Certificate
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
File: KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer (raw, json)
Hash identifier: 4Qdf6zGTvpHIIo5gGayGBjxhKJyAA3CtEaryJU24o/U=
Subject key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 7104
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Tue 15 Sep 2026 01:30:55 +0000
Certificate not after: Wed 15 Sep 2027 01:30:02 +0000
Subordinate resources: IP: 27.112.124.0/22
IP: 49.239.64.0/18
IP: 58.138.0.0 -- 58.138.191.255
IP: 61.211.96.0/19
IP: 101.128.128.0/17
IP: 103.2.57.0 -- 103.2.59.255
IP: 113.197.128.0/17
IP: 116.118.192.0/20
IP: 118.151.0.0 -- 118.151.191.255
IP: 119.10.192.0/18
IP: 121.102.0.0/16
IP: 121.200.200.0/21
IP: 124.41.0.0 -- 124.41.191.255
IP: 124.147.64.0/18
IP: 125.30.0.0/16
IP: 133.110.0.0/16
IP: 133.137.0.0/16
IP: 133.142.0.0/16
IP: 133.159.0.0/16
IP: 133.218.0.0/16
IP: 133.236.0.0/16
IP: 133.238.8.0 -- 133.238.255.255
IP: 150.31.0.0/16
IP: 163.49.0.0/16
IP: 163.131.0.0/16
IP: 163.140.0.0/16
IP: 163.218.0.0/16
IP: 202.16.104.0/21
IP: 202.32.0.0/16
IP: 202.48.108.0/23
IP: 202.141.192.0/20
IP: 202.214.0.0/16
IP: 202.221.0.0/16
IP: 202.224.128.0/18
IP: 202.232.0.0/16
IP: 202.238.128.0/17
IP: 202.245.133.0/24
IP: 202.247.136.0/21
IP: 202.247.160.0/19
IP: 202.253.115.0/24
IP: 203.180.0.0/16
IP: 210.128.0.0/16
IP: 210.130.0.0/16
IP: 210.133.192.0/18
IP: 210.138.0.0/16
IP: 210.142.128.0/19
IP: 210.148.0.0/15
IP: 210.173.0.0/19
IP: 211.14.32.0/19
IP: 218.42.160.0/19
IP: 218.228.96.0/19
IP: 219.105.0.0/19
IP: 219.111.0.0/17
IP: 219.119.0.0/16
IP: 219.121.160.0/19
IP: 219.126.128.0/17
IP: 220.100.0.0/16
IP: 220.156.0.0 -- 220.156.159.255
IP: 220.208.192.0/19
IP: 220.210.128.0/18
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28932 (0x7104)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Sep 15 01:30:55 2026 GMT
Not After : Sep 15 01:30:02 2027 GMT
Subject: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d7:87:9f:aa:a3:5a:09:42:a3:66:6a:a3:4d:
40:96:73:80:f2:96:56:78:fc:9f:31:04:7a:71:66:
f3:71:2e:24:a5:f0:35:60:a6:75:f2:e5:5f:73:ba:
88:97:fb:d1:d1:fa:c5:b9:18:cf:2d:68:51:7d:72:
a5:f4:42:11:fe:58:96:54:28:d6:a6:c1:49:2b:28:
05:8d:ff:47:d8:40:da:b2:84:2d:5e:02:bb:40:ab:
8a:35:c1:32:86:21:c2:94:11:53:75:8d:9e:df:ea:
6a:ab:80:3c:4f:a2:39:e1:25:73:1b:9d:20:5a:82:
bf:1e:0d:ed:0c:7a:88:c4:b0:fc:bd:1f:80:4a:a0:
