
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/hKujeIkYZIXdYwas0wAR8a4F8EI.cer
File: hKujeIkYZIXdYwas0wAR8a4F8EI.cer (raw, json)
Hash identifier: yLUwFMxYXxXM4CP++XSKSrwJ32+duwL+zRezeOlJQ5Y=
Subject key identifier: 84:AB:A3:78:89:18:64:85:DD:63:06:AC:D3:00:11:F1:AE:05:F0:42
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 7413
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30458/hKujeIkYZIXdYwas0wAR8a4F8EI.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30458/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Thu 15 Oct 2026 01:34:51 +0000
Certificate not after: Fri 15 Oct 2027 01:30:02 +0000
Subordinate resources: IP: 2402:54a0::/32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 17 Nov 2026 06:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29715 (0x7413)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Oct 15 01:34:51 2026 GMT
Not After : Oct 15 01:30:02 2027 GMT
Subject: CN=84ABA37889186485DD6306ACD30011F1AE05F042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:23:9a:03:fb:61:0b:45:f3:bd:d0:44:14:8c:
ee:fa:21:90:aa:f7:c5:3d:1d:09:bf:d3:7c:8e:79:
0a:0e:19:bf:a1:e9:c0:6e:ed:70:d8:3b:aa:ac:d8:
ea:31:5e:2c:44:a0:a4:08:fb:f1:b0:4b:77:3a:6f:
b9:29:19:48:8b:bd:93:a1:21:c2:5f:7c:d3:94:cb:
04:ec:b1:80:61:43:4b:3f:98:a5:52:fb:2d:2b:d3:
68:2a:58:9d:59:fb:7a:90:78:72:68:d4:8b:88:36:
52:02:6c:5a:5c:b6:e2:b0:64:00:5f:10:1c:eb:6f:
ae:c9:0f:fb:c1:d6:51:90:46:f5:61:21:03:31:dd:
64:f1:e7:d8:5c:3f:0a:1e:75:80:b9:d3:39:a8:31:
d6:24:60:76:44:ce:5f:0b:41:70:93:21:8f:4e:fd:
8b:64:ac:de:08:3f:44:f3:f7:c9:f8:13:1d:0b:87:
61:2d:9a:af:04:ec:83:3e:5f:96:17:fd:ba:9b:77:
50:0b:0a:0b:fc:3a:a4:84:d6:f7:48:88:73:80:82:
f8:37:e1:17:49:4e:17:0a:5f:b8:ec:0f:88:4d:4c:
b9:7f:8d:ac:0b:a6:3f:7c:4f:00:54:40:f8:6c:4d:
d6:47:dc:af:76:89:66:fb:92:70:35:d6:7c:58:be:
ed:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:AB:A3:78:89:18:64:85:DD:63:06:AC:D3:00:11:F1:AE:05:F0:42
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30458/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30458/hKujeIkYZIXdYwas0wAR8a4F8EI.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:54a0::/32
Signature Algorithm: sha256WithRSAEncryption
4f:37:80:61:72:33:96:1d:98:fc:2b:6f:1b:31:40:1b:3b:72:
c3:5a:dc:57:f7:33:d1:e6:1d:c3:ab:bc:73:0b:bf:2e:69:e4:
51:05:7a:aa:79:27:94:63:4d:b7:33:82:93:b8:8b:cf:25:4e:
70:17:02:7b:7f:f3:6f:d9:af:e4:f8:6d:f0:2f:f2:da:81:d6:
f9:c0:09:78:94:5d:3c:aa:e8:8e:0f:3b:3c:86:93:3e:30:8c:
45:32:ac:5f:c7:71:21:ff:00:dd:6d:41:d1:e3:f2:52:7a:49:
95:3d:56:56:ea:83:0e:9d:71:01:77:83:f2:5d:a8:23:47:df:
fa:c6:8d:b3:d6:3b:2e:f8:89:43:d3:3d:0d:88:b3:55:3d:d7:
77:70:44:6e:c4:d2:02:72:fd:b0:ca:68:7e:1c:59:5a:69:e1:
95:73:3e:58:b1:66:86:d2:47:6a:11:57:90:d9:98:1c:e3:3d:
d4:2d:a0:19:ff:1b:fe:ac:8d:c9:66:55:28:51:76:80:f1:a4:
1e:e9:94:6c:30:3e:32:c7:93:d9:73:37:98:0f:53:a5:8d:0d:
06:d0:b1:a4:9b:52:03:11:d3:a2:d6:8e:70:6e:cb:5c:32:3a:
8c:d0:3c:e1:4c:0a:74:ec:cc:9b:b9:eb:d3:a2:00:b7:97:72:
f6:1f:1e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 08:48:30 2026 by rpki-client