
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/oZSoPJxvQE959c3rjP4RR_VPIeA.cer
File: oZSoPJxvQE959c3rjP4RR_VPIeA.cer (raw, json)
Hash identifier: SASCxv/HjCPaUWKE11JeKceH2SoSbPmf+g6W+Hvzoco=
Subject key identifier: A1:94:A8:3C:9C:6F:40:4F:79:F5:CD:EB:8C:FE:11:47:F5:4F:21:E0
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 6763
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30058/oZSoPJxvQE959c3rjP4RR_VPIeA.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30058/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Wed 15 Apr 2026 01:40:39 +0000
Certificate not after: Thu 15 Apr 2027 01:30:02 +0000
Subordinate resources: IP: 2001:f58::/32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:41:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26467 (0x6763)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Apr 15 01:40:39 2026 GMT
Not After : Apr 15 01:30:02 2027 GMT
Subject: CN=A194A83C9C6F404F79F5CDEB8CFE1147F54F21E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:07:fe:9c:da:33:e0:f1:f3:a0:f3:28:ea:5b:
80:85:99:14:8d:61:fb:5a:4d:ec:dd:ee:80:00:88:
f4:ce:ea:98:43:e4:49:66:95:1c:a0:28:53:4d:af:
11:7c:d0:53:17:06:1f:03:43:58:5f:17:25:54:df:
ad:fc:92:01:9f:a5:17:58:76:1d:80:38:df:a4:79:
ee:70:66:6b:56:06:ec:dd:ee:61:15:32:4d:d8:28:
ae:bb:33:16:1a:85:06:7e:f8:c7:b8:48:cf:eb:a4:
87:7c:bd:5d:0e:bc:75:90:74:e3:36:59:cd:58:c0:
23:6d:05:3e:c7:74:6c:c1:66:52:a5:11:14:27:99:
89:ac:5e:ab:dd:c4:27:4b:e6:c9:e9:b6:18:b2:ca:
19:7c:cb:26:f7:4f:7c:72:b1:34:cc:35:2c:8e:d0:
ce:58:29:aa:af:35:81:5e:e5:34:b8:40:4d:96:12:
ea:5b:6c:9b:db:20:d2:00:97:55:e0:39:59:02:c2:
84:b6:c9:9b:01:9b:55:02:22:b7:c7:eb:e8:73:b0:
1e:96:00:3b:10:0c:5d:72:4d:45:5c:e8:a7:b2:f4:
38:c0:3d:02:05:f9:b9:5b:0e:ac:34:e2:b4:dc:fc:
c5:df:1c:0a:88:eb:e3:a2:9c:ea:08:e2:f5:dc:e7:
95:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:94:A8:3C:9C:6F:40:4F:79:F5:CD:EB:8C:FE:11:47:F5:4F:21:E0
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30058/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30058/oZSoPJxvQE959c3rjP4RR_VPIeA.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:f58::/32
Signature Algorithm: sha256WithRSAEncryption
97:63:60:ca:43:57:6e:31:72:0d:40:4f:05:1e:3c:dd:54:4e:
8d:a6:86:25:71:26:e1:b5:32:cf:86:e7:07:5d:8d:2e:e6:3c:
14:ee:24:3f:30:1c:e5:ca:de:c2:4a:2d:54:ca:75:13:d8:8c:
3c:81:c6:8b:15:35:3e:dd:c7:33:ee:63:d0:06:d7:78:58:79:
90:5f:d5:eb:f3:57:85:e2:bd:0f:92:b6:e9:3e:c7:71:0a:d6:
13:b5:7d:ad:03:94:ec:09:18:03:56:4b:5e:f8:44:b3:26:b9:
51:56:cd:02:e4:ba:0e:08:2f:f7:55:dd:e5:84:4c:76:93:6b:
9e:71:86:94:67:00:10:59:82:9d:46:e2:6f:4d:49:c9:53:0c:
02:b2:6e:d3:6b:d5:7e:fa:d9:e4:b0:8e:d4:32:09:3c:c9:8a:
96:db:8f:71:ef:ff:d1:4d:a0:74:f9:d9:04:0b:65:5d:6f:e0:
c9:f7:be:f6:8b:3a:78:8d:a1:ac:a3:07:a8:a7:d1:be:e6:b8:
2c:18:d5:22:61:32:8a:39:f9:1f:fb:f1:51:50:e9:66:ef:63:
78:c7:9c:eb:37:b4:76:3f:af:4f:6b:ae:91:bd:bf:3f:cc:27:
2d:b3:21:88:83:f7:b1:01:2d:bb:97:6b:73:12:a3:e6:82:9d:
9b:3e:91:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:21:22 2026 by rpki-client