
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/lMLwvhgAiadZPZ7TfQToUu1aJZo.cer
File: lMLwvhgAiadZPZ7TfQToUu1aJZo.cer (raw, json)
Hash identifier: zQHVXvGuB9855KafJat80D4KFii/1E4khtxDclnOKUE=
Subject key identifier: 94:C2:F0:BE:18:00:89:A7:59:3D:9E:D3:7D:04:E8:52:ED:5A:25:9A
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 6748
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/lMLwvhgAiadZPZ7TfQToUu1aJZo.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Wed 15 Apr 2026 01:39:36 +0000
Certificate not after: Thu 15 Apr 2027 01:30:02 +0000
Subordinate resources: IP: 103.157.156.0/23
IP: 202.79.240.0/21
IP: 210.134.128.0 -- 210.134.147.255
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:46:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26440 (0x6748)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Apr 15 01:39:36 2026 GMT
Not After : Apr 15 01:30:02 2027 GMT
Subject: CN=94C2F0BE180089A7593D9ED37D04E852ED5A259A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:90:b3:58:29:47:a3:0d:dc:76:19:de:86:11:
06:1c:78:a7:99:e6:b0:39:77:37:1e:69:db:37:5f:
bc:85:47:45:01:78:46:17:fe:29:6f:8d:6f:a9:dc:
37:38:1e:9d:90:e2:f3:7e:c8:29:62:f8:11:4a:b0:
a1:1b:2d:dd:87:fa:02:70:63:4a:ef:ed:d5:c1:5c:
1c:7e:df:97:f0:c4:95:c8:e2:9e:97:5e:03:36:6a:
73:ce:8c:a5:89:ee:08:4e:f1:8f:74:0b:8f:ec:37:
88:fa:bb:a1:bb:49:2c:e0:fa:0d:f5:dc:b7:9b:0d:
1e:2b:d6:39:70:cb:9d:9f:09:ce:7e:f7:ad:03:78:
32:a2:24:6a:0c:69:6d:95:ba:69:38:be:ca:6b:a4:
7b:41:b8:dc:d2:0a:af:a9:ec:60:f9:ad:2d:0d:da:
88:3f:e9:91:67:07:d0:75:0f:20:2b:4e:00:f8:10:
b2:43:fd:14:16:94:ed:a5:25:11:9b:7f:75:31:17:
a6:a9:dd:c1:e9:9b:a6:18:c6:2d:a4:b2:8f:3d:01:
3b:61:5f:aa:4c:18:ba:a1:5d:96:a1:96:de:7f:6c:
7f:a3:24:0d:cb:2f:e4:92:6c:32:8a:9e:b5:58:cf:
1d:2d:fc:34:fe:33:56:37:3b:66:fb:25:02:5c:b1:
61:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C2:F0:BE:18:00:89:A7:59:3D:9E:D3:7D:04:E8:52:ED:5A:25:9A
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/lMLwvhgAiadZPZ7TfQToUu1aJZo.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.157.156.0/23
202.79.240.0/21
210.134.128.0-210.134.147.255
Signature Algorithm: sha256WithRSAEncryption
62:6f:b0:25:74:9f:c3:4c:df:c4:85:0d:b1:8f:ca:f4:5d:e3:
b6:1d:09:8e:c8:0d:7f:08:c4:09:42:b3:88:85:2e:30:3f:0b:
ff:d4:c2:14:f6:68:70:b8:bb:d9:7c:68:18:d6:98:aa:23:d1:
9b:fe:4c:dc:92:e9:56:cd:1d:d1:8d:2f:57:c7:74:f3:46:32:
ad:b5:b2:70:1e:5b:f8:6f:a2:08:6a:48:78:d8:b9:e8:11:c8:
98:95:87:db:f0:74:58:65:89:5e:53:87:14:a7:7b:8c:24:51:
78:e9:16:ac:88:c4:d9:53:c3:27:ee:c4:82:9a:d0:4d:09:47:
c3:3e:df:1a:7b:d9:02:ce:02:fa:44:77:62:84:0e:1e:c5:9a:
9c:4b:16:05:96:0d:22:ef:39:8a:68:fa:ee:4a:d3:3b:e8:50:
0e:b3:1d:15:86:32:14:e4:23:6a:77:73:46:a0:bf:52:b5:ee:
df:dc:78:6c:65:97:39:a6:87:5d:38:c2:01:0e:56:0c:2a:b2:
38:89:9c:b3:13:1d:1e:35:bd:58:7b:f1:3b:d9:38:85:02:90:
58:4e:c2:0a:47:bd:cf:73:45:de:0d:c5:f6:27:7d:84:dc:fd:
3b:51:57:e8:c6:0c:ad:3d:2b:64:48:bb:03:49:0b:2f:b8:2e:
76:70:0e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 23:55:04 2026 by rpki-client