
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/LU5x9qbyGs7kffXXRvfJNDus-9k.cer
File: LU5x9qbyGs7kffXXRvfJNDus-9k.cer (raw, json)
Hash identifier: +cgUr3n+DfK7pxwgMB4ObyQEhV+0pbBXJymNEu91i4I=
Subject key identifier: 2D:4E:71:F6:A6:F2:1A:CE:E4:7D:F5:D7:46:F7:C9:34:3B:AC:FB:D9
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 7178
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2217/LU5x9qbyGs7kffXXRvfJNDus-9k.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2217/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Tue 15 Sep 2026 01:33:20 +0000
Certificate not after: Wed 15 Sep 2027 01:30:02 +0000
Subordinate resources: IP: 133.1.0.0/16
IP: 202.24.174.0/23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29048 (0x7178)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Sep 15 01:33:20 2026 GMT
Not After : Sep 15 01:30:02 2027 GMT
Subject: CN=2D4E71F6A6F21ACEE47DF5D746F7C9343BACFBD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ad:62:a4:be:8d:5c:03:d5:3e:97:7d:21:89:
a9:69:10:e7:84:16:01:ac:40:e5:0b:36:6c:7e:36:
2a:5e:26:a1:75:61:62:fc:1b:ba:fd:a1:dd:51:dc:
e8:0d:79:6a:a2:90:c0:83:f2:49:1d:6c:0f:5e:27:
d2:20:a3:f3:fc:6b:97:f1:b6:f7:82:c5:e1:55:a0:
d5:34:6a:08:3e:6c:3e:45:e2:d7:03:4d:a0:a1:ec:
76:33:6c:95:7f:ad:6a:28:1d:36:46:fb:2e:95:48:
4a:df:f0:62:02:de:27:89:5d:00:ef:c7:e7:05:a7:
d8:ee:e6:23:82:d0:1c:b1:ba:da:23:c3:7c:06:ea:
ab:0f:ba:70:58:d7:6d:80:54:32:18:49:c2:f3:f2:
55:cf:57:72:4c:c0:b2:a7:8c:21:55:ee:37:85:a9:
a7:ce:a1:b6:b5:c8:4c:df:9a:10:13:7d:0b:1f:27:
cf:59:1a:fd:33:79:55:51:0f:3c:0a:c5:94:44:96:
a9:a4:9b:b8:be:e4:b9:1b:5a:cd:a7:a1:a8:70:a1:
2b:41:de:c9:f7:0b:85:19:f5:b4:05:6a:39:21:34:
6e:89:e1:d3:7f:82:c9:05:d1:93:35:69:c4:c6:7d:
25:8f:01:3c:79:da:44:de:bb:bf:3c:14:ca:ae:12:
34:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:4E:71:F6:A6:F2:1A:CE:E4:7D:F5:D7:46:F7:C9:34:3B:AC:FB:D9
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2217/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2217/LU5x9qbyGs7kffXXRvfJNDus-9k.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
133.1.0.0/16
202.24.174.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:c1:ff:eb:85:97:4f:c8:f0:86:d3:f7:28:d9:b9:b0:cc:fe:
7f:4e:15:c6:f8:14:cd:dc:ce:f5:44:ef:e3:ae:3e:4a:49:c2:
f5:bf:fe:45:49:60:a2:5a:bf:c1:b7:88:e6:70:c5:96:23:09:
b0:2d:49:fb:e2:cb:02:f6:16:15:bf:63:d8:4c:91:1e:87:f9:
70:89:c3:cb:10:b1:a8:ce:b2:5e:2a:5c:2f:a4:3e:42:24:59:
5b:1c:57:5c:20:83:8e:b8:12:5e:d7:1b:67:ce:a3:ee:1b:b5:
cb:16:ec:c6:8a:88:66:3e:33:02:1a:59:86:58:c1:91:f1:7f:
36:2c:58:1b:0c:9b:35:cf:13:ab:20:32:da:0c:92:80:94:cb:
9b:15:e3:15:41:81:36:14:6e:23:47:d5:2b:d4:3a:cb:c4:58:
cf:41:39:98:5c:30:39:c1:75:91:83:0a:0f:9f:fa:ff:d5:1b:
a8:aa:ad:ea:92:05:69:9b:94:1d:5a:f1:46:2f:59:ae:e0:fc:
da:fa:d4:a9:b0:ed:6f:9d:08:2e:a6:0c:2c:34:27:00:ad:23:
c6:6f:c5:61:0a:d9:9f:1a:18:c1:f0:4a:20:36:98:f4:29:f1:
60:21:81:69:8c:28:ea:6b:c2:63:57:e7:79:91:81:9a:fe:dd:
e4:c4:b4:a2
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgICcXgwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC
NTIwREFBQzdEQThGMB4XDTI2MDkxNTAxMzMyMFoXDTI3MDkxNTAxMzAwMlowMzEx
MC8GA1UEAxMoMkQ0RTcxRjZBNkYyMUFDRUU0N0RGNUQ3NDZGN0M5MzQzQkFDRkJE
OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMWtYqS+jVwD1T6XfSGJ
qWkQ54QWAaxA5Qs2bH42Kl4moXVhYvwbuv2h3VHc6A15aqKQwIPySR1sD14n0iCj
8/xrl/G294LF4VWg1TRqCD5sPkXi1wNNoKHsdjNslX+taigdNkb7LpVISt/wYgLe
J4ldAO/H5wWn2O7mI4LQHLG62iPDfAbqqw+6cFjXbYBUMhhJwvPyVc9XckzAsqeM
IVXuN4Wpp86htrXITN+aEBN9Cx8nz1ka/TN5VVEPPArFlESWqaSbuL7kuRtazaeh
qHChK0HeyfcLhRn1tAVqOSE0bonh03+CyQXRkzVpxMZ9JY8BPHnaRN67vzwUyq4S
NH0CAwEAAaOCAo4wggKKMB0GA1UdDgQWBBQtTnH2pvIazuR99ddG98k0O6z72TAf
BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0
b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa
dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j
Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0
NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G
A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAQYIKwYBBQUHAQsEgfQw
gfEwQwYIKwYBBQUHMAWGN3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9hcC9BOTFBNzM4MTAwMDAvMjIxNy8wYgYIKwYBBQUHMAqGVnJzeW5jOi8vcnBr
aS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMjIxNy9MVTV4
OXFieUdzN2tmZlhYUnZmSk5EdXMtOWsubWZ0MEYGCCsGAQUFBzANhjpodHRwczov
L3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24u
eG1sMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMAhQEDBAHKGK4wDQYJKoZI
hvcNAQELBQADggEBAFvB/+uFl0/I8IbT9yjZubDM/n9OFcb4FM3czvVE7+OuPkpJ
wvW//kVJYKJav8G3iOZwxZYjCbAtSfviywL2FhW/Y9hMkR6H+XCJw8sQsajOsl4q
XC+kPkIkWVscV1wgg464El7XG2fOo+4btcsW7MaKiGY+MwIaWYZYwZHxfzYsWBsM
mzXPE6sgMtoMkoCUy5sV4xVBgTYUbiNH1SvUOsvEWM9BOZhcMDnBdZGDCg+f+v/V
G6iqreqSBWmblB1a8UYvWa7g/Nr61Kmw7W+dCC6mDCw0JwCtI8ZvxWEK2Z8aGMHw
SiA2mPQp8WAhgWmMKOprwmNX53mRgZr+3eTEtKI=
-----END CERTIFICATE-----
Generated at Mon Sep 21 07:19:50 2026 by rpki-client