
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/vWkALQ6LftLD0dXQeuaSLHSX8C0.cer
File: vWkALQ6LftLD0dXQeuaSLHSX8C0.cer (raw, json)
Hash identifier: AJPF6udBtVMF1uSJIMpdw+IFl4eu7YWbrrEg3YoKf8g=
Subject key identifier: BD:69:00:2D:0E:8B:7E:D2:C3:D1:D5:D0:7A:E6:92:2C:74:97:F0:2D
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 68F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/vWkALQ6LftLD0dXQeuaSLHSX8C0.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Fri 15 May 2026 01:36:18 +0000
Certificate not after: Sat 15 May 2027 01:30:02 +0000
Subordinate resources: IP: 61.195.48.0/20
IP: 119.252.32.0/19
IP: 124.150.152.0/21
IP: 202.67.48.0/20
IP: 219.117.144.0/20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26869 (0x68f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: May 15 01:36:18 2026 GMT
Not After : May 15 01:30:02 2027 GMT
Subject: CN=BD69002D0E8B7ED2C3D1D5D07AE6922C7497F02D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:dd:fa:48:01:7c:79:d0:be:35:4c:da:3f:f8:
ac:ad:40:97:d3:c8:ba:30:1a:53:47:ac:1f:a4:80:
b4:1d:13:ed:3c:85:8c:b4:cb:db:62:fe:d3:0e:ec:
74:2f:ac:75:69:6d:0c:1d:29:58:6e:2b:2f:ce:c0:
03:69:bf:e2:1c:f4:44:9b:3a:ed:7f:fe:22:61:c5:
95:00:9b:41:15:e9:2a:2b:03:0d:aa:33:be:83:7a:
c7:fe:8d:f2:ba:31:bc:f8:fe:00:52:9f:a7:b6:a9:
73:f6:b9:a1:f6:5e:67:e6:82:82:22:f7:83:25:56:
00:b0:d3:cb:f5:3c:0f:76:a0:ae:6e:ef:55:ec:f5:
b5:4b:02:bd:51:6f:23:80:0c:e4:32:0c:fe:53:08:
b5:62:e2:af:1e:d3:65:9c:90:96:b1:32:07:98:31:
23:9d:73:80:02:f2:9a:7f:62:40:aa:af:b6:db:e8:
b8:92:d7:8a:be:c1:f2:2a:e7:39:9f:51:0c:94:03:
2b:0a:49:03:6e:14:98:01:5d:b6:ab:01:5f:05:87:
77:8b:48:9b:ce:68:8e:b6:9e:83:85:e3:9a:60:45:
cb:e6:27:18:fe:3d:e0:c8:c4:67:9e:db:37:9f:eb:
2b:17:d5:b6:66:bb:8c:3d:8f:2d:c2:d2:97:ab:1b:
83:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:69:00:2D:0E:8B:7E:D2:C3:D1:D5:D0:7A:E6:92:2C:74:97:F0:2D
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/vWkALQ6LftLD0dXQeuaSLHSX8C0.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.195.48.0/20
119.252.32.0/19
124.150.152.0/21
202.67.48.0/20
219.117.144.0/20
Signature Algorithm: sha256WithRSAEncryption
5e:49:c4:a1:4a:e9:4d:07:dd:ed:59:74:fd:d5:55:61:9e:e3:
04:e5:92:53:58:c7:bb:f4:de:69:80:b6:50:4b:98:56:7c:a0:
86:d0:1c:08:f5:6e:5e:84:a5:b6:51:34:3b:92:d5:1e:dc:82:
a6:c7:9f:b7:98:de:58:ef:30:18:77:60:08:e5:11:12:90:19:
7a:a6:ca:d0:b9:20:09:60:ab:32:15:87:01:80:51:34:6b:7a:
4b:e3:f8:8a:62:5d:f3:2e:b6:83:86:1e:ba:97:29:41:aa:02:
53:52:ab:13:d7:10:3d:40:67:54:84:95:d9:08:73:68:d2:48:
fd:15:89:d8:d2:61:e3:5f:1d:36:52:34:14:70:9e:db:24:69:
db:88:b1:04:ce:54:31:b9:5c:d1:66:54:3a:96:4a:96:32:46:
db:bc:16:05:45:33:6a:55:23:3f:98:9e:13:7f:88:22:38:77:
b1:e6:c1:73:94:09:67:ab:80:b4:29:ee:88:2e:c4:df:4b:26:
55:81:28:7b:f5:52:d6:2a:7d:4b:b1:09:12:58:1a:53:c8:6f:
fe:eb:0c:da:2e:7b:55:5f:db:0a:8f:f0:48:7e:d3:c2:c5:aa:
29:af:97:b7:fd:9a:4b:63:38:6e:3d:ad:ec:a6:5c:bf:18:39:
58:b4:80:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 04:26:33 2026 by rpki-client