
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/ZucEA40iZbWxXlutGWvZw5D0Chc.cer
File: ZucEA40iZbWxXlutGWvZw5D0Chc.cer (raw, json)
Hash identifier: 28eT9m28gfnvXV6MGG282g78tRZGdUAbQyF/lZaKzZ0=
Subject key identifier: 66:E7:04:03:8D:22:65:B5:B1:5E:5B:AD:19:6B:D9:C3:90:F4:0A:17
Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2
Certificate issuer: /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2
Certificate serial: 17FD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20295/ZucEA40iZbWxXlutGWvZw5D0Chc.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20295/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Tue 15 Sep 2026 01:35:24 +0000
Certificate not after: Wed 15 Sep 2027 01:30:02 +0000
Subordinate resources: IP: 162.4.26.0/23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:08:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6141 (0x17fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2
Validity
Not Before: Sep 15 01:35:24 2026 GMT
Not After : Sep 15 01:30:02 2027 GMT
Subject: CN=66E704038D2265B5B15E5BAD196BD9C390F40A17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c1:ed:a5:7b:b9:f5:99:da:c7:03:16:ef:1e:
1c:6e:3c:ae:34:1e:e9:aa:85:44:29:97:a0:8b:e4:
2f:77:26:7b:0a:71:d4:c9:e2:a6:bd:8f:f5:f9:24:
a4:e9:cc:9a:72:2e:d8:17:59:f7:0a:4b:4b:c1:59:
97:e9:d4:b9:32:01:7e:e6:91:19:c7:bb:b1:cf:f6:
9f:ec:3d:6a:56:d3:20:10:21:63:bd:51:4e:60:54:
32:a2:87:c4:22:3e:0f:ac:86:2e:85:8c:fa:f5:0d:
15:e5:cd:54:4b:0a:56:55:02:05:07:2e:c6:97:12:
ab:3f:b9:4f:28:d5:05:6b:46:fb:a5:70:b6:c4:24:
b5:e2:d5:c2:63:f1:cb:96:9a:e7:28:66:dc:7c:70:
e1:e6:9e:34:16:2c:6a:a8:e3:22:49:23:f3:bd:62:
d7:77:31:44:14:88:17:cf:8e:af:4c:44:9a:d8:9d:
8c:da:29:b5:a8:bc:eb:e9:9e:0a:08:d1:a8:aa:dd:
c1:29:1b:14:36:67:f3:83:f7:b2:72:b8:3f:7e:b6:
64:63:97:97:da:54:36:ed:74:25:2b:36:fd:9e:69:
b8:83:b1:36:e4:24:5f:17:73:0c:62:d6:65:b7:26:
30:9f:18:e1:41:26:2f:94:11:c4:d6:be:e4:b7:5a:
9b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E7:04:03:8D:22:65:B5:B1:5E:5B:AD:19:6B:D9:C3:90:F4:0A:17
X509v3 Authority Key Identifier:
keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20295/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20295/ZucEA40iZbWxXlutGWvZw5D0Chc.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
162.4.26.0/23
Signature Algorithm: sha256WithRSAEncryption
09:26:16:17:e8:c5:a8:47:f6:c1:2f:2d:a3:f8:bb:4a:65:b7:
c1:45:81:e5:6b:d8:3f:44:1b:73:47:55:7a:d2:2b:9e:52:f4:
30:b2:9f:2f:e4:f9:52:82:c9:f0:2f:00:cf:0f:c3:51:22:d2:
4a:b8:e3:e1:f9:13:17:b3:9a:0a:fc:38:ca:b0:0f:19:93:e3:
be:72:25:86:23:5a:96:7c:0d:6c:a2:d2:9b:88:41:3d:0f:78:
b2:0b:c9:b9:e7:77:48:12:08:ba:af:19:d6:48:bb:96:e6:2f:
fd:75:ee:29:0e:95:17:b1:d0:6c:b8:c7:2c:48:6c:b0:7c:dd:
38:ae:c8:25:2a:86:ba:09:d1:10:52:41:e5:91:92:9c:b0:08:
39:93:9b:f5:6a:32:d4:f5:75:eb:76:19:9a:87:16:44:5b:c2:
cf:29:1c:f2:88:c5:24:e4:9c:ac:05:cf:06:fd:dc:52:b6:df:
d5:77:ec:54:0c:b3:e9:ec:5a:9c:7b:46:5f:55:d5:3b:b1:a0:
2b:7e:fb:08:5f:79:00:1f:14:60:70:e4:6c:d9:dc:91:53:38:
db:09:1d:fe:14:b7:98:9b:09:da:f8:97:2c:e9:3d:a9:d8:4a:
8d:9d:98:6f:19:3f:99:1b:c8:c7:af:13:a0:1f:e6:ee:d8:6f:
b8:26:e9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:28:21 2026 by rpki-client