
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/n-sQXGfl_VyeGv0Go0PIQfBafxU.cer
File: n-sQXGfl_VyeGv0Go0PIQfBafxU.cer (raw, json)
Hash identifier: SEx3YdExnlLnAkGgisjEUfN4Y+YrjYgTFd6xSGBRPBo=
Subject key identifier: 9F:EB:10:5C:67:E5:FD:5C:9E:1A:FD:06:A3:43:C8:41:F0:5A:7F:15
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 716E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/n-sQXGfl_VyeGv0Go0PIQfBafxU.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Tue 15 Sep 2026 01:33:09 +0000
Certificate not after: Wed 15 Sep 2027 01:30:02 +0000
Subordinate resources: IP: 210.158.176.0/22
IP: 210.158.181.0 -- 210.158.191.255
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 04:45:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29038 (0x716e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Sep 15 01:33:09 2026 GMT
Not After : Sep 15 01:30:02 2027 GMT
Subject: CN=9FEB105C67E5FD5C9E1AFD06A343C841F05A7F15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:83:96:7c:6a:27:9a:b8:1d:9b:15:ba:b7:01:
ed:ad:8f:84:8b:d7:dc:46:b2:e7:77:e4:67:22:27:
8c:ed:2e:4e:b5:36:cd:e9:d5:09:8a:26:79:1e:25:
2f:bd:cc:7f:c4:f5:85:01:2e:d9:d9:87:40:c9:20:
8d:1f:e1:9d:83:f0:23:0e:c9:51:61:61:35:0f:41:
f4:88:e6:5c:78:39:ec:db:0d:bf:ef:a0:77:99:13:
c4:42:9f:55:b2:66:f7:f3:07:61:70:a5:9f:09:95:
c0:e0:c7:34:53:a5:c4:23:15:c2:2d:95:06:b0:2f:
a9:da:5a:d9:a1:a9:c0:b5:4d:d8:64:63:1b:0d:58:
c9:74:8e:2a:4d:81:c3:b8:0c:35:05:a1:bb:d4:c4:
20:c7:0d:38:b7:90:bd:52:58:91:66:da:5b:15:bf:
87:3b:52:68:62:99:e8:bc:72:df:e6:79:94:89:18:
30:e6:4b:8e:47:c6:0b:19:17:9c:44:e9:4e:e6:c7:
dc:6c:bc:88:39:08:a7:98:ee:e7:02:09:b5:bc:ef:
7e:7b:72:6e:34:df:66:26:81:c7:e4:2f:d2:b1:af:
f7:cb:e0:f4:d6:2c:80:5f:d9:e9:25:aa:54:61:93:
81:64:5d:d1:3a:4b:a4:82:a3:f2:3a:13:55:79:62:
6d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:EB:10:5C:67:E5:FD:5C:9E:1A:FD:06:A3:43:C8:41:F0:5A:7F:15
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/n-sQXGfl_VyeGv0Go0PIQfBafxU.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.158.176.0/22
210.158.181.0-210.158.191.255
Signature Algorithm: sha256WithRSAEncryption
0f:e6:3c:2d:72:ea:81:93:1c:2f:cc:37:ee:a8:e2:f1:eb:90:
07:35:78:7c:3b:ae:c1:ad:28:59:66:d8:ba:52:97:54:d5:70:
0c:0c:4d:f5:e1:99:dc:46:2d:7f:97:54:7d:c9:59:cb:82:df:
d5:5e:86:5c:e9:d4:d1:a0:67:4e:56:05:cb:47:1b:90:e4:4f:
78:54:44:76:88:43:a2:56:1b:76:ac:55:ec:a1:a0:ef:2f:92:
23:bd:b2:bd:b7:ce:f6:b9:04:8c:e6:da:c8:9f:82:b0:29:c2:
81:46:b8:33:38:0f:d4:f2:b2:33:c5:47:12:ef:72:a1:08:d8:
eb:81:ea:4d:c1:6a:e8:fb:fa:60:a7:22:9e:83:41:c5:c5:40:
3e:09:d1:8b:af:00:c6:22:7a:59:f7:26:bc:b5:e9:6d:11:fd:
2b:7a:0d:01:32:c9:cd:7a:65:86:fc:17:1d:33:9d:82:47:15:
72:38:f7:cf:a8:18:5a:44:d0:c8:3c:03:50:9d:34:e6:ae:0b:
84:f3:b0:85:cf:71:13:2c:6a:de:31:23:83:dc:ec:f5:ef:73:
61:2e:3c:6e:34:7a:50:c2:43:75:a0:1d:59:66:a9:8d:3c:69:
32:dd:38:73:35:50:82:f2:67:f5:9d:87:23:83:9d:95:7f:b7:
91:01:b6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 08:41:11 2026 by rpki-client