Certificate
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/r9pCs33H7YSvcxq16vA4KnmdSXw.cer
File: r9pCs33H7YSvcxq16vA4KnmdSXw.cer (raw, json)
Hash identifier: IQaby1etNVfsjgcWHH16zdnhSVmkRyd6kmlwg96gadk=
Subject key identifier: AF:DA:42:B3:7D:C7:ED:84:AF:73:1A:B5:EA:F0:38:2A:79:9D:49:7C
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 70FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/r9pCs33H7YSvcxq16vA4KnmdSXw.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Tue 15 Sep 2026 01:30:18 +0000
Certificate not after: Wed 15 Sep 2027 01:30:02 +0000
Subordinate resources: IP: 103.3.0.0/22
IP: 103.54.156.0/22
IP: 103.141.96.0/23
IP: 120.136.8.0/21
IP: 153.115.0.0/16
IP: 175.28.4.0/22
IP: 183.90.224.0/19
IP: 183.181.78.0 -- 183.181.99.255
IP: 202.210.8.0/24
IP: 202.226.36.0/22
IP: 202.233.64.0/22
IP: 202.237.154.0/24
IP: 202.240.141.0/24
IP: 202.254.232.0/21
IP: 210.131.208.0/20
IP: 210.157.78.0/23
IP: 220.158.16.0/20
IP: 222.228.0.0/20
IP: 222.228.64.0/20
IP: 223.27.68.0/22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 08:56:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28923 (0x70fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Sep 15 01:30:18 2026 GMT
Not After : Sep 15 01:30:02 2027 GMT
Subject: CN=AFDA42B37DC7ED84AF731AB5EAF0382A799D497C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:af:3b:77:b1:72:f8:c7:f2:ad:ed:c2:38:2c:
ad:3a:a3:d8:ac:1a:df:09:64:32:9b:8b:4d:e5:c0:
d2:cc:7e:73:2c:d5:e7:af:9b:32:19:d2:02:7f:cf:
85:e0:87:eb:07:52:a7:78:e4:e5:53:90:bd:89:19:
42:bf:0c:0a:55:62:a0:9d:22:12:60:8b:be:0f:ac:
aa:59:e5:34:cd:61:b7:b5:d0:c0:cb:b3:df:98:0e:
89:1f:e8:4d:97:0d:43:87:3d:34:45:93:a5:fd:8d:
bc:91:53:91:33:5a:5a:7d:d6:43:0d:e6:3f:60:f3:
14:ff:57:8b:6c:f8:c2:46:d7:bf:8c:01:d4:fd:21:
6f:85:94:50:6f:ad:db:f4:0a:c6:9a:38:ee:76:b0:
0f:17:f1:de:54:89:e1:22:b8:ea:f6:12:f7:68:85:
9b:fb:23:2f:2f:36:14:f5:f9:ad:89:86:c0:19:68:
45:3d:41:52:63:bd:66:ef:f6:70:7a:ef:3a:e5:84:
fb:c5:68:51:5c:7c:e2:37:4d:d1:e3:26:73:bb:36:
90:ca:bc:92:aa:97:31:80:52:a2:e7:0e:c8:af:bb:
c2:b1:fb:f3:b6:95:07:71:36:f5:d6:49:7d:8d:9b:
51:a3:1e:f5:e9:36:c6:c1:12:3c:96:2b:14:b6:64:
f7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:DA:42:B3:7D:C7:ED:84:AF:73:1A:B5:EA:F0:38:2A:79:9D:49:7C
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/r9pCs33H7YSvcxq16vA4KnmdSXw.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.3.0.0/22
103.54.156.0/22
103.141.96.0/23
120.136.8.0/21
153.115.0.0/16
175.28.4.0/22
183.90.224.0/19
183.181.78.0-183.181.99.255
202.210.8.0/24
202.226.36.0/22
202.233.64.0/22
202.237.154.0/24
202.240.141.0/24
202.254.232.0/21
210.131.208.0/20
210.157.78.0/23
220.158.16.0/20
222.228.0.0/20
222.228.64.0/20
223.27.68.0/22
Signature Algorithm: sha256WithRSAEncryption
88:d4:c0:63:3d:41:f6:3d:24:1c:f9:d6:0a:8e:dd:3c:9b:b8:
35:24:9b:6a:fa:a4:1e:b2:d3:9d:7d:68:2d:5c:06:24:87:7b:
cc:6a:3e:75:c1:01:d4:4d:b1:8b:f8:1f:a6:2f:37:5d:3d:4d:
de:5c:61:ca:dd:e9:e9:bc:64:de:44:26:d8:ed:90:20:27:fc:
fd:f2:c1:40:d0:7d:21:fc:a8:b2:d8:a6:74:20:75:e3:af:78:
62:2d:cf:40:21:61:60:90:a4:cf:b7:c5:6e:43:84:e2:1a:3e:
23:b5:81:64:3e:4b:1b:af:4a:98:60:8d:fb:36:cf:dd:08:02:
ba:4c:6b:1f:cd:8e:3a:22:d0:5d:c5:00:74:0e:5c:e6:a4:3d:
d9:89:6e:4c:d2:be:77:db:b0:a4:cd:e0:46:43:ba:ab:28:ac:
de:6b:c7:a8:62:99:c9:8d:29:77:2c:a6:66:7c:00:85:09:96:
04:dc:5e:c9:74:d4:dc:f5:ec:54:12:0c:c4:a5:2e:db:27:c9:
6c:63:40:30:0b:4d:23:30:93:38:8f:07:16:d0:08:0c:9f:1c:
e3:c5:cb:01:ba:8d:74:43:4f:a1:2a:55:62:42:55:d0:3b:bf:
9d:d6:ad:fd:0a:b2:a1:ff:6b:dd:f8:05:5c:71:05:2d:f9:8e:
21:e3:a6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:17:38 2026 by rpki-client