
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/7Gw3q9axO6v8tw_itXxZjBbUoH8.cer
File: 7Gw3q9axO6v8tw_itXxZjBbUoH8.cer (raw, json)
Hash identifier: IO29x3KOK6ClyPSDyv7UDNzHoCYPspB0FHMCei/ROOg=
Subject key identifier: EC:6C:37:AB:D6:B1:3B:AB:FC:B7:0F:E2:B5:7C:59:8C:16:D4:A0:7F
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 5AE5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2005/7Gw3q9axO6v8tw_itXxZjBbUoH8.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2005/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Wed 15 Oct 2025 01:37:06 +0000
Certificate not after: Thu 15 Oct 2026 01:30:02 +0000
Subordinate resources: IP: 133.128.0.0/16
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23269 (0x5ae5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Oct 15 01:37:06 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=EC6C37ABD6B13BABFCB70FE2B57C598C16D4A07F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:83:9b:01:12:08:47:20:78:c1:ba:2a:ed:bc:
28:51:ad:59:76:69:9e:37:bf:09:6a:d7:fa:a1:12:
81:1c:3a:5f:68:0b:24:91:ba:b0:9b:27:52:b5:44:
29:94:31:12:68:aa:85:52:b9:bc:3b:c3:79:82:99:
b2:73:36:6d:26:f8:85:52:35:a3:1a:17:01:5d:25:
f5:be:4f:24:a4:3e:d2:c5:48:a7:55:22:b6:8e:5b:
47:c8:dc:ba:d7:af:da:68:e9:6b:ec:30:35:5c:c4:
c9:62:fa:d2:61:97:cc:d4:16:5b:04:4a:5f:07:bb:
ea:91:e6:72:2d:4b:82:2f:df:35:ff:2f:69:55:e6:
2b:a8:e8:f5:d9:89:11:24:7f:c0:d5:da:2d:a4:2b:
7e:d6:b2:1d:02:f2:5b:59:3f:6c:ff:7e:e3:ef:c5:
c1:b1:11:c3:8c:f1:df:72:ed:b1:bd:be:f9:5c:d7:
3d:ff:3e:91:a2:26:4f:1e:05:55:6a:1b:06:e4:5f:
31:3d:44:a1:6a:5d:83:4d:54:26:2f:a0:ff:bb:67:
3c:9b:30:57:63:4e:ba:b8:5b:e1:e9:43:87:f8:a5:
68:7e:bb:48:4f:33:df:d9:42:21:22:32:59:88:3b:
e8:7d:7a:35:18:5d:94:2a:20:b2:ee:b7:79:e4:b3:
a8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6C:37:AB:D6:B1:3B:AB:FC:B7:0F:E2:B5:7C:59:8C:16:D4:A0:7F
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2005/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2005/7Gw3q9axO6v8tw_itXxZjBbUoH8.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
133.128.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2c:57:0f:b6:93:9d:3f:f9:3d:6f:a3:62:1b:ea:ba:96:31:27:
a6:f1:40:b1:6e:db:0a:71:c5:3f:b8:a1:b6:1d:83:cd:f3:4a:
c7:37:47:f2:eb:79:7a:78:3b:7f:34:90:dc:5c:0b:58:56:42:
52:f4:78:e0:16:1b:fe:c2:79:df:53:cf:91:53:49:59:37:86:
a0:59:b2:e5:56:74:23:78:1e:1d:db:e6:5e:91:fe:6b:aa:e5:
f0:98:dc:b5:2d:4b:53:7d:af:29:eb:4f:2b:8b:84:02:5d:95:
8e:ee:bf:1a:11:c1:b7:16:aa:c8:67:6e:db:1f:87:bd:1a:4a:
d1:07:e4:e0:5a:41:10:ed:d8:8a:f9:cd:10:f3:e9:0c:19:4c:
76:45:ff:ac:d7:9a:27:80:82:a5:c2:a7:7c:2c:12:37:ee:5a:
f0:97:66:f5:4f:6a:19:ee:45:b1:a6:ff:e3:75:bf:98:1d:96:
04:67:9c:00:a5:08:6e:c0:cf:17:27:04:87:48:b8:7d:92:74:
24:4f:ab:6f:13:ab:5d:54:16:85:9e:55:00:ac:86:c4:4c:81:
cc:24:e6:76:7d:5d:99:42:8a:b8:58:4a:d5:91:77:7e:9a:1d:
31:08:3b:66:9f:23:4c:a7:94:0a:c8:e2:35:69:5a:bf:e4:a8:
1a:ae:36:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:15:18 2025 by rpki-client