
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/cTGT1wLDEiEU983oH9WlhnJyD4Q.cer
File: cTGT1wLDEiEU983oH9WlhnJyD4Q.cer (raw, json)
Hash identifier: 9HQbJm2wAgUqUfCIV2bmTFGJNRmIrVnXM2foZeDo9KI=
Subject key identifier: 71:31:93:D7:02:C3:12:21:14:F7:CD:E8:1F:D5:A5:86:72:72:0F:84
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 6323
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10694/cTGT1wLDEiEU983oH9WlhnJyD4Q.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10694/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Sun 15 Feb 2026 01:40:20 +0000
Certificate not after: Mon 15 Feb 2027 01:30:02 +0000
Subordinate resources: IP: 101.50.60.0/22
IP: 101.53.104.0/21
IP: 103.208.96.0/22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 05:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25379 (0x6323)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Feb 15 01:40:20 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=713193D702C3122114F7CDE81FD5A58672720F84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b4:f3:ea:aa:54:ea:71:ef:75:55:c0:b8:f9:
17:eb:ce:ff:11:43:da:27:d4:0b:a0:ad:16:98:78:
f0:e0:ca:5a:cb:a4:37:bd:92:55:84:8a:46:18:15:
d3:63:91:1e:4f:0e:00:41:bd:2d:94:e8:1c:11:83:
32:1f:b9:b6:92:a7:09:10:8c:24:d3:f8:a6:f8:05:
bc:ed:6a:72:43:05:2b:45:d2:e0:c4:e1:f1:dd:a6:
f7:ba:02:1a:c4:78:b4:62:6b:0e:47:e1:81:dd:f0:
d5:65:7d:38:c6:4c:ab:12:6e:ce:e0:c6:e3:94:70:
e2:ca:8b:30:63:e2:b0:25:4e:5f:2a:23:ca:34:be:
ea:a0:13:6d:a4:99:34:b1:59:1f:11:57:b9:8e:63:
27:38:23:62:0d:9b:5e:e2:67:5c:1f:6d:85:95:9d:
33:11:59:47:08:28:31:07:aa:0a:02:b8:df:61:bb:
8b:0d:5a:a4:19:82:2d:41:da:e9:3e:6b:59:80:f6:
fb:fd:a8:25:a1:db:be:3a:65:b9:f4:e7:3b:eb:0a:
a6:7c:e8:1c:e9:06:8e:12:51:9f:fa:94:91:db:cc:
01:a8:a1:5d:83:92:a7:77:24:bc:95:83:b0:29:d1:
e2:1d:e7:05:e5:94:60:be:6c:bf:4c:63:be:d4:b1:
67:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:31:93:D7:02:C3:12:21:14:F7:CD:E8:1F:D5:A5:86:72:72:0F:84
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10694/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10694/cTGT1wLDEiEU983oH9WlhnJyD4Q.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
101.50.60.0/22
101.53.104.0/21
103.208.96.0/22
Signature Algorithm: sha256WithRSAEncryption
18:24:07:84:bf:8b:41:5a:e3:02:8e:ac:d4:89:39:4b:2d:74:
2b:20:3e:25:8a:53:33:b6:67:cf:f8:22:e3:c2:00:a7:02:81:
db:32:6b:a2:a1:df:45:56:32:3b:03:26:78:db:db:d7:07:60:
96:34:7b:bc:5e:61:bf:97:7d:0b:55:5f:0f:c3:e0:c0:8c:ce:
fe:d3:b9:06:9d:25:c7:c3:e3:9a:08:9b:89:2a:d2:0d:36:71:
2a:1e:58:9d:8f:db:21:0a:a9:d6:4f:4e:65:f8:88:cb:b1:3d:
c1:b4:1a:c1:1e:61:0d:53:c3:15:2a:49:8b:4b:ee:85:04:d0:
7c:97:ef:bf:69:eb:9d:7b:de:0e:6a:bf:36:21:0f:47:1a:02:
66:02:66:77:61:6d:ef:6d:1f:f4:b2:b1:b1:32:18:93:29:d3:
cc:41:ca:b1:ae:3a:d7:94:14:f4:6c:fa:7a:c8:ac:6b:2c:42:
bd:3b:dd:f8:95:0b:0e:eb:92:3b:ea:89:ee:f8:e0:2d:a0:79:
2f:0c:f2:0d:f6:ab:30:eb:e3:83:63:b1:49:48:6e:4d:4a:5d:
29:9c:f1:14:32:92:72:5e:13:66:ca:32:5f:0d:85:7c:f5:c1:
41:ee:e9:04:94:04:12:ac:87:3e:2b:32:8d:10:e0:77:18:0b:
f0:6f:bb:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:04:34 2026 by rpki-client