
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/4oKHAq-VJLLD1X4biwxkliVmlJw.cer
File: 4oKHAq-VJLLD1X4biwxkliVmlJw.cer (raw, json)
Hash identifier: xnFgxBB+YZBc/eneS122SLXbUNRudPpBEd0BJd6tqEA=
Subject key identifier: E2:82:87:02:AF:95:24:B2:C3:D5:7E:1B:8B:0C:64:96:25:66:94:9C
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 713B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30376/4oKHAq-VJLLD1X4biwxkliVmlJw.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30376/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Tue 15 Sep 2026 01:32:08 +0000
Certificate not after: Wed 15 Sep 2027 01:30:02 +0000
Subordinate resources: IP: 2407:58c0::/32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 19:08:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28987 (0x713b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Sep 15 01:32:08 2026 GMT
Not After : Sep 15 01:30:02 2027 GMT
Subject: CN=E2828702AF9524B2C3D57E1B8B0C64962566949C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:76:f9:3f:55:c9:c1:51:e3:78:cc:6b:2a:f6:
53:0a:24:1c:59:3f:17:10:18:32:ea:2b:24:8a:fd:
6b:ae:2c:ce:fb:8d:dc:74:1c:4d:6c:e3:39:72:0c:
ed:09:04:37:88:5c:92:0c:94:8e:73:aa:0f:2f:2d:
3a:3a:1f:eb:62:32:99:f4:a8:85:ca:bf:6a:80:01:
04:2c:80:1c:76:e6:71:7a:2f:4f:0b:17:4a:7c:fa:
04:f2:9a:9f:74:c1:63:15:4c:51:9c:25:13:cd:9c:
b4:8a:27:cf:4f:24:6d:18:cc:d3:1a:20:2e:92:43:
3f:f9:4a:3f:e7:d2:a9:75:14:9c:d2:d0:62:8f:23:
4e:ee:5d:df:29:d6:f8:18:b1:99:55:3f:f4:20:e2:
17:28:63:03:b2:d0:02:8f:b8:cb:18:0b:69:50:16:
3c:17:44:45:3b:c5:d8:80:c3:8c:ae:8e:cb:c5:86:
3f:94:59:5a:8b:cf:b9:bc:69:8b:23:77:39:98:72:
90:fd:28:de:be:cb:b8:68:5e:bd:54:7b:8d:69:98:
77:eb:14:6d:ca:86:40:97:bc:4e:3d:6f:bb:e8:1f:
0c:ca:45:30:88:5c:c3:d0:ee:f9:c7:f6:7d:c2:10:
d2:90:14:97:ff:00:fa:af:bb:dd:62:fc:a7:41:a5:
84:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:82:87:02:AF:95:24:B2:C3:D5:7E:1B:8B:0C:64:96:25:66:94:9C
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30376/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30376/4oKHAq-VJLLD1X4biwxkliVmlJw.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:58c0::/32
Signature Algorithm: sha256WithRSAEncryption
8d:57:7c:0a:c9:72:f7:42:f0:ed:09:ed:8b:d6:62:bf:60:94:
ea:94:ad:69:13:85:6b:53:d8:69:80:f6:73:69:9f:9b:12:b6:
7d:05:0d:1e:85:6c:39:69:38:ae:f6:93:ab:fd:aa:e4:a5:4a:
52:e0:25:93:9d:69:15:20:82:22:f8:e8:b7:55:62:3c:4c:a2:
5f:fb:fe:c1:34:17:43:84:bb:45:bb:4a:04:04:e5:cc:98:e9:
b9:7f:35:1f:d6:b0:3a:b3:59:bc:5c:7a:16:03:ac:3b:33:ed:
a0:e1:15:95:29:3d:29:c9:bd:3b:3d:6f:3d:b4:5f:f6:86:14:
ac:f2:f7:3b:21:08:de:27:e5:79:30:9b:d9:90:0a:01:08:f5:
19:12:8f:c2:09:e7:f3:98:25:9f:3c:ae:9d:8e:86:cb:e4:c3:
b7:2c:1f:5c:63:c9:fe:91:cb:fa:77:83:a7:3b:6e:5b:50:5a:
3e:69:60:9e:4d:5d:2b:c3:9b:01:a3:bc:39:ed:5a:b0:c7:64:
dd:82:e5:eb:c7:54:10:4f:44:49:d2:e7:33:83:82:56:23:d3:
44:c9:47:0e:9a:e1:0b:f6:f7:67:b8:e8:9e:73:b8:ce:cb:b9:
27:5f:dc:2c:97:e2:1b:f1:06:f5:6e:0f:93:d6:76:e1:a7:19:
5b:07:e6:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:20:56 2026 by rpki-client