Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
File: 0ZV-xYwI81uqa_535FqXQLpHH54.cer (raw, json)
Hash identifier: 2nKaI/ZACBdhnEI/rK40zgrv9l/x0vRxdd8dyUYYKpE=
Subject key identifier: D1:95:7E:C5:8C:08:F3:5B:AA:6B:FE:77:E4:5A:97:40:BA:47:1F:9E
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 53D7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Tue 16 Jun 2026 02:12:32 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 80.208.192.0/20
IP: 81.23.208.0/20
IP: 81.203.0.0/16
IP: 85.131.192.0/18
IP: 87.101.96.0/20
IP: 90.149.0.0/16
IP: 92.202.0.0/15
IP: 109.236.0.0/20
IP: 151.158.220.0/22
IP: 185.164.244.0/22
IP: 193.82.64.0/19
IP: 193.114.0.0/19
IP: 193.115.32.0/19
IP: 193.115.128.0/18
IP: 193.116.0.0/18
IP: 193.117.64.0/19
IP: 194.91.0.0/16
IP: 195.181.224.0/20
IP: 212.237.152.0/21
IP: 213.18.0.0/17
IP: 217.178.0.0/16
IP: 2001:7fa:0:3::/64
IP: 2001:7fa:7::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 02:50:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21463 (0x53d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Jun 16 02:12:32 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A91A73810000, serialNumber=D1957EC58C08F35BAA6BFE77E45A9740BA471F9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:80:98:d3:ae:75:22:44:38:67:fb:a8:2d:08:
a6:fe:7c:78:5d:43:d0:9d:7d:00:d3:2a:e8:de:1b:
1d:ad:2b:7a:e7:7a:07:6b:6f:73:cb:78:7b:cc:c7:
16:23:b6:03:65:d6:0a:c8:91:cd:54:ce:bc:28:68:
75:64:6c:50:6b:4b:1e:b7:87:7d:6b:50:cf:5b:09:
09:b1:a0:0d:41:36:b2:b1:97:30:ea:6e:cc:50:25:
f0:34:ce:c6:62:22:b4:3d:7e:d4:02:4e:93:83:a0:
29:be:1b:d9:0f:3f:51:1b:80:6d:6a:b8:68:a3:d9:
97:08:9a:d7:22:ee:e6:db:0c:39:88:01:99:96:ec:
db:fc:66:e0:b0:16:6b:18:f3:50:ba:eb:9f:b8:79:
3f:62:99:27:00:2d:53:5b:f0:e1:30:10:84:ba:48:
ce:04:ce:fe:5c:41:32:42:97:5c:d5:31:d3:05:73:
89:0b:56:bb:19:ec:2c:f1:7e:d9:60:6f:d6:c9:92:
d6:22:3c:bf:c0:0b:93:04:82:32:91:a9:d8:d2:1a:
de:96:a4:4c:c0:40:30:02:2f:3f:26:43:c6:4d:4b:
f5:2b:47:6e:65:31:65:3c:dc:27:e7:24:6f:09:49:
c7:f7:16:23:0d:bd:67:7a:a0:93:2e:7a:6d:1b:23:
5b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:95:7E:C5:8C:08:F3:5B:AA:6B:FE:77:E4:5A:97:40:BA:47:1F:9E
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
80.208.192.0/20
81.23.208.0/20
81.203.0.0/16
85.131.192.0/18
87.101.96.0/20
90.149.0.0/16
92.202.0.0/15
109.236.0.0/20
151.158.220.0/22
185.164.244.0/22
193.82.64.0/19
193.114.0.0/19
193.115.32.0/19
193.115.128.0/18
193.116.0.0/18
193.117.64.0/19
194.91.0.0/16
195.181.224.0/20
212.237.152.0/21
213.18.0.0/17
217.178.0.0/16
IPv6:
2001:7fa:0:3::/64
2001:7fa:7::/48
Signature Algorithm: sha256WithRSAEncryption
47:8d:fb:bd:c6:32:1f:a3:d4:d4:ee:72:fd:ec:da:a1:5d:ab:
13:91:54:96:71:f7:c9:57:c5:8a:e2:94:eb:b1:d5:19:39:b0:
e1:92:98:43:c9:f1:3e:ee:c2:60:3a:b6:fd:57:00:e8:08:13:
27:df:c3:5e:b2:f8:dc:bd:b7:7c:25:cd:1a:96:83:2e:5d:a1:
