
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer
File: D38zCPyVIyRZg2_fFZr2tPqrrJE.cer (raw, json)
Hash identifier: GE3WqCzbcomvK1B7desRmo+1wrYTuF2ogX/7KLXJ7x8=
Subject key identifier: 0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 76F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
CRL Distribution Point: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Sun 15 Nov 2026 01:38:42 +0000
Certificate not after: Mon 15 Nov 2027 01:30:02 +0000
Subordinate resources: IP: 103.2.96.0/22
IP: 133.226.160.0/20
IP: 180.178.80.0/21
IP: 218.40.96.0/20
IP: 219.103.48.0/20
IP: 220.247.184.0/21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 08:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30448 (0x76f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Nov 15 01:38:42 2026 GMT
Not After : Nov 15 01:30:02 2027 GMT
Subject: CN=0F7F3308FC95232459836FDF159AF6B4FAABAC91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8e:a3:b2:54:63:b5:e1:7f:d9:52:38:f4:28:
59:7a:b0:db:49:4a:0d:a8:95:ab:f7:b1:c1:ba:0d:
e3:4e:80:e6:b6:65:02:b7:77:6c:fb:a9:c4:d8:63:
62:ca:5a:f5:32:f4:95:bd:97:ea:16:ef:a9:5f:7a:
e5:9f:d7:91:66:fb:83:07:8c:88:89:6f:45:2e:d3:
5b:c1:84:df:80:90:96:08:87:44:f4:0d:02:18:25:
59:fb:46:50:16:85:87:85:62:29:47:24:36:25:2b:
bc:2d:b6:62:b2:4b:a1:37:b8:97:43:f4:50:60:50:
39:e5:53:e1:f2:65:a3:89:67:17:54:66:09:17:c8:
1b:7c:10:f1:7c:14:10:ce:dd:55:85:ee:fd:df:09:
68:73:82:9e:71:fd:1b:1c:f3:dd:d6:fb:0b:03:d1:
84:81:8c:fb:8c:3c:5a:a6:33:79:ee:80:9a:78:b1:
06:c7:9e:a0:db:d9:22:4b:9c:ee:eb:94:8b:a3:00:
bc:bf:5f:d1:1e:ad:84:25:b4:94:b7:78:bc:82:e9:
47:c8:c9:65:12:cc:87:45:ee:94:0d:38:37:b0:26:
71:42:37:77:89:0d:79:4a:bf:8d:c8:95:f0:d3:d7:
87:a9:d0:47:fd:f6:c9:56:0b:5d:a1:40:4b:9b:13:
ea:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.2.96.0/22
133.226.160.0/20
180.178.80.0/21
218.40.96.0/20
219.103.48.0/20
220.247.184.0/21
Signature Algorithm: sha256WithRSAEncryption
26:ae:f2:d6:60:84:f7:a9:c6:87:52:51:80:38:2c:9e:cc:06:
3f:83:ab:c8:1c:34:2e:4e:c2:4f:f4:43:55:18:a9:4d:8c:a5:
4c:76:58:0b:71:8c:06:3e:8d:44:49:7d:39:af:6d:ca:05:78:
11:41:1a:a1:d6:11:06:84:7f:32:bb:8a:65:96:87:90:6c:15:
8d:a7:19:bc:86:2e:1d:e6:08:60:d6:1a:8c:1c:52:a7:f1:af:
7b:5a:61:b2:53:d5:a3:8a:2e:08:ee:03:b7:c2:f1:d7:c6:e8:
0c:dd:ac:3c:8b:27:d9:83:5c:fb:02:1e:7d:5c:89:40:00:21:
8d:86:13:12:6b:86:f5:96:6a:09:d6:ae:1c:e5:61:3d:6f:65:
04:2c:a4:eb:09:0f:b9:79:69:95:28:34:d2:16:1d:5b:e5:6c:
90:a9:ca:e3:ac:a2:fb:fc:00:97:a9:09:c3:de:e5:e7:62:8e:
1f:4b:04:93:e6:cc:b5:b0:8b:47:21:26:2d:ea:5a:d6:ef:c9:
84:d2:bd:68:7b:8b:10:99:c2:50:15:a6:77:3c:23:8b:f9:94:
f4:77:cf:f9:f5:29:57:36:24:18:2e:a4:46:36:05:df:e7:82:
3a:7e:2f:28:e9:99:ee:55:04:86:7a:e5:92:ac:f7:97:44:d5:
32:4d:27:4d
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgICdvAwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC
NTIwREFBQzdEQThGMB4XDTI2MTExNTAxMzg0MloXDTI3MTExNTAxMzAwMlowMzEx
MC8GA1UEAxMoMEY3RjMzMDhGQzk1MjMyNDU5ODM2RkRGMTU5QUY2QjRGQUFCQUM5
MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMCOo7JUY7Xhf9lSOPQo
WXqw20lKDaiVq/exwboN406A5rZlArd3bPupxNhjYspa9TL0lb2X6hbvqV965Z/X
kWb7gweMiIlvRS7TW8GE34CQlgiHRPQNAhglWftGUBaFh4ViKUckNiUrvC22YrJL
oTe4l0P0UGBQOeVT4fJlo4lnF1RmCRfIG3wQ8XwUEM7dVYXu/d8JaHOCnnH9Gxzz
3db7CwPRhIGM+4w8WqYzee6AmnixBseeoNvZIkuc7uuUi6MAvL9f0R6thCW0lLd4
vILpR8jJZRLMh0XulA04N7AmcUI3d4kNeUq/jciV8NPXh6nQR/32yVYLXaFAS5sT
6r8CAwEAAaOCAqQwggKgMB0GA1UdDgQWBBQPfzMI/JUjJFmDb98Vmva0+quskTAf
BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0
b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa
dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j
Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0
NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G
A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB
7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw
L2FwL0E5MUE3MzgxMDAwMC82NzkvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt
cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzY3OS9EMzh6Q1B5
Vkl5UlpnMl9mRlpyMnRQcXJySkUubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw
a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s
MD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCZwJgAwQEheKgAwQDtLJQAwQE
2ihgAwQE22cwAwQD3Pe4MA0GCSqGSIb3DQEBCwUAA4IBAQAmrvLWYIT3qcaHUlGA
OCyezAY/g6vIHDQuTsJP9ENVGKlNjKVMdlgLcYwGPo1ESX05r23KBXgRQRqh1hEG
hH8yu4plloeQbBWNpxm8hi4d5ghg1hqMHFKn8a97WmGyU9Wjii4I7gO3wvHXxugM
3aw8iyfZg1z7Ah59XIlAACGNhhMSa4b1lmoJ1q4c5WE9b2UELKTrCQ+5eWmVKDTS
Fh1b5WyQqcrjrKL7/ACXqQnD3uXnYo4fSwST5sy1sItHISYt6lrW78mE0r1oe4sQ
mcJQFaZ3PCOL+ZT0d8/59SlXNiQYLqRGNgXf54I6fi8o6ZnuVQSGeuWSrPeXRNUy
TSdN
-----END CERTIFICATE-----
Generated at Sun Nov 15 14:46:11 2026 by rpki-client