e4:2f:a2:fe:60:84:f2:b9:94:b8:8e:e5:b9:70:0c:
ec:7e:41:64:2f:e8:6a:93:ec:ae:37:3f:58:19:5e:
48:a4:b5:95:9b:a8:e9:32:91:70:e7:60:61:32:c7:
d2:6e:62:60:11:5e:54:6d:3d:ce:5b:7d:f1:d1:05:
61:e2:80:8d:e3:eb:5d:c4:b2:76:e8:e7:fd:20:e0:
15:fa:6c:9d:ae:06:3f:32:83:fc:c0:ce:24:32:e1:
8e:9f:97:d7:a9:ee:b5:83:d6:ad:5b:1a:eb:30:ec:
07:12:9f:81:ec:16:fb:cc:a0:5d:67:ce:cc:9a:9a:
52:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.112.124.0/22
49.239.64.0/18
58.138.0.0-58.138.191.255
61.211.96.0/19
101.128.128.0/17
103.2.57.0-103.2.59.255
113.197.128.0/17
116.118.192.0/20
118.151.0.0-118.151.191.255
119.10.192.0/18
121.102.0.0/16
121.200.200.0/21
124.41.0.0-124.41.191.255
124.147.64.0/18
125.30.0.0/16
133.110.0.0/16
133.137.0.0/16
133.142.0.0/16
133.159.0.0/16
133.218.0.0/16
133.236.0.0/16
133.238.8.0-133.238.255.255
150.31.0.0/16
163.49.0.0/16
163.131.0.0/16
163.140.0.0/16
163.218.0.0/16
202.16.104.0/21
202.32.0.0/16
202.48.108.0/23
202.141.192.0/20
202.214.0.0/16
202.221.0.0/16
202.224.128.0/18
202.232.0.0/16
202.238.128.0/17
202.245.133.0/24
202.247.136.0/21
202.247.160.0/19
202.253.115.0/24
203.180.0.0/16
210.128.0.0/16
210.130.0.0/16
210.133.192.0/18
210.138.0.0/16
210.142.128.0/19
210.148.0.0/15
210.173.0.0/19
211.14.32.0/19
218.42.160.0/19
218.228.96.0/19
219.105.0.0/19
219.111.0.0/17
219.119.0.0/16
219.121.160.0/19
219.126.128.0/17
220.100.0.0/16
220.156.0.0-220.156.159.255
220.208.192.0/19
220.210.128.0/18
Signature Algorithm: sha256WithRSAEncryption
5a:1c:95:f7:d2:11:7c:f7:23:e5:9e:61:9f:27:b1:fb:f8:c0:
aa:ab:69:c2:16:c4:05:d9:da:64:91:84:6a:c1:30:2e:d2:a0:
a1:39:d0:ea:d2:36:1a:b8:5e:15:d6:39:2b:db:32:ed:23:1b:
46:ea:96:e4:55:40:54:b2:22:c9:64:c9:c6:b0:b3:08:2c:5b:
77:ca:f4:95:5f:92:74:06:06:b7:4d:23:d7:8a:2f:22:5d:97:
ae:27:77:ec:49:4d:20:bb:67:62:39:37:9d:d8:ed:02:42:e0:
a9:24:6e:49:f6:d6:a1:e4:33:55:b9:d7:eb:39:85:10:b2:40:
ea:63:23:66:bc:73:f5:51:71:cf:ed:e4:92:ba:10:90:ca:b9:
48:d8:4e:a2:94:8b:ac:41:d8:ec:79:c5:2d:34:c5:2a:ad:d9:
e2:57:c2:f0:4d:17:d1:08:da:86:48:27:4b:fa:ad:87:23:13:
7b:3a:d2:04:40:11:95:08:9b:28:9f:90:88:6b:7f:ed:b3:46:
fa:5d:ff:43:92:e6:ec:2f:ec:b8:89:ba:2b:92:12:a8:02:04:
fa:4b:46:3f:92:fb:0b:2c:c0:6a:5f:9b:86:2d:d3:59:50:6f:
dc:72:39:95:06:07:5a:59:07:5c:3c:33:d0:28:98:1c:a8:d9:
11:ea:27:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:37:56 2026 by rpki-client