
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/67VzZrjhSGYYwglJ26YzwW0Xhhc.cer
File: 67VzZrjhSGYYwglJ26YzwW0Xhhc.cer (raw, json)
Hash identifier: /n0752xzi73MOYcFCpgKJHwgsNG1W7sHIk4DaHlnm9A=
Subject key identifier: EB:B5:73:66:B8:E1:48:66:18:C2:09:49:DB:A6:33:C1:6D:17:86:17
Authority key identifier: D1:95:7E:C5:8C:08:F3:5B:AA:6B:FE:77:E4:5A:97:40:BA:47:1F:9E
Certificate issuer: /CN=A91A73810000/serialNumber=D1957EC58C08F35BAA6BFE77E45A9740BA471F9E
Certificate serial: 0303
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/441/67VzZrjhSGYYwglJ26YzwW0Xhhc.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/441/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Tue 15 Sep 2026 01:41:08 +0000
Certificate not after: Wed 15 Sep 2027 01:30:02 +0000
Subordinate resources: IP: 81.23.208.0/20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 14:50:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 771 (0x303)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=D1957EC58C08F35BAA6BFE77E45A9740BA471F9E
Validity
Not Before: Sep 15 01:41:08 2026 GMT
Not After : Sep 15 01:30:02 2027 GMT
Subject: CN=EBB57366B8E1486618C20949DBA633C16D178617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e8:cf:7b:23:1d:7b:38:22:63:c4:cc:df:74:
7c:2e:89:e2:75:1c:0c:17:2b:f5:de:bc:44:21:6d:
28:d7:73:23:27:f6:2e:b5:df:52:ed:1b:91:b6:6c:
1c:75:d2:2d:0c:86:f3:5a:9b:e3:e8:92:c3:eb:60:
18:ec:35:9b:2f:54:70:91:cd:9c:bf:1a:87:2c:0d:
9d:91:30:51:fb:dc:a7:c3:cc:16:24:1b:89:99:74:
05:02:43:36:93:6a:0d:af:b5:ce:2f:a8:9b:ae:90:
2a:8f:3e:99:14:6b:9e:65:3d:fb:1f:e1:d7:58:c7:
55:bb:c9:da:c9:3d:07:00:45:94:bd:11:f7:68:a3:
19:70:a8:78:39:07:dd:6b:bb:b7:dc:ba:01:7c:53:
c4:25:78:97:4a:d9:a4:28:29:93:4e:6e:97:d2:94:
d0:47:a6:51:56:c0:5a:f3:64:e0:9b:63:a8:1c:63:
ae:c5:e5:44:45:3f:b9:29:de:7b:25:67:80:db:d5:
0c:7c:f8:40:52:41:61:20:13:1d:61:e8:1c:c0:ba:
29:c6:37:90:bc:02:67:72:fa:9d:b8:dd:89:36:85:
36:8f:78:26:20:fa:8b:6f:1e:35:53:c3:3a:1b:93:
05:18:b5:cd:8d:05:5d:24:f8:b8:82:78:96:c6:bb:
cc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B5:73:66:B8:E1:48:66:18:C2:09:49:DB:A6:33:C1:6D:17:86:17
X509v3 Authority Key Identifier:
keyid:D1:95:7E:C5:8C:08:F3:5B:AA:6B:FE:77:E4:5A:97:40:BA:47:1F:9E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/441/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/441/67VzZrjhSGYYwglJ26YzwW0Xhhc.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
81.23.208.0/20
Signature Algorithm: sha256WithRSAEncryption
ab:7b:1d:cf:55:45:ce:e0:fc:5a:46:a6:f3:d3:5b:98:82:6b:
9e:68:6f:a5:84:6d:98:9e:95:bf:d9:11:67:04:5d:d4:31:14:
4d:9e:ef:6d:73:64:df:e3:bb:54:84:14:c9:05:71:22:88:3f:
02:ee:81:19:19:0c:52:69:48:46:84:00:e9:97:f5:45:f3:09:
92:07:00:8b:30:03:cb:10:ff:99:1a:f1:0e:4a:e4:1b:b0:9e:
67:8e:73:9e:8e:50:fb:c1:7e:9d:fe:e4:4c:58:bb:fb:dc:a4:
f6:e3:d2:e2:ef:bb:a2:7e:83:75:e8:d5:89:ca:1b:75:03:5d:
ad:aa:a7:bb:a9:60:e1:03:99:a4:3e:2e:77:d7:42:22:25:53:
28:30:63:a4:74:b7:2b:05:39:c4:7b:28:c6:8c:7d:8c:41:d5:
72:4d:3d:c7:27:6d:ae:a4:e6:58:05:e6:2a:32:c1:5e:6f:f2:
05:bf:78:f7:32:86:75:78:8c:4a:fb:e8:0e:7f:e3:ab:db:ad:
5c:5a:cd:5f:e0:65:c3:bf:ab:0a:67:75:30:be:12:88:92:cd:
ec:16:5a:cb:18:4f:5f:a9:f1:1f:e4:af:5f:2a:1b:3c:ad:58:
3d:ab:7e:c4:60:c1:dc:30:8b:2a:ef:5a:33:7b:e2:25:06:e3:
be:24:d9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:29:21 2026 by rpki-client