
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9q55JOOJxjluvwL6MUcDbAeh3cc.cer
File: 9q55JOOJxjluvwL6MUcDbAeh3cc.cer (raw, json)
Hash identifier: CXCk9Wkw+HlDwDiJiR6HiWF1UxdPxbBOsC6zE41Uaq0=
Subject key identifier: F6:AE:79:24:E3:89:C6:39:6E:BF:02:FA:31:47:03:6C:07:A1:DD:C7
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 5B26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30361/9q55JOOJxjluvwL6MUcDbAeh3cc.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30361/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Wed 15 Oct 2025 01:38:52 +0000
Certificate not after: Thu 15 Oct 2026 01:30:02 +0000
Subordinate resources: IP: 2400:3f80::/32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 08:11:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23334 (0x5b26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Oct 15 01:38:52 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=F6AE7924E389C6396EBF02FA3147036C07A1DDC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5c:7a:2f:00:88:d8:e2:43:d0:81:06:c9:33:
46:8d:e3:a3:95:b8:65:88:a8:96:4c:dc:82:25:24:
f1:13:85:aa:65:d6:eb:dc:cc:19:a6:1f:e0:0c:dc:
b7:bb:5f:7c:e6:d1:37:4b:06:b5:19:97:a5:04:4b:
03:b8:1c:bb:1b:a2:79:04:fa:0a:ae:be:ac:27:09:
2e:ac:24:6e:c0:84:99:92:fe:17:14:93:20:80:4b:
cf:48:40:e1:03:1e:14:31:b1:70:52:49:20:6a:38:
04:64:02:1e:ce:9c:fd:c7:18:b0:cf:50:b1:a7:86:
e6:68:61:2a:91:4a:c8:34:6d:ec:3b:4c:2b:ad:2c:
2c:d4:af:3b:e0:4a:49:8b:30:ba:d4:7b:e2:93:2f:
39:46:d4:82:ca:6d:3d:52:36:bb:bc:55:8e:31:7c:
67:ed:e0:5f:d0:64:87:35:00:f2:f7:34:2f:8d:8b:
86:45:20:bf:14:d4:ed:a9:07:23:43:4f:51:92:b5:
7c:21:99:d5:02:87:a7:25:fc:fb:27:ae:f1:88:72:
8b:ba:35:0a:1d:8c:0d:df:91:b9:e3:79:f7:25:3d:
44:78:34:dd:ed:28:7e:73:90:7a:e8:ed:a1:23:85:
e5:cf:57:e5:b4:30:9b:14:39:20:cd:1c:f6:8a:bb:
65:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:AE:79:24:E3:89:C6:39:6E:BF:02:FA:31:47:03:6C:07:A1:DD:C7
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30361/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30361/9q55JOOJxjluvwL6MUcDbAeh3cc.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:3f80::/32
Signature Algorithm: sha256WithRSAEncryption
0f:36:28:6d:cf:8c:5d:38:ff:24:87:67:07:4a:4d:57:dc:91:
7a:6c:d8:27:97:16:ae:6c:85:2a:5d:13:2a:3d:41:32:cd:e7:
a6:6c:19:77:1f:c6:53:c3:35:82:46:ef:21:e9:6c:8b:8f:09:
e5:c9:6f:ea:8f:cf:ba:d8:7a:05:a4:e0:ef:bd:0b:1f:6a:dd:
9f:d8:57:32:b6:db:5a:75:c0:6e:7b:d1:28:29:05:6e:38:ba:
b1:87:f0:91:fc:c1:80:6b:cf:69:64:76:b3:3a:6c:22:e5:73:
aa:a5:f3:57:3d:49:d1:1b:c3:aa:33:c8:e9:9c:0b:01:66:1c:
bd:98:5a:19:be:fd:5a:03:7e:1a:c6:82:d9:0d:91:0c:0a:a9:
ce:27:85:1f:69:4e:a3:e7:ca:3c:48:9e:19:33:5d:49:c3:02:
dd:a7:c1:f0:02:80:ca:f0:e4:6a:31:50:cd:d3:fc:a0:51:25:
0f:38:8d:e9:e2:52:e5:82:99:5f:7f:97:79:82:eb:68:b9:c3:
7a:0f:ba:6f:98:7d:82:cc:93:89:4c:4a:20:26:91:df:24:c4:
4f:26:e4:29:c3:59:c4:e5:51:e3:2e:e7:99:99:96:6a:8e:12:
24:d0:1e:ed:1f:dc:13:ce:bf:7a:24:40:ff:aa:5d:ca:bd:ff:
3f:fa:b9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:07:48 2025 by rpki-client