
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/vWkALQ6LftLD0dXQeuaSLHSX8C0.cer
File: vWkALQ6LftLD0dXQeuaSLHSX8C0.cer (raw, json)
Hash identifier: Ov+kXPCaS6rgNAkL4LzIpQynyJTHIz1yB7Yklucwp0g=
Subject key identifier: BD:69:00:2D:0E:8B:7E:D2:C3:D1:D5:D0:7A:E6:92:2C:74:97:F0:2D
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 6278
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/vWkALQ6LftLD0dXQeuaSLHSX8C0.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Sun 15 Feb 2026 01:35:06 +0000
Certificate not after: Mon 15 Feb 2027 01:30:02 +0000
Subordinate resources: IP: 61.195.48.0/20
IP: 119.252.32.0/19
IP: 124.150.152.0/21
IP: 202.67.48.0/20
IP: 219.117.144.0/20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25208 (0x6278)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Feb 15 01:35:06 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=BD69002D0E8B7ED2C3D1D5D07AE6922C7497F02D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:dd:fa:48:01:7c:79:d0:be:35:4c:da:3f:f8:
ac:ad:40:97:d3:c8:ba:30:1a:53:47:ac:1f:a4:80:
b4:1d:13:ed:3c:85:8c:b4:cb:db:62:fe:d3:0e:ec:
74:2f:ac:75:69:6d:0c:1d:29:58:6e:2b:2f:ce:c0:
03:69:bf:e2:1c:f4:44:9b:3a:ed:7f:fe:22:61:c5:
95:00:9b:41:15:e9:2a:2b:03:0d:aa:33:be:83:7a:
c7:fe:8d:f2:ba:31:bc:f8:fe:00:52:9f:a7:b6:a9:
73:f6:b9:a1:f6:5e:67:e6:82:82:22:f7:83:25:56:
00:b0:d3:cb:f5:3c:0f:76:a0:ae:6e:ef:55:ec:f5:
b5:4b:02:bd:51:6f:23:80:0c:e4:32:0c:fe:53:08:
b5:62:e2:af:1e:d3:65:9c:90:96:b1:32:07:98:31:
23:9d:73:80:02:f2:9a:7f:62:40:aa:af:b6:db:e8:
b8:92:d7:8a:be:c1:f2:2a:e7:39:9f:51:0c:94:03:
2b:0a:49:03:6e:14:98:01:5d:b6:ab:01:5f:05:87:
77:8b:48:9b:ce:68:8e:b6:9e:83:85:e3:9a:60:45:
cb:e6:27:18:fe:3d:e0:c8:c4:67:9e:db:37:9f:eb:
2b:17:d5:b6:66:bb:8c:3d:8f:2d:c2:d2:97:ab:1b:
83:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:69:00:2D:0E:8B:7E:D2:C3:D1:D5:D0:7A:E6:92:2C:74:97:F0:2D
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/vWkALQ6LftLD0dXQeuaSLHSX8C0.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.195.48.0/20
119.252.32.0/19
124.150.152.0/21
202.67.48.0/20
219.117.144.0/20
Signature Algorithm: sha256WithRSAEncryption
98:6e:18:af:7c:06:2a:bc:32:43:25:44:e6:06:2f:f8:89:96:
dc:3c:16:79:76:72:21:f9:45:4c:0a:0a:24:4f:d7:ce:f0:bf:
7b:3f:6c:26:08:f6:e8:dc:00:ba:cb:08:f4:0b:a6:03:85:d5:
d3:f2:ac:9b:c3:0d:b1:da:e1:59:f5:68:3a:48:c3:2e:5d:5f:
ca:fe:a9:60:85:28:fc:b9:3e:08:ac:f4:2f:bd:3b:21:6e:f6:
31:e4:77:4d:c6:07:d7:9f:53:13:94:94:0b:30:17:fe:91:33:
f3:3c:2d:85:51:c7:a7:e6:04:78:81:61:84:fc:09:5b:e4:cd:
dc:eb:a4:f8:bc:60:67:ed:03:31:5d:cd:94:29:7b:83:51:e9:
48:fd:97:71:31:f7:12:4d:aa:ec:52:7e:48:c3:5b:a9:f9:c4:
93:f2:f3:d4:97:9b:de:37:cd:c9:b0:61:ac:69:a0:6e:20:a5:
62:50:45:ed:36:08:1e:64:78:28:f9:05:61:15:de:f3:3d:7e:
03:b6:e9:13:72:b2:cf:7e:a7:21:96:00:05:b7:d0:0e:a1:ba:
bd:ed:f3:c6:fe:51:41:45:be:fa:ae:62:ad:0f:5f:02:cb:9c:
66:78:6d:60:9b:cb:6c:cb:93:b5:47:a4:0e:82:48:14:bc:7b:
99:79:12:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:14:05 2026 by rpki-client