cer (raw, json)
Hash identifier: us3BORpLp1wmH+3Y6cj+rlbihqzq+JXWBO6PfSMsBrs=
Subject key identifier: B8:DD:1D:6D:77:FF:33:93:1B:F7:48:BA:9B:F0:EB:F4:93:9D:80:31
Authority key identifier: D1:95:7E:C5:8C:08:F3:5B:AA:6B:FE:77:E4:5A:97:40:BA:47:1F:9E
Certificate issuer: /CN=A91A73810000/serialNumber=D1957EC58C08F35BAA6BFE77E45A9740BA471F9E
Certificate serial: 02F2
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/uN0dbXf_M5Mb90i6m_Dr9JOdgDE.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Sat 15 Aug 2026 01:40:39 +0000
Certificate not after: Sun 15 Aug 2027 01:30:02 +0000
Subordinate resources: IP: 109.236.0.0/20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 14:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 754 (0x2f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=D1957EC58C08F35BAA6BFE77E45A9740BA471F9E
Validity
Not Before: Aug 15 01:40:39 2026 GMT
Not After : Aug 15 01:30:02 2027 GMT
Subject: CN=B8DD1D6D77FF33931BF748BA9BF0EBF4939D8031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e0:a1:a5:37:a0:73:47:a0:22:09:c3:3c:5d:
f6:ec:84:a1:68:de:50:9d:96:83:9c:7f:7a:5d:9e:
a2:70:9a:65:4a:9e:86:a5:f1:cc:5a:c0:2b:86:ff:
db:89:5f:38:55:89:76:27:b9:56:9a:b9:76:d5:de:
49:4a:59:f6:62:7d:7f:3e:14:0b:c1:df:aa:af:1e:
28:81:b2:3e:e9:19:d9:37:c1:76:cc:f3:4b:8f:f8:
6b:cd:92:f5:3c:58:58:76:52:38:f2:0d:00:66:d8:
8c:20:4c:60:18:c6:32:96:5a:a0:9b:28:3a:14:eb:
ea:4a:3e:2a:92:31:eb:e6:01:e2:17:97:09:15:44:
ce:28:b1:15:9d:06:5a:b6:78:5c:c3:ed:4d:a3:76:
18:ce:12:b9:12:5a:4a:b7:20:37:f2:0f:a0:8a:ee:
83:a3:45:1c:55:31:74:e1:24:a2:4e:00:0f:f7:51:
04:15:55:9b:ea:f4:c0:26:1d:83:84:c4:48:69:cd:
a9:84:be:69:50:59:d9:7e:71:cd:17:4d:3b:ce:04:
44:ac:17:f2:72:8b:9c:78:6a:e0:8e:e0:c4:25:55:
81:35:62:b4:30:ab:33:c0:a0:13:a4:bf:50:ed:5b:
8e:c3:79:f3:ce:92:14:c5:f9:04:41:76:f2:a1:2d:
1e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:DD:1D:6D:77:FF:33:93:1B:F7:48:BA:9B:F0:EB:F4:93:9D:80:31
X509v3 Authority Key Identifier:
keyid:D1:95:7E:C5:8C:08:F3:5B:AA:6B:FE:77:E4:5A:97:40:BA:47:1F:9E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/uN0dbXf_M5Mb90i6m_Dr9JOdgDE.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
109.236.0.0/20
Signature Algorithm: sha256WithRSAEncryption
84:9d:cf:d2:69:e6:4b:17:11:75:45:79:c0:2e:0d:66:db:94:
a8:60:fd:3a:15:7b:50:c4:81:2d:91:9c:6e:09:90:4f:ae:a1:
dd:48:b6:c0:e6:b4:5a:7f:5c:6a:0e:8e:b4:20:6c:b7:6c:4f:
d0:62:88:2c:a8:22:f1:3f:34:01:2f:32:2c:8d:d3:d5:2b:74:
a9:85:1b:02:45:ae:c7:71:b7:e8:1c:73:a3:b0:0a:ad:b2:a5:
b0:25:28:88:b8:d4:3b:2a:eb:f3:d2:3f:91:5d:42:bb:6e:cf:
6c:8a:d2:9b:52:bd:aa:a8:e5:51:08:b3:42:c1:7b:0e:f4:77:
03:00:9d:94:7c:17:0f:78:b5:60:72:52:00:5a:6c:88:be:c6:
97:1d:b8:e2:ce:ae:38:1d:9a:cc:2c:d6:7b:79:9e:67:26:85:
64:97:18:90:56:fe:8b:dd:88:46:6e:f0:a1:8f:c6:07:55:be:
e9:8f:6f:cc:d1:83:3b:5b:94:01:95:a0:ad:7b:3b:12:60:79:
4d:b7:a1:b7:b8:41:1a:b8:07:6e:80:d2:9d:b5:68:fc:7e:74:
28:24:30:90:2b:ca:79:2f:81:03:44:3d:07:e9:aa:44:f0:0c:
b2:ed:7d:72:e9:fe:3e:77:9b:de:f7:e6:ce:ef:72:71:60:d2:
ee:3f:e8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:49:51 2026 by rpki-client