Certificate
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/veQ8a67j-AOtItvzaSqwktfoj1o.cer
File: veQ8a67j-AOtItvzaSqwktfoj1o.cer (raw, json)
Hash identifier: beQLUdJoOMI6b2LImgogPdkG/BQPq5N07sTfHQxrnYg=
Subject key identifier: BD:E4:3C:6B:AE:E3:F8:03:AD:22:DB:F3:69:2A:B0:92:D7:E8:8F:5A
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 7654
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
CRL Distribution Point: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20201/veQ8a67j-AOtItvzaSqwktfoj1o.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20201/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Sun 15 Nov 2026 01:35:16 +0000
Certificate not after: Mon 15 Nov 2027 01:30:02 +0000
Subordinate resources: IP: 103.42.130.0/23
IP: 124.26.0.0/15
IP: 133.169.0.0/16
IP: 133.184.60.0 -- 133.184.75.255
IP: 133.184.80.0 -- 133.184.139.255
IP: 133.184.152.0/22
IP: 133.184.160.0/22
IP: 133.184.208.0/20
IP: 133.184.236.0/22
IP: 133.184.244.0 -- 133.184.255.255
IP: 133.185.28.0 -- 133.185.43.255
IP: 133.185.48.0/22
IP: 133.185.56.0/21
IP: 133.185.100.0 -- 133.185.123.255
IP: 133.185.128.0 -- 133.185.139.255
IP: 133.185.152.0/21
IP: 133.185.184.0 -- 133.185.207.255
IP: 133.185.212.0 -- 133.185.239.255
IP: 133.244.0.0/16
IP: 202.243.186.0/24
IP: 218.217.32.0 -- 218.217.127.255
IP: 218.229.0.0/17
IP: 219.97.78.0/23
IP: 219.116.128.0/17
IP: 220.145.0.0/17
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 14:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30292 (0x7654)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Nov 15 01:35:16 2026 GMT
Not After : Nov 15 01:30:02 2027 GMT
Subject: CN=BDE43C6BAEE3F803AD22DBF3692AB092D7E88F5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:be:1d:49:ee:5d:ac:53:cc:d7:80:9e:24:d6:
6e:99:a1:6c:28:48:2d:52:0d:49:bf:a3:aa:c6:a9:
0a:66:db:e5:b2:88:4f:1e:87:2d:c3:2e:4e:3b:16:
17:f5:26:30:07:c6:d1:d5:ee:b7:22:1f:43:af:30:
f7:1a:a6:40:9e:5f:10:bb:95:b5:ad:a2:5d:36:43:
3d:70:cc:5d:42:50:77:55:73:a5:59:54:1f:53:d8:
77:10:13:d8:07:7a:a6:01:c9:fe:7e:12:87:60:d0:
5d:2d:0f:10:fe:b6:5f:e1:c8:35:68:10:4b:d6:ef:
49:3e:67:c2:bb:f0:16:8c:e9:6b:35:51:00:80:36:
6e:1e:70:de:c9:6a:05:ff:40:e5:74:e2:3f:3e:9a:
d1:a0:14:18:bd:fc:08:61:e8:68:57:bc:f9:5f:cb:
81:26:4e:15:8c:f9:42:b5:10:10:4e:7b:80:02:a3:
b5:1e:94:77:f7:d6:0e:d7:e1:1c:b0:3d:13:55:95:
47:f1:16:6e:43:73:20:8a:bc:a7:52:e9:f8:d4:39:
fb:52:53:84:e2:48:0d:ff:fa:32:5b:e6:d0:bd:cc:
98:05:d9:90:89:36:f3:41:54:0c:7c:2b:ed:fb:14:
03:b1:5f:2c:d8:54:5e:88:a8:10:3a:7b:c7:68:7c:
53:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E4:3C:6B:AE:E3:F8:03:AD:22:DB:F3:69:2A:B0:92:D7:E8:8F:5A
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20201/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20201/veQ8a67j-AOtItvzaSqwktfoj1o.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.42.130.0/23
124.26.0.0/15
133.169.0.0/16
133.184.60.0-133.184.75.255
133.184.80.0-133.184.139.255
133.184.152.0/22
133.184.160.0/22
133.184.208.0/20
133.184.236.0/22
133.184.244.0-133.184.255.255
133.185.28.0-133.185.43.255
133.185.48.0/22
133.185.56.0/21
133.185.100.0-133.185.123.255
133.185.128.0-133.185.139.255
133.185.152.0/21
133.185.184.0-133.185.207.255
133.185.212.0-133.185.239.255
133.244.0.0/16
202.243.186.0/24
218.217.32.0-218.217.127.255
218.229.0.0/17
219.97.78.0/23
219.116.128.0/17
220.145.0.0/17
Signature Algorithm: sha256WithRSAEncryption
39:cd:9a:62:20:77:00:c3:ee:96:b5:bd:71:2b:f3:7a:03:32:
4c:e6:c5:3f:37:27:e3:54:2f:5c:a9:77:86:28:14:6b:07:b2:
12:44:5f:b6:da:69:66:31:17:6d:69:13:da:03:27:a1:01:54:
e8:5c:1b:37:08:74:49:16:35:1e:a0:ee:11:3d:11:9f:16:96:
3a:6e:e4:bc:17:82:80:e1:e8:b4:52:8c:24:8b:09:ca:31:83:
df:35:45:62:70:b4:90:6d:a1:4e:14:26:f2:d4:4f:08:2f:a1:
61:99:e0:0d:e1:08:21:0f:7f:96:34:11:13:7b:50:e6:a2:8a:
40:b2:02:46:38:2b:56:9a:72:a9:b6:6d:3a:7b:51:2b:a1:05:
75:47:35:9a:38:df:76:b8:24:25:13:49:2c:3e:c3:b1:c5:91:
0a:e8:2d:87:cb:be:60:f1:6a:9e:94:b6:42:db:c8:8d:9a:fa:
a6:32:6a:46:61:0a:57:e3:29:60:38:09:59:02:38:6a:28:1c:
0d:13:d4:ef:87:00:a7:ff:6a:58:3a:f3:b1:b4:f8:99:08:53:
fe:83:7f:f9:79:11:9b:cc:8e:aa:59:10:93:83:08:ec:c9:f8:
5b:66:55:01:9e:97:9b:06:07:28:ac:80:06:09:9e:66:1b:5d:
95:61:92:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:58:52 2026 by rpki-client