
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/Q5g3rZPZJHHiAk0G7P3K7o9k0cM.cer
File: Q5g3rZPZJHHiAk0G7P3K7o9k0cM.cer (raw, json)
Hash identifier: LCLPQsUHcV6AEXcyNfcMBMBUvyvnasspqY2FXmhVP1g=
Subject key identifier: 43:98:37:AD:93:D9:24:71:E2:02:4D:06:EC:FD:CA:EE:8F:64:D1:C3
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 727C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30371/Q5g3rZPZJHHiAk0G7P3K7o9k0cM.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30371/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Tue 15 Sep 2026 01:38:37 +0000
Certificate not after: Wed 15 Sep 2027 01:30:02 +0000
Subordinate resources: IP: 2406:e240::/32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:22:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29308 (0x727c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Sep 15 01:38:37 2026 GMT
Not After : Sep 15 01:30:02 2027 GMT
Subject: CN=439837AD93D92471E2024D06ECFDCAEE8F64D1C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d6:44:ec:b6:3b:8c:dc:5b:00:c0:8b:57:33:
06:ed:dc:f1:6d:31:bd:39:b4:32:b5:91:9f:73:e8:
84:71:a1:c4:93:25:03:b5:50:6a:21:0f:5d:07:7c:
58:8f:13:dd:ff:88:ed:f9:ba:2a:81:00:17:d4:38:
70:52:13:73:22:8a:b8:71:4b:e7:73:ff:c1:b3:7b:
71:cf:0b:f1:0e:c0:0a:62:0f:6b:b4:cd:dd:73:6f:
e8:42:9d:af:2f:1f:54:c1:44:15:b9:03:83:23:3e:
fa:62:7c:81:e7:6b:0d:bc:eb:54:ff:48:cb:81:93:
bb:c1:8a:18:b9:d6:0e:90:68:d1:ad:59:a9:2e:6a:
72:7a:f5:36:1b:19:ec:ac:56:65:b9:ed:7b:be:aa:
dc:04:7a:06:67:78:38:20:bb:3a:88:56:16:2a:30:
88:76:99:b6:ca:e6:b3:32:e2:0b:31:86:ae:24:17:
e5:f2:a7:21:aa:22:4d:4c:0f:52:04:82:43:d3:31:
62:ad:65:43:38:48:44:cc:37:84:9e:6e:1c:95:d4:
85:44:74:1e:ee:27:eb:ce:63:10:48:5f:2f:76:12:
5f:fb:77:1b:c2:bc:b5:64:96:22:7f:1a:69:04:7f:
8a:3c:8c:43:d6:51:09:06:ce:d2:14:56:76:84:7b:
7f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:98:37:AD:93:D9:24:71:E2:02:4D:06:EC:FD:CA:EE:8F:64:D1:C3
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30371/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30371/Q5g3rZPZJHHiAk0G7P3K7o9k0cM.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:e240::/32
Signature Algorithm: sha256WithRSAEncryption
18:f3:47:9b:2d:ce:8e:96:6a:c3:cb:15:53:17:4c:fc:22:97:
60:36:3b:f7:eb:1d:7a:33:14:10:fd:64:58:92:13:99:2e:cd:
9c:dc:9c:28:22:ab:88:e7:87:7f:d4:e7:27:b8:33:29:14:5a:
bf:db:12:b9:79:5d:1b:18:18:bd:b3:47:c8:65:54:ce:cc:61:
94:de:22:f0:4a:92:cc:93:6f:23:ce:d8:0d:a6:5f:d6:30:05:
32:68:18:e2:01:58:90:0e:3e:6f:56:6c:ac:0b:af:86:31:50:
f4:2e:71:eb:9d:2c:3f:0a:7e:f9:d3:cf:0f:6f:54:9b:ee:33:
f9:24:a8:c8:12:df:13:87:3b:e0:8d:18:08:be:06:02:7e:df:
32:ca:fc:ec:c1:c6:4d:b8:b6:4e:54:e0:eb:64:17:0a:a1:ac:
c6:f0:2a:c1:8f:e4:11:ac:17:27:31:61:18:52:c0:d8:75:44:
2b:e1:1e:df:62:63:9e:c2:8e:59:fe:9d:2a:46:34:80:a3:e0:
5a:e9:82:35:76:77:bf:d6:af:9c:d8:73:47:0c:50:f0:7e:14:
7c:3e:5a:52:5b:71:a3:de:75:9c:65:fb:94:77:69:3b:c8:0f:
4e:0a:e6:8b:0e:03:8c:ad:1d:35:7d:7a:a8:fa:57:4c:a8:72:
f7:97:13:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:50:34 2026 by rpki-client