
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/xwTJoNEV0mBiqRaordaY8hjgCoc.cer
File: xwTJoNEV0mBiqRaordaY8hjgCoc.cer (raw, json)
Hash identifier: D5gT4jsH6CK/gWs9jIJsqsHnBXfY5+AsJKTB21yE8T0=
Subject key identifier: C7:04:C9:A0:D1:15:D2:60:62:A9:16:A8:AD:D6:98:F2:18:E0:0A:87
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 706B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30024/xwTJoNEV0mBiqRaordaY8hjgCoc.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30024/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Sat 15 Aug 2026 01:38:58 +0000
Certificate not after: Sun 15 Aug 2027 01:30:02 +0000
Subordinate resources: IP: 2001:2f8::/32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 09:23:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28779 (0x706b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Aug 15 01:38:58 2026 GMT
Not After : Aug 15 01:30:02 2027 GMT
Subject: CN=C704C9A0D115D26062A916A8ADD698F218E00A87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cd:f8:99:f9:0d:c1:40:bc:a1:94:df:39:f7:
bf:43:f1:91:72:b1:f4:e0:80:58:46:36:3b:71:c4:
ea:87:62:b6:06:b7:71:bd:fe:4e:e2:bd:d7:41:f8:
ad:6b:be:96:1b:93:4e:3e:e4:83:5f:06:40:84:82:
60:df:47:ce:01:f4:0c:10:7a:b9:16:bf:65:0d:da:
44:e5:9b:3f:25:10:5d:32:5e:78:79:16:38:73:b5:
43:9a:e3:3a:bb:d1:e6:40:4d:bd:a8:aa:c1:f4:30:
f3:5b:b1:c2:05:d2:10:20:c2:cc:05:8a:70:27:d2:
67:58:54:cb:67:0d:5a:d9:97:7e:c2:7e:91:14:91:
06:a4:f0:77:73:0c:92:0c:6a:b6:19:dd:45:f7:2f:
ae:25:ee:05:62:83:e5:54:09:57:34:6b:d6:bb:cc:
08:c7:8e:82:13:fa:fc:31:0c:0b:00:42:8a:c8:1d:
89:1b:85:c3:e3:cd:c8:ad:03:cd:79:8f:70:07:41:
e5:70:96:94:3a:57:28:fa:d6:dc:5b:ab:50:30:ed:
a0:79:9f:3f:5f:00:8e:76:32:81:53:8e:0c:3f:d4:
50:f2:b5:42:9e:92:92:e7:1e:5a:22:06:51:6f:0c:
dd:a3:ec:4e:1e:1d:0c:4c:d9:a3:27:c9:f0:37:19:
5a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:04:C9:A0:D1:15:D2:60:62:A9:16:A8:AD:D6:98:F2:18:E0:0A:87
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30024/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30024/xwTJoNEV0mBiqRaordaY8hjgCoc.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:2f8::/32
Signature Algorithm: sha256WithRSAEncryption
1a:72:e7:d6:7a:9f:23:f9:e1:d6:c4:6e:38:c0:96:52:97:81:
c4:36:d8:d7:4e:f7:a8:71:bb:6b:d1:c0:92:e5:93:f8:d2:62:
89:08:f8:1c:07:4c:cf:05:46:3b:28:39:ba:0a:43:f1:3f:79:
e3:31:57:fc:49:db:0e:39:2d:a1:08:92:3e:02:53:19:b6:af:
2e:8e:3c:d7:3e:94:6a:cf:5f:a3:b7:27:84:fa:1c:ba:41:97:
1f:ba:3e:80:08:8d:ac:70:d7:b7:07:c1:4b:3c:bb:fa:61:7c:
ec:97:0e:66:89:85:28:96:5b:89:7f:89:12:89:5a:60:9e:66:
e9:ad:d2:02:0f:a9:90:9d:f8:b8:02:29:2a:87:c3:2d:64:3a:
3f:9f:74:df:6a:33:c5:6d:33:90:70:c6:8c:4f:c9:dc:01:28:
51:b7:ab:e3:13:cf:b8:b7:7f:37:82:c2:ff:09:6e:0c:f1:48:
f7:2a:68:8a:46:6f:7b:9c:38:0a:5b:60:40:36:fb:05:59:69:
79:7f:07:74:ec:40:07:84:24:5f:4b:80:34:dd:e4:08:f4:8c:
0c:93:9e:c5:59:b2:f8:6c:31:2a:fa:a2:53:d3:3e:d3:09:e4:
31:3d:0f:9d:88:2f:32:b3:f0:16:39:a6:15:c8:f3:5c:05:e1:
50:5a:7c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:19:56 2026 by rpki-client