
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/-MAfes5CR7DxVU8RDF-B1VoI0mg.cer
File: -MAfes5CR7DxVU8RDF-B1VoI0mg.cer (raw, json)
Hash identifier: AwDpc0OTblLuOsJL84PSF10G59tHn+FYxh0WwGXiPgI=
Subject key identifier: F8:C0:1F:7A:CE:42:47:B0:F1:55:4F:11:0C:5F:81:D5:5A:08:D2:68
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 74AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20219/-MAfes5CR7DxVU8RDF-B1VoI0mg.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20219/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Thu 15 Oct 2026 01:38:26 +0000
Certificate not after: Fri 15 Oct 2027 01:30:02 +0000
Subordinate resources: IP: 103.134.34.0/23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Nov 2026 21:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29869 (0x74ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Oct 15 01:38:26 2026 GMT
Not After : Oct 15 01:30:02 2027 GMT
Subject: CN=F8C01F7ACE4247B0F1554F110C5F81D55A08D268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4d:89:d2:20:fc:be:32:c9:9d:dc:f2:35:c4:
6a:94:9b:2e:8b:aa:06:54:db:87:11:4a:3a:0e:2d:
b2:e9:6d:f0:57:f9:d4:9b:44:d1:72:b6:2a:56:9c:
8d:b3:0a:45:4c:f4:da:70:78:91:c7:a9:a0:32:7e:
5f:55:93:62:9b:15:5d:43:10:fe:98:57:fe:18:37:
7c:6f:ec:86:c9:ac:04:da:eb:46:61:8e:b3:ca:e5:
11:e7:70:8f:1e:81:24:25:58:61:6c:af:e9:af:c4:
0c:01:de:ec:b5:e6:10:ca:25:ab:ed:6f:eb:c1:87:
44:51:8a:0a:05:d8:1f:10:d9:05:16:f3:f6:0c:76:
4e:92:4a:04:31:7f:6d:c8:a5:f8:29:25:7e:2c:cf:
f5:66:fe:fe:cc:47:7a:cd:e9:d0:6c:b0:df:6c:40:
be:5c:fd:a2:08:2d:7e:ca:77:c8:85:b1:35:03:59:
fa:c2:49:80:85:74:87:79:64:cf:fc:60:6c:73:5f:
fd:fd:c1:68:7a:31:dc:69:d4:77:6a:46:ea:f2:91:
16:31:ee:e1:1e:06:63:52:f9:58:6c:06:00:01:5b:
85:3c:aa:33:66:bc:05:7a:76:2c:38:74:01:94:3b:
31:b3:81:49:b5:db:c3:93:20:77:b5:1e:4a:6d:28:
8e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C0:1F:7A:CE:42:47:B0:F1:55:4F:11:0C:5F:81:D5:5A:08:D2:68
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20219/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20219/-MAfes5CR7DxVU8RDF-B1VoI0mg.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.134.34.0/23
Signature Algorithm: sha256WithRSAEncryption
27:ac:fc:ad:2d:aa:88:d1:96:4f:17:ec:6e:f7:f6:c6:cc:c9:
3b:a1:b8:69:22:bd:b8:b3:92:12:bc:cf:1e:10:71:6f:64:af:
3d:18:fc:50:95:c1:e5:ab:ba:e1:e9:ed:ab:b1:fd:33:cf:76:
35:ba:52:ab:2e:65:ed:c2:de:4a:01:15:6b:bb:d1:90:15:54:
bc:87:70:af:3c:6a:a8:b2:9f:16:e1:49:36:17:f7:9e:d0:14:
b8:5a:88:96:b7:16:d0:f5:48:d2:9b:60:77:af:03:a9:61:5a:
be:64:6a:1e:91:d4:d4:c6:90:ae:88:73:05:76:3f:33:f0:6b:
8f:69:9f:9d:dc:71:34:11:1d:d5:47:c3:ae:a1:c9:50:1b:78:
74:bb:c9:59:ee:23:62:16:06:a6:7e:51:fd:e6:f3:76:5f:f0:
95:da:e2:89:c7:bb:fe:73:12:ea:83:75:4c:3f:16:6c:c8:19:
45:69:74:94:6b:b6:25:70:eb:19:b2:6e:de:2e:14:d8:94:3b:
b7:51:7b:3e:66:12:3e:5e:d9:0b:b4:47:51:11:5d:b2:b2:23:
43:b0:67:6d:83:23:d0:6b:d3:81:e3:5e:5e:65:75:b2:28:b2:
a1:9c:50:12:02:62:ee:d9:7e:67:b5:04:06:81:83:6a:a0:27:
19:cb:24:9e
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICdK0wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC
NTIwREFBQzdEQThGMB4XDTI2MTAxNTAxMzgyNloXDTI3MTAxNTAxMzAwMlowMzEx
MC8GA1UEAxMoRjhDMDFGN0FDRTQyNDdCMEYxNTU0RjExMEM1RjgxRDU1QTA4RDI2
ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANBNidIg/L4yyZ3c8jXE
apSbLouqBlTbhxFKOg4tsult8Ff51JtE0XK2KlacjbMKRUz02nB4kcepoDJ+X1WT
YpsVXUMQ/phX/hg3fG/shsmsBNrrRmGOs8rlEedwjx6BJCVYYWyv6a/EDAHe7LXm
EMolq+1v68GHRFGKCgXYHxDZBRbz9gx2TpJKBDF/bcil+CklfizP9Wb+/sxHes3p
0Gyw32xAvlz9oggtfsp3yIWxNQNZ+sJJgIV0h3lkz/xgbHNf/f3BaHox3GnUd2pG
6vKRFjHu4R4GY1L5WGwGAAFbhTyqM2a8BXp2LDh0AZQ7MbOBSbXbw5Mgd7UeSm0o
jm8CAwEAAaOCAoswggKHMB0GA1UdDgQWBBT4wB96zkJHsPFVTxEMX4HVWgjSaDAf
BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0
b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa
dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j
Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0
NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G
A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw
gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9hcC9BOTFBNzM4MTAwMDAvMjAyMTkvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw
a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMjE5Ly1N
QWZlczVDUjdEeFZVOFJERi1CMVZvSTBtZy5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz
Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv
bi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnhiIwDQYJKoZIhvcN
AQELBQADggEBACes/K0tqojRlk8X7G739sbMyTuhuGkivbizkhK8zx4QcW9krz0Y
/FCVweWruuHp7aux/TPPdjW6UqsuZe3C3koBFWu70ZAVVLyHcK88aqiynxbhSTYX
957QFLhaiJa3FtD1SNKbYHevA6lhWr5kah6R1NTGkK6IcwV2PzPwa49pn53ccTQR
HdVHw66hyVAbeHS7yVnuI2IWBqZ+Uf3m83Zf8JXa4onHu/5zEuqDdUw/FmzIGUVp
dJRrtiVw6xmybt4uFNiUO7dRez5mEj5e2Qu0R1ERXbKyI0OwZ22DI9Br04HjXl5l
dbIosqGcUBICYu7Zfme1BAaBg2qgJxnLJJ4=
-----END CERTIFICATE-----
Generated at Mon Nov 9 06:34:58 2026 by rpki-client