
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/0CqaZSuHyWlXydr9b_rnJEGI4GM.cer
File: 0CqaZSuHyWlXydr9b_rnJEGI4GM.cer (raw, json)
Hash identifier: vYH0WnlH+EPD7kIXL7D67gt1oQxXi8YPYKyCQD4/5Yk=
Subject key identifier: D0:2A:9A:65:2B:87:C9:69:57:C9:DA:FD:6F:FA:E7:24:41:88:E0:63
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 63CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20134/0CqaZSuHyWlXydr9b_rnJEGI4GM.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20134/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Sun 15 Feb 2026 01:45:42 +0000
Certificate not after: Mon 15 Feb 2027 01:30:02 +0000
Subordinate resources: IP: 101.102.96.0/22
IP: 103.198.160.0/22
IP: 110.76.180.0/22
IP: 122.102.56.0/21
IP: 123.108.152.0/21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25551 (0x63cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Feb 15 01:45:42 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=D02A9A652B87C96957C9DAFD6FFAE7244188E063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4f:a8:2b:62:2c:44:3e:67:87:60:1f:32:4c:
cd:0d:b5:a8:e0:60:0a:c9:18:0d:6b:36:1a:94:fe:
b6:6c:65:af:bc:bd:e3:43:03:26:f4:1d:43:91:d1:
fb:fb:7d:be:5d:19:f6:e0:d9:09:47:6b:86:6f:0a:
cd:3f:aa:da:2c:89:b5:e6:9e:8d:99:1f:ae:58:b5:
19:23:3c:f2:d4:a1:9b:02:8d:1a:d3:2d:ea:24:bc:
86:ca:3e:c0:54:de:93:85:cc:76:ff:cd:61:02:c9:
a3:eb:8f:64:8b:b0:6a:0e:88:95:92:f7:9b:bf:cd:
3e:37:9b:a0:f2:66:6a:1d:a6:f7:be:86:d6:25:ce:
58:d4:5f:2e:1b:76:9f:b1:e4:b5:82:c3:89:62:b9:
7d:c7:96:c7:23:31:07:0c:0a:7e:f5:53:cf:3d:1c:
c2:32:da:bb:cd:d5:24:12:c4:0e:f1:a0:de:85:84:
99:5e:23:b0:a1:f4:56:e0:65:c9:5c:a0:c7:0e:0d:
85:f5:ae:4b:de:26:a6:c9:18:b7:be:ce:05:0f:4e:
89:98:dd:82:e8:00:c3:6d:30:4f:1a:5d:ea:d3:6c:
ba:24:d2:cd:81:3f:89:32:5f:d5:26:f8:ff:30:3a:
25:a8:82:f0:dc:c8:d6:a0:69:33:0b:c3:16:23:56:
3f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2A:9A:65:2B:87:C9:69:57:C9:DA:FD:6F:FA:E7:24:41:88:E0:63
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20134/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20134/0CqaZSuHyWlXydr9b_rnJEGI4GM.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
101.102.96.0/22
103.198.160.0/22
110.76.180.0/22
122.102.56.0/21
123.108.152.0/21
Signature Algorithm: sha256WithRSAEncryption
87:92:fa:cd:8b:ce:5b:25:3b:de:0e:c4:67:36:60:eb:12:72:
64:71:ff:22:30:b6:92:d5:ab:d4:ff:51:79:bd:37:50:0a:9f:
78:a0:f8:29:25:98:8d:e8:42:c1:b0:94:e1:79:1b:77:e3:93:
04:ea:04:4c:36:84:3c:1b:9c:ef:f9:bb:4f:3a:f1:9a:1e:8d:
ff:89:77:30:37:f6:67:48:0c:f3:b6:f1:32:bc:30:7f:87:ed:
40:b9:8c:8a:fd:87:c2:22:ef:f0:5c:e2:e5:15:66:8c:b9:4f:
31:a7:9c:bd:b4:05:28:39:46:cb:63:0f:cf:52:a2:c7:5d:d4:
f1:61:76:e1:c5:cb:eb:c5:4e:91:bd:7e:1a:a1:eb:87:62:9b:
14:2b:9e:8e:ba:63:a6:83:80:73:8d:5d:9b:75:41:9e:67:7d:
ae:3e:19:65:94:cf:36:58:be:8d:16:3f:37:5a:66:96:9c:ff:
ae:d6:1e:9a:1d:97:c0:b2:c9:49:3b:db:a2:9e:b7:dc:6c:47:
62:a1:da:87:8f:4d:8e:c2:9a:9e:4c:60:28:7e:84:cc:17:af:
75:f3:d1:81:d4:6e:f2:94:f2:89:6e:63:e2:67:ac:d1:5c:bf:
49:f2:5f:25:82:bc:54:85:c5:75:c7:d5:70:94:de:c1:30:a6:
37:46:05:1b
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgICY88wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC
NTIwREFBQzdEQThGMB4XDTI2MDIxNTAxNDU0MloXDTI3MDIxNTAxMzAwMlowMzEx
MC8GA1UEAxMoRDAyQTlBNjUyQjg3Qzk2OTU3QzlEQUZENkZGQUU3MjQ0MTg4RTA2
MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANZPqCtiLEQ+Z4dgHzJM
zQ21qOBgCskYDWs2GpT+tmxlr7y940MDJvQdQ5HR+/t9vl0Z9uDZCUdrhm8KzT+q
2iyJteaejZkfrli1GSM88tShmwKNGtMt6iS8hso+wFTek4XMdv/NYQLJo+uPZIuw
ag6IlZL3m7/NPjeboPJmah2m976G1iXOWNRfLht2n7HktYLDiWK5fceWxyMxBwwK
fvVTzz0cwjLau83VJBLEDvGg3oWEmV4jsKH0VuBlyVygxw4NhfWuS94mpskYt77O
BQ9OiZjdgugAw20wTxpd6tNsuiTSzYE/iTJf1Sb4/zA6JaiC8NzI1qBpMwvDFiNW
P8cCAwEAAaOCAqMwggKfMB0GA1UdDgQWBBTQKpplK4fJaVfJ2v1v+uckQYjgYzAf
BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0
b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa
dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j
Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0
NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G
A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw
gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9hcC9BOTFBNzM4MTAwMDAvMjAxMzQvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw
a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMTM0LzBD
cWFaU3VIeVdsWHlkcjliX3JuSkVHSTRHTS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz
Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv
bi54bWwwNwYIKwYBBQUHAQcBAf8EKDAmMCQEAgABMB4DBAJlZmADBAJnxqADBAJu
TLQDBAN6ZjgDBAN7bJgwDQYJKoZIhvcNAQELBQADggEBAIeS+s2LzlslO94OxGc2
YOsScmRx/yIwtpLVq9T/UXm9N1AKn3ig+CklmI3oQsGwlOF5G3fjkwTqBEw2hDwb
nO/5u0868Zoejf+JdzA39mdIDPO28TK8MH+H7UC5jIr9h8Ii7/Bc4uUVZoy5TzGn
nL20BSg5RstjD89Sosdd1PFhduHFy+vFTpG9fhqh64dimxQrno66Y6aDgHONXZt1
QZ5nfa4+GWWUzzZYvo0WPzdaZpac/67WHpodl8CyyUk726Ket9xsR2Kh2oePTY7C
mp5MYCh+hMwXr3Xz0YHUbvKU8oluY+JnrNFcv0nyXyWCvFSFxXXH1XCU3sEwpjdG
BRs=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:40 2026 by rpki-client