bc:48:4a:14:56:06:11:df:f0:80:9f:92:b7:fc:dd:5b:28:f6:
39:fa:fc:b0:f2:96:96:b8:a9:67:5f:78:ab:1e:90:90:59:71:
ec:b7:d4:e0:32:63:62:95:6b:9b:14:60:78:a7:ae:41:1e:c8:
58:aa:32:d4:1f:e7:25:e6:16:57:16:51:d5:cd:e1:87:bf:33:
32:a5:f7:27:f9:02:58:49:a1:f7:e5:95:a1:8e:1e:77:b2:37:
be:13:0b:df:a9:03:55:46:da:25:70:e8:8e:5b:a1:6e:a2:6d:
ef:cc:f2:26:1f:73:48:1f:2f:90:5f:2f:c2:b1:b4:16:30:66:
5a:e1:de:ef:db:18:2e:19:84:19:36:b3:f7:72:df:4d:eb:ee:
6f:93:6b:75:bb:bc:26:4c:9c:74:ad:01:4c:c9:29:f6:3c:32:
96:e0:8e:72:fb:69:d0:a6:e9:30:14:16:75:1b:62:0c:53:f0:
36:b5:98:bc
-----BEGIN CERTIFICATE-----
MIIGYTCCBUmgAwIBAgICU9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2
MTU5RTc2RjgwHhcNMjYwNjE2MDIxMjMyWhcNMjcwNzMwMDAwMDAwWjBKMRUwEwYD
VQQDEwxBOTFBNzM4MTAwMDAxMTAvBgNVBAUTKEQxOTU3RUM1OEMwOEYzNUJBQTZC
RkU3N0U0NUE5NzQwQkE0NzFGOUUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDugJjTrnUiRDhn+6gtCKb+fHhdQ9CdfQDTKujeGx2tK3rnegdrb3PLeHvM
xxYjtgNl1grIkc1UzrwoaHVkbFBrSx63h31rUM9bCQmxoA1BNrKxlzDqbsxQJfA0
zsZiIrQ9ftQCTpODoCm+G9kPP1EbgG1quGij2ZcImtci7ubbDDmIAZmW7Nv8ZuCw
FmsY81C665+4eT9imScALVNb8OEwEIS6SM4Ezv5cQTJCl1zVMdMFc4kLVrsZ7Czx
ftlgb9bJktYiPL/AC5MEgjKRqdjSGt6WpEzAQDACLz8mQ8ZNS/UrR25lMWU83Cfn
JG8JScf3FiMNvWd6oJMuem0bI1urAgMBAAGjggNTMIIDTzAdBgNVHQ4EFgQU0ZV+
xYwI81uqa/535FqXQLpHH54wHwYDVR0jBBgwFoAUDPzneFf88B852ZpitKpi5hWe
dvgwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBo
oGagZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0
MUQ2NjExRTJBM0YyN0Y3QzcyRkQxRkYyL0RQem5lRmY4OEI4NTJacGl0S3BpNWhX
ZWR2Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUy
MUE0RjRGQjQvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZnLmNlcjBKBgNVHSAB
Af8EQDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFw
bmljLm5ldC9SUEtJL0NQUy5wZGYwgfcGCCsGAQUFBwELBIHqMIHnMD4GCCsGAQUF
BzAFhjJyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzBdBggrBgEFBQcwCoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmlj
LmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8wWlYteFl3STgxdXFhXzUzNUZxWFFMcEhI
NTQubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMu
YWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMIGwBggrBgEFBQcBBwEB/wSB
oDCBnTB/BAIAATB5AwQEUNDAAwQEURfQAwMAUcsDBAZVg8ADBARXZWADAwBalQMD
AVzKAwQEbewAAwQCl57cAwQCuaT0AwQFwVJAAwQFwXIAAwQFwXMgAwQGwXOAAwQG
wXQAAwQFwXVAAwMAwlsDBATDteADBAPU7ZgDBAfVEgADAwDZsjAaBAIAAjAUAwkA
IAEH+gAAAAMDBwAgAQf6AAcwDQYJKoZIhvcNAQELBQADggEBAEeN+73GMh+j1NTu
cv3s2qFdqxORVJZx98lXxYrilOux1Rk5sOGSmEPJ8T7uwmA6tv1XAOgIEyffw16y
+Ny9t3wlzRqWgy5dobxIShRWBhHf8ICfkrf83Vso9jn6/LDylpa4qWdfeKsekJBZ
cey31OAyY2KVa5sUYHinrkEeyFiqMtQf5yXmFlcWUdXN4Ye/MzKl9yf5AlhJoffl
laGOHneyN74TC9+pA1VG2iVw6I5boW6ibe/M8iYfc0gfL5BfL8KxtBYwZlrh3u/b
GC4ZhBk2s/dy303r7m+Ta3W7vCZMnHStAUzJKfY8MpbgjnL7adCm6TAUFnUbYgxT
8Da1mLw=
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:54:06 2026 by rpki-client