
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/FCbDhOKkkoP6dH0HnoPdMrZdfoU.cer
File: FCbDhOKkkoP6dH0HnoPdMrZdfoU.cer (raw, json)
Hash identifier: N6bXAxL96k+/oSh1NenYO/DhnVqEtGBNNc0QGHCG6lQ=
Subject key identifier: 14:26:C3:84:E2:A4:92:83:FA:74:7D:07:9E:83:DD:32:B6:5D:7E:85
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 62B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Sun 15 Feb 2026 01:37:10 +0000
Certificate not after: Mon 15 Feb 2027 01:30:02 +0000
Subordinate resources: IP: 103.18.60.0/22
IP: 202.223.32.0/22
IP: 203.81.112.0/20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:24:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25269 (0x62b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Feb 15 01:37:10 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=1426C384E2A49283FA747D079E83DD32B65D7E85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:19:41:da:65:8c:db:3b:bd:d7:f4:28:08:0d:
cf:9e:86:9b:84:3b:f2:fd:70:ec:a7:33:e2:bb:f4:
d7:1c:bc:61:7f:4c:0f:b4:5d:02:ab:b4:3b:9b:90:
f3:11:77:29:f2:88:fe:e3:27:7f:c8:1a:f6:6c:29:
d3:44:54:f8:77:57:6f:a0:1c:ab:48:03:08:9e:fe:
b3:3d:46:ff:1a:83:07:2f:fb:5c:dc:57:a1:9c:e1:
e1:76:fc:b1:ed:4e:c7:23:13:91:8c:f9:e6:39:83:
e8:ec:fc:48:b9:8d:ac:cf:4b:eb:1b:14:62:2f:55:
3a:27:31:21:90:ed:2a:4f:23:d2:1a:86:38:37:07:
02:fc:8d:72:c8:12:50:d5:46:ae:60:a9:50:2e:5b:
cb:f0:95:4e:9d:9f:1e:1b:84:14:75:74:74:4e:4e:
54:18:55:a6:57:db:8c:6d:5d:70:69:2c:58:ef:98:
a6:74:3d:76:85:f4:b6:28:3d:24:0f:a0:fc:e4:9e:
4c:a7:68:cf:96:8d:2e:12:e7:d0:e2:e7:72:84:62:
31:6e:b4:c4:8c:dc:4d:98:81:d8:cb:c1:a9:bd:00:
d6:79:f1:21:19:c6:d6:d8:ea:d0:99:69:dc:e3:e5:
0e:c9:e6:1a:6c:3c:2b:f2:52:11:8e:0c:9e:c9:9e:
81:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:26:C3:84:E2:A4:92:83:FA:74:7D:07:9E:83:DD:32:B6:5D:7E:85
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.18.60.0/22
202.223.32.0/22
203.81.112.0/20
Signature Algorithm: sha256WithRSAEncryption
40:e1:83:7b:3e:dc:3f:9a:cf:f7:f3:6d:33:c8:be:ba:49:cd:
b5:46:ed:0d:bc:45:1e:2e:c8:19:44:3a:83:60:4c:91:d8:9e:
8f:d4:7a:79:f3:8a:38:8d:74:f3:1e:1f:35:e8:cc:8f:ee:ef:
49:04:46:f3:c5:b0:1f:f7:10:da:b5:a5:a6:4d:8e:51:71:f8:
d3:6d:e8:1d:a9:81:5d:27:f8:d1:6f:22:60:5d:8c:03:3b:59:
fd:c1:37:6c:a1:b2:1c:26:f1:98:f3:be:f0:e7:c8:e7:ef:5e:
ff:9e:50:27:c4:d6:7c:aa:58:37:54:0b:4d:a9:f9:ad:44:c7:
de:c9:93:1c:78:f1:72:b8:79:f5:6a:b9:5d:05:06:cc:df:56:
8a:cc:9c:c2:50:84:19:23:c0:9e:8e:4b:8c:53:1a:7d:bc:3e:
1b:5a:8e:a9:7c:7f:cd:99:43:f8:29:90:bf:2e:4e:66:91:46:
ab:82:67:65:ca:67:b2:d4:ef:0f:f2:d0:9f:b2:03:d2:d7:16:
c5:f5:c5:6d:9e:66:b7:18:45:0b:f9:4d:24:06:ea:65:67:3c:
1b:06:72:f5:4d:3b:4c:50:73:fe:3d:d9:73:89:3f:4d:e0:51:
b5:fa:fc:bb:79:3a:db:35:8a:51:34:25:fd:04:e9:60:c1:db:
67:0a:a4:e4
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgICYrUwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC
NTIwREFBQzdEQThGMB4XDTI2MDIxNTAxMzcxMFoXDTI3MDIxNTAxMzAwMlowMzEx
MC8GA1UEAxMoMTQyNkMzODRFMkE0OTI4M0ZBNzQ3RDA3OUU4M0REMzJCNjVEN0U4
NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALoZQdpljNs7vdf0KAgN
z56Gm4Q78v1w7Kcz4rv01xy8YX9MD7RdAqu0O5uQ8xF3KfKI/uMnf8ga9mwp00RU
+HdXb6Acq0gDCJ7+sz1G/xqDBy/7XNxXoZzh4Xb8se1OxyMTkYz55jmD6Oz8SLmN
rM9L6xsUYi9VOicxIZDtKk8j0hqGODcHAvyNcsgSUNVGrmCpUC5by/CVTp2fHhuE
FHV0dE5OVBhVplfbjG1dcGksWO+YpnQ9doX0tig9JA+g/OSeTKdoz5aNLhLn0OLn
coRiMW60xIzcTZiB2MvBqb0A1nnxIRnG1tjq0Jlp3OPlDsnmGmw8K/JSEY4Mnsme
gQsCAwEAAaOCApIwggKOMB0GA1UdDgQWBBQUJsOE4qSSg/p0fQeeg90ytl1+hTAf
BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0
b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa
dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j
Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0
NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G
A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB
7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw
L2FwL0E5MUE3MzgxMDAwMC85MjUvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt
cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzkyNS9GQ2JEaE9L
a2tvUDZkSDBIbm9QZE1yWmRmb1UubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw
a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s
MCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCZxI8AwQCyt8gAwQEy1FwMA0G
CSqGSIb3DQEBCwUAA4IBAQBA4YN7Ptw/ms/3820zyL66Sc21Ru0NvEUeLsgZRDqD
YEyR2J6P1Hp584o4jXTzHh816MyP7u9JBEbzxbAf9xDataWmTY5RcfjTbegdqYFd
J/jRbyJgXYwDO1n9wTdsobIcJvGY877w58jn717/nlAnxNZ8qlg3VAtNqfmtRMfe
yZMcePFyuHn1arldBQbM31aKzJzCUIQZI8CejkuMUxp9vD4bWo6pfH/NmUP4KZC/
Lk5mkUargmdlymey1O8P8tCfsgPS1xbF9cVtnma3GEUL+U0kBuplZzwbBnL1TTtM
UHP+PdlziT9N4FG1+vy7eTrbNYpRNCX9BOlgwdtnCqTk
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:05:37 2026 by rpki-client