
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/a_hS5EtwhnYrT-CLfQpcVeFR-Qo.cer
File: a_hS5EtwhnYrT-CLfQpcVeFR-Qo.cer (raw, json)
Hash identifier: qHQHa0noVDr5Z7oWHnCr0aIPpqrAujBgt1X+qKg+kiw=
Subject key identifier: 6B:F8:52:E4:4B:70:86:76:2B:4F:E0:8B:7D:0A:5C:55:E1:51:F9:0A
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 752A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
CRL Distribution Point: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1454/a_hS5EtwhnYrT-CLfQpcVeFR-Qo.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1454/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Thu 15 Oct 2026 01:40:55 +0000
Certificate not after: Fri 15 Oct 2027 01:30:02 +0000
Subordinate resources: IP: 133.64.0.0/16
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 14:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29994 (0x752a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Oct 15 01:40:55 2026 GMT
Not After : Oct 15 01:30:02 2027 GMT
Subject: CN=6BF852E44B7086762B4FE08B7D0A5C55E151F90A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b9:6e:eb:0c:03:0e:1f:da:ca:e3:c7:3f:e4:
78:af:6f:8f:07:a7:7f:dc:f3:7e:e0:82:e1:52:6d:
7f:02:be:35:dd:ca:b6:ce:8e:0a:60:95:fc:c3:6f:
32:49:55:55:dc:e6:11:35:05:3d:ea:26:97:65:26:
29:64:39:c8:db:72:c7:39:89:47:6d:73:56:b3:85:
f7:35:38:8d:f9:78:47:63:b0:8c:f3:a1:6e:bd:fb:
f5:20:33:31:57:f4:ca:0f:34:27:d5:13:f1:84:c1:
1d:cd:3f:70:67:52:d2:90:44:65:2d:4a:40:6e:4e:
df:ee:94:5b:77:0b:28:d5:a0:28:93:f3:d0:e8:af:
bf:95:51:f0:5a:aa:1c:ad:60:28:cb:89:d3:dd:83:
cf:63:81:98:60:86:9a:05:73:9b:af:9b:29:9a:77:
a9:4e:0c:2b:09:f9:0f:2a:65:49:d9:e9:ac:29:23:
0c:2c:60:28:df:27:ad:86:d7:4c:d6:49:23:13:b9:
46:19:e4:80:36:e6:fe:64:54:ef:86:50:a9:d5:8d:
db:97:8d:31:9a:18:fa:60:20:0f:b6:63:89:7f:c8:
7d:47:59:77:41:67:9a:d6:f4:62:af:f7:8b:e4:f5:
f5:a7:8c:d2:d0:b6:a4:f6:7e:6e:ba:09:ec:ce:5f:
8a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F8:52:E4:4B:70:86:76:2B:4F:E0:8B:7D:0A:5C:55:E1:51:F9:0A
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1454/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1454/a_hS5EtwhnYrT-CLfQpcVeFR-Qo.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
133.64.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a3:a2:c7:8f:a1:c9:ea:66:68:e4:df:ab:bd:ef:f2:dd:63:ed:
f5:4c:0b:0f:93:38:3e:72:70:55:53:61:03:e8:0f:4e:9a:94:
00:d4:79:34:5e:83:b5:c4:2d:11:17:f8:c9:19:89:0e:23:66:
00:82:94:f8:71:0b:f6:62:3b:e7:91:46:d6:f8:30:90:47:3d:
e7:fd:37:4d:a1:b5:5d:cb:97:fe:7f:e0:35:64:21:16:c5:c5:
69:44:55:75:6e:e6:29:a4:87:d3:00:ce:b9:87:69:e3:8e:72:
db:a1:ca:45:22:d0:96:7a:84:14:6e:53:3c:99:83:86:9d:0d:
cf:3d:8b:f8:2d:5d:44:bb:6b:3a:d5:5a:ba:de:e1:6d:04:23:
ce:83:00:d3:36:4e:3a:ba:01:70:c8:94:a6:c2:9c:90:73:96:
bc:71:55:55:e7:c6:48:7f:6a:c1:03:bc:4a:37:c1:e7:94:39:
4d:ad:cc:9c:22:86:95:79:23:7a:ed:ec:e0:12:bd:67:c7:76:
d2:97:b8:23:cc:06:fe:fa:4e:f9:99:5f:31:56:0a:83:f6:e8:
b8:62:62:45:6b:80:31:db:c4:c8:55:4c:7c:1a:9f:01:50:3b:
97:5c:f6:57:54:48:0e:e3:2a:56:fe:27:b0:6c:62:0f:9b:fa:
ed:08:4a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 23:31:28 2026 by rpki-client