
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
File: xgB2_CjwTeuYF6NIIiaULL7x-A0.cer (raw, json)
Hash identifier: OKspOvXAGjNRnUj4jl4EdlQEOIl+ZM3GoCt+v6hay2c=
Subject key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 6BC4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Mon 15 Jun 2026 01:41:23 +0000
Certificate not after: Tue 15 Jun 2027 01:30:02 +0000
Subordinate resources: IP: 133.181.0.0 -- 133.185.255.255
IP: 202.244.202.0/23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 09:53:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27588 (0x6bc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Jun 15 01:41:23 2026 GMT
Not After : Jun 15 01:30:02 2027 GMT
Subject: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ff:d9:7e:c3:fc:65:53:da:a1:dc:26:43:2d:
37:37:55:98:9e:00:11:1e:4b:d8:d2:0e:2e:d0:4c:
86:99:c5:61:e7:ed:8e:a2:d9:f8:7b:d8:7a:be:90:
9f:b5:7e:12:8e:93:06:61:cc:9f:21:43:3a:c7:1a:
0c:56:a1:1b:bf:73:9c:06:f0:98:8b:bb:9f:6e:ef:
37:30:5c:31:64:91:47:5d:7d:64:8d:5a:e0:f8:b6:
fa:be:50:00:31:e5:df:62:f8:5c:db:b2:ec:5b:91:
2a:17:bf:40:ee:84:dc:44:dc:dd:0f:62:dc:7a:f8:
43:7e:03:85:f6:5f:cc:4a:f4:41:a7:76:89:04:8e:
16:61:99:91:d6:8a:a5:19:e3:25:1c:9c:71:83:73:
9e:fb:f1:ee:2a:27:60:fb:3e:f8:10:50:82:27:54:
09:c3:af:f1:90:6b:f8:a0:f6:c5:e6:a7:94:e2:c0:
0a:66:7e:4c:45:bf:7f:68:85:ff:b5:ce:f3:68:c8:
59:3d:34:2d:e3:5e:2e:bb:5f:f9:17:da:1e:d7:36:
c6:8e:8b:f5:d8:80:b6:1e:26:90:62:0d:44:c7:b1:
f4:41:11:91:f9:a3:f7:e7:24:ea:65:63:93:74:03:
30:6c:ca:64:cf:63:35:67:0a:13:12:aa:99:fe:8a:
c8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
133.181.0.0-133.185.255.255
202.244.202.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:b9:7a:53:a9:7d:7f:9f:f3:4a:3f:10:a9:ea:62:b9:1c:0f:
a3:c6:d1:b4:1d:f9:5f:14:c2:dc:e2:08:7c:b4:88:5b:95:e3:
28:69:b8:ec:4c:fd:b5:aa:a1:a9:f2:bf:09:d0:9c:d9:6a:a1:
66:0b:ad:6c:c3:24:6a:05:90:61:f4:bf:a2:3d:17:56:0f:ec:
18:19:11:bc:b5:aa:71:21:da:6b:09:76:a5:96:3e:d7:f3:c8:
73:2b:27:fd:d0:3d:55:7e:45:bf:28:f3:cc:9b:e1:8a:fc:ad:
bc:f0:52:3d:fc:0e:08:79:34:97:6e:10:2f:ed:be:2e:b0:ae:
63:3c:85:03:04:58:58:31:a2:65:25:aa:47:f6:6c:60:41:c9:
a4:f8:81:de:b6:52:62:f0:1f:41:05:81:da:92:c8:9a:15:6b:
0a:2b:1b:bd:90:c4:b6:87:b0:c7:78:0c:cb:f2:b9:24:ad:96:
0f:1c:b8:41:f1:69:f0:9b:6b:dc:b4:7b:b3:b5:ae:2d:92:bd:
77:c2:b5:be:55:49:dc:1e:e7:f8:b7:64:45:5b:04:71:13:a4:
5a:5a:4e:96:4e:48:d1:da:3e:2b:2a:a8:5f:a2:01:d4:ae:2a:
27:17:de:2f:af:2e:f0:f0:ed:dd:78:29:f0:35:15:0a:5f:1b:
c0:79:36:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:47:37 2026 by rpki-client