
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/1EFnLFVc_wpYqM-a7ueAMmS_LSg.cer
File: 1EFnLFVc_wpYqM-a7ueAMmS_LSg.cer (raw, json)
Hash identifier: WNqPREQWdyK29Hxln3w4xbiF+5vwjrFUfeF4EhH22Us=
Subject key identifier: D4:41:67:2C:55:5C:FF:0A:58:A8:CF:9A:EE:E7:80:32:64:BF:2D:28
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 734C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/1EFnLFVc_wpYqM-a7ueAMmS_LSg.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Thu 15 Oct 2026 01:30:48 +0000
Certificate not after: Fri 15 Oct 2027 01:30:02 +0000
Subordinate resources: IP: 2001:370::/32
IP: 2405:f000::/32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Nov 2026 21:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29516 (0x734c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Oct 15 01:30:48 2026 GMT
Not After : Oct 15 01:30:02 2027 GMT
Subject: CN=D441672C555CFF0A58A8CF9AEEE7803264BF2D28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:53:05:2e:98:2b:78:70:28:05:4f:b3:19:52:
71:44:ae:01:ad:be:4c:84:2f:89:b5:93:cf:ce:a1:
4a:55:dd:04:f5:32:69:94:9d:1e:a2:4f:70:b3:41:
60:b7:fd:b5:63:f4:dd:9d:d3:0e:95:db:f3:bd:b8:
ec:c6:ab:f9:1a:91:16:2d:ae:e3:a1:a7:87:3f:63:
d4:8c:ca:29:e5:0f:f0:c7:90:ec:1a:93:2f:42:b8:
b3:df:d6:48:00:ad:9c:75:48:bb:34:f1:a6:57:6f:
bf:45:1d:03:ad:18:62:b8:88:25:92:a1:ee:76:ba:
12:8d:2d:68:7a:47:37:24:12:1f:52:82:da:7e:50:
51:9e:9a:7b:dd:15:0d:fe:e8:c6:95:29:8b:54:17:
49:63:f7:0c:e6:25:1c:01:dd:bd:a7:f6:ce:00:20:
ea:37:8b:3c:1e:fd:6a:ee:c0:db:a8:2f:51:97:d4:
44:3a:df:cd:6d:d9:8a:d3:07:af:a1:a8:36:d8:fb:
10:95:ee:28:22:14:7a:2a:35:5c:90:01:e2:a2:61:
17:50:c6:23:3f:8b:a0:6a:5e:75:46:0d:c9:ae:5f:
2d:fa:d9:41:8c:a6:47:10:d6:a6:ec:5f:38:54:7a:
35:00:f7:69:31:86:1b:5b:cb:60:7e:04:c2:e1:7e:
d2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:41:67:2C:55:5C:FF:0A:58:A8:CF:9A:EE:E7:80:32:64:BF:2D:28
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/1EFnLFVc_wpYqM-a7ueAMmS_LSg.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:370::/32
2405:f000::/32
Signature Algorithm: sha256WithRSAEncryption
7f:a0:43:bc:1e:97:5d:2c:0b:16:0e:a1:01:d7:53:c6:f1:1e:
33:79:a2:e9:98:12:49:ad:bc:bb:64:67:19:0e:97:f4:4a:d7:
07:65:43:5c:b1:4e:6b:4b:d5:e3:08:6d:90:bf:b2:e1:bf:8d:
ca:73:0b:3a:ce:0c:da:b5:5f:b1:f8:c8:fe:d2:12:8f:2d:0b:
98:b8:0c:a4:76:1f:44:7e:bb:d0:27:a6:4d:bb:ec:4d:d4:3d:
da:94:46:49:70:c0:cd:54:00:f7:40:f9:94:7e:36:7b:63:0a:
5b:a8:4f:45:56:62:4e:8d:ac:7f:d0:84:4b:c3:1d:c4:cb:9f:
ef:e8:79:5c:d2:85:0d:cf:8c:54:c5:03:f9:92:e0:d4:71:20:
be:00:c1:3d:2c:12:b0:7d:6a:77:92:15:39:48:a5:f5:49:b0:
6d:50:19:43:37:6d:1b:11:aa:00:29:0f:8b:2c:0e:51:c5:83:
d1:f8:5f:0a:0d:1b:3e:ba:10:66:a2:88:7e:17:0c:39:67:a8:
be:8f:af:73:08:09:d5:27:03:66:9b:b7:c2:ea:93:7a:23:34:
a7:eb:ac:3d:13:dd:07:a4:74:4a:5d:6d:0c:2f:b2:42:a9:04:
b4:e0:5c:47:e7:48:e3:fb:d6:98:c8:a7:5f:1e:ee:29:27:04:
50:33:f4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 06:45:20 2026 by rpki-client