
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/uN0dbXf_M5Mb90i6m_Dr9JOdgDE.cer
File: uN0dbXf_M5Mb90i6m_Dr9JOdgDE.cer (raw, json)
Hash identifier: 1u4xelVMcn0iE1VTBP6j6ocXOQ7dD9jA0bgCM83Dd7w=
Subject key identifier: B8:DD:1D:6D:77:FF:33:93:1B:F7:48:BA:9B:F0:EB:F4:93:9D:80:31
Authority key identifier: D1:95:7E:C5:8C:08:F3:5B:AA:6B:FE:77:E4:5A:97:40:BA:47:1F:9E
Certificate issuer: /CN=A91A73810000/serialNumber=D1957EC58C08F35BAA6BFE77E45A9740BA471F9E
Certificate serial: 02F8
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/uN0dbXf_M5Mb90i6m_Dr9JOdgDE.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Tue 15 Sep 2026 01:31:06 +0000
Certificate not after: Wed 15 Sep 2027 01:30:02 +0000
Subordinate resources: IP: 109.236.0.0/20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 08:22:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 760 (0x2f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=D1957EC58C08F35BAA6BFE77E45A9740BA471F9E
Validity
Not Before: Sep 15 01:31:06 2026 GMT
Not After : Sep 15 01:30:02 2027 GMT
Subject: CN=B8DD1D6D77FF33931BF748BA9BF0EBF4939D8031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e0:a1:a5:37:a0:73:47:a0:22:09:c3:3c:5d:
f6:ec:84:a1:68:de:50:9d:96:83:9c:7f:7a:5d:9e:
a2:70:9a:65:4a:9e:86:a5:f1:cc:5a:c0:2b:86:ff:
db:89:5f:38:55:89:76:27:b9:56:9a:b9:76:d5:de:
49:4a:59:f6:62:7d:7f:3e:14:0b:c1:df:aa:af:1e:
28:81:b2:3e:e9:19:d9:37:c1:76:cc:f3:4b:8f:f8:
6b:cd:92:f5:3c:58:58:76:52:38:f2:0d:00:66:d8:
8c:20:4c:60:18:c6:32:96:5a:a0:9b:28:3a:14:eb:
ea:4a:3e:2a:92:31:eb:e6:01:e2:17:97:09:15:44:
ce:28:b1:15:9d:06:5a:b6:78:5c:c3:ed:4d:a3:76:
18:ce:12:b9:12:5a:4a:b7:20:37:f2:0f:a0:8a:ee:
83:a3:45:1c:55:31:74:e1:24:a2:4e:00:0f:f7:51:
04:15:55:9b:ea:f4:c0:26:1d:83:84:c4:48:69:cd:
a9:84:be:69:50:59:d9:7e:71:cd:17:4d:3b:ce:04:
44:ac:17:f2:72:8b:9c:78:6a:e0:8e:e0:c4:25:55:
81:35:62:b4:30:ab:33:c0:a0:13:a4:bf:50:ed:5b:
8e:c3:79:f3:ce:92:14:c5:f9:04:41:76:f2:a1:2d:
1e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:DD:1D:6D:77:FF:33:93:1B:F7:48:BA:9B:F0:EB:F4:93:9D:80:31
X509v3 Authority Key Identifier:
keyid:D1:95:7E:C5:8C:08:F3:5B:AA:6B:FE:77:E4:5A:97:40:BA:47:1F:9E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/uN0dbXf_M5Mb90i6m_Dr9JOdgDE.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
109.236.0.0/20
Signature Algorithm: sha256WithRSAEncryption
74:95:e9:2c:f4:93:e8:e2:64:ee:f0:d0:47:c4:70:a5:cd:f0:
03:a6:9a:74:b2:c0:93:df:98:c4:8e:d9:f1:54:a4:f8:43:bf:
f8:b0:1e:98:8d:f1:89:32:d3:b2:b3:00:59:a5:40:6a:60:f0:
7d:ce:68:c4:63:d4:8c:46:cc:03:af:56:95:ce:e2:68:1b:43:
a4:81:13:f8:a6:6c:52:08:ce:7b:c5:c4:0a:60:d0:d3:de:31:
be:5b:31:a8:51:8f:ee:60:03:7d:97:b2:78:e8:ed:03:91:61:
79:23:3b:eb:46:d7:71:51:c8:62:71:22:1a:17:57:43:1d:cc:
43:74:8f:59:a8:2a:b2:16:10:8b:77:26:0e:4f:8b:3e:46:be:
68:9e:b5:ef:01:d4:33:f9:de:6e:6b:f7:a5:d7:32:2c:0c:89:
05:ae:e0:e6:6b:7a:00:15:2f:e1:92:ee:ca:3a:ae:3e:1d:2a:
ae:da:7b:cd:09:56:96:87:81:b1:50:b1:75:d2:cf:7c:10:83:
8a:07:5d:fa:cc:93:5c:6d:fa:0a:af:8f:56:32:41:7d:7d:65:
ec:00:e5:fc:15:62:ea:84:48:25:60:0a:7e:06:cb:c1:1d:ab:
fa:94:84:6f:09:50:bf:ae:ee:d5:2b:30:b0:65:7f:bd:3c:65:
1a:b6:3a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:34:16 2026 by rpki-client