
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
File: szOu2luBprL1T_cUZo-NY-h7haE.cer (raw, json)
Hash identifier: UqGXOVcU5O/RoAfrkZGtf22JJlcfN8q4vvE73nKbCRc=
Subject key identifier: B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 6253
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Sun 15 Feb 2026 01:34:02 +0000
Certificate not after: Mon 15 Feb 2027 01:30:02 +0000
Subordinate resources: IP: 211.125.128.0/20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25171 (0x6253)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Feb 15 01:34:02 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6c:84:d4:cd:a1:64:f2:36:d6:52:fa:d5:0b:
dc:a7:d7:5e:59:bf:8a:60:f3:c1:d6:56:19:15:11:
0b:1e:76:1d:ab:29:6b:8c:82:17:87:4a:bb:87:92:
d2:3e:06:fc:2a:a5:e8:02:34:c9:05:95:a7:5a:f1:
46:52:08:73:eb:e9:96:e9:2d:ed:5e:0a:c9:3b:6f:
2a:db:e3:3b:9e:7e:73:d7:7d:cb:17:cf:a5:03:92:
ca:54:7b:b7:da:9c:29:ef:42:ce:31:ce:88:fd:2e:
7a:8c:97:8e:2d:48:6d:36:63:15:dd:1e:18:52:bb:
89:d9:28:4a:19:99:cf:3a:a4:c0:97:be:0d:94:a7:
37:f0:da:39:c4:37:8c:d2:45:1d:04:2b:e4:fc:44:
50:0f:83:41:68:fa:a8:b5:90:3a:82:3c:9c:65:78:
6a:60:78:11:02:f6:81:c6:11:3e:bb:78:e4:e4:d8:
30:8a:cd:2c:68:df:68:df:6d:99:1b:05:13:49:de:
34:d6:4c:fc:d1:7e:fb:ce:31:29:23:d8:dd:f1:a9:
17:7e:20:38:d8:5c:5d:4e:5a:38:24:d8:41:34:b9:
d8:a9:92:86:d7:43:69:65:cf:11:62:a7:7d:94:c0:
53:9a:ba:cb:3e:5a:75:8e:3c:41:9d:23:e5:ee:56:
e4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.125.128.0/20
Signature Algorithm: sha256WithRSAEncryption
6e:b2:56:e0:5c:3c:d0:4f:22:f8:c2:b6:ca:2d:69:3e:4c:af:
f8:26:b8:62:b4:95:77:d3:ce:a1:a0:50:52:c0:94:b5:4e:3d:
79:11:ae:f6:10:ea:9b:df:23:d9:01:33:c9:8a:68:39:6c:f6:
5a:52:23:b8:b9:9a:5a:e2:a7:00:8f:0b:14:aa:f0:fb:7d:97:
84:d4:83:12:fb:19:25:ca:c4:fa:0b:6f:82:37:31:28:81:49:
2d:8e:d6:0c:4e:fb:d4:03:e7:0a:84:b4:03:d8:57:31:ca:1a:
b3:e7:23:d1:8b:04:a3:cc:e5:09:dc:15:38:d7:26:70:8d:90:
92:64:c5:26:45:95:30:f0:9d:3f:d7:8f:19:15:15:0a:78:44:
12:da:1c:72:27:b4:69:4d:5f:fd:62:00:3f:94:a9:c7:11:4a:
dc:ab:e5:b8:bb:af:00:70:29:88:0f:f0:c9:ee:02:4f:3a:6f:
31:cd:bf:be:5e:26:d3:f5:bf:15:32:53:e8:7f:a4:cb:7d:2e:
08:f6:67:34:0a:fb:be:3b:43:60:ee:57:1b:3a:b2:1d:f8:a6:
64:b5:ed:c4:d0:2a:b1:23:36:48:5c:76:a5:10:33:c1:36:b0:
68:8d:95:a3:92:ad:47:ab:3e:42:4b:23:74:2b:43:34:37:ff:
0f:9a:a0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:26:52 2026 by rpki-client