
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer
File: ygLFxDwA8U6FtbB1me3SZ8WitNI.cer (raw, json)
Hash identifier: U5w1Pp7aLACLa0m3ZJ45OJfxa2cArCj9MD2M6FrqQ60=
Subject key identifier: CA:02:C5:C4:3C:00:F1:4E:85:B5:B0:75:99:ED:D2:67:C5:A2:B4:D2
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 620C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Sun 15 Feb 2026 01:31:59 +0000
Certificate not after: Mon 15 Feb 2027 01:30:02 +0000
Subordinate resources: IP: 2001:e40::/29
IP: 2406:ce00::/29
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 05:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25100 (0x620c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Feb 15 01:31:59 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=CA02C5C43C00F14E85B5B07599EDD267C5A2B4D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:84:29:6f:c3:4c:94:32:1d:c2:28:c6:49:cd:
4f:5c:cc:53:46:d3:be:b6:b5:73:a1:c3:aa:a0:e3:
56:81:c7:21:0e:22:c8:a8:aa:95:6a:5c:46:19:ef:
e8:25:63:47:c9:bd:95:e6:55:21:d8:f7:f7:6c:88:
69:46:3f:66:cd:7a:66:96:83:89:d6:12:44:e4:ab:
24:00:19:66:88:58:90:70:e1:40:db:9a:72:0a:3d:
b3:e2:67:e4:31:b8:88:d6:d2:3f:92:2f:1d:31:8f:
c9:1f:12:f9:3c:a4:af:bd:e3:5b:51:71:05:52:90:
a4:3b:5e:47:5c:ae:43:62:cd:0b:ff:42:48:0a:af:
04:28:51:cf:c9:89:c5:dd:bd:fb:4d:4a:ac:0a:b2:
48:54:02:a6:de:c8:20:01:13:32:15:16:f7:34:6d:
7b:de:28:cb:7d:d3:77:90:ba:59:b1:86:a5:12:bb:
ef:d6:a0:14:00:26:f6:d1:8a:54:2a:43:45:02:1e:
0b:ad:d4:6a:04:78:c0:77:5a:d1:5f:d3:fb:99:12:
28:ce:56:a3:bd:f2:97:04:b1:d9:92:4f:50:70:ec:
0c:b2:bb:de:58:b0:47:cb:9f:60:11:60:e5:d6:8e:
bf:91:82:04:c3:09:3e:33:31:be:85:04:77:85:70:
0c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:02:C5:C4:3C:00:F1:4E:85:B5:B0:75:99:ED:D2:67:C5:A2:B4:D2
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:e40::/29
2406:ce00::/29
Signature Algorithm: sha256WithRSAEncryption
78:14:a7:98:a0:1d:ca:36:61:71:9b:c6:d6:e8:8f:dd:b1:ca:
e5:23:11:e7:ba:ae:22:1f:36:01:90:0e:af:2f:3a:5c:57:bc:
c9:30:b1:00:03:b9:20:95:d2:6a:b7:f3:a5:12:fa:59:8d:af:
7e:88:80:af:ad:3b:31:21:db:24:89:48:9b:75:ca:28:4f:42:
c1:a5:05:62:ce:2c:ae:40:10:d5:33:89:d0:80:76:e1:67:7b:
4c:ae:31:de:f9:cf:24:75:20:08:e3:ba:0e:06:1a:41:a8:cc:
62:2c:d7:d3:77:7c:13:84:04:30:35:12:40:27:ab:20:64:39:
85:9d:82:d0:53:2e:77:87:58:50:60:64:25:b7:43:b1:b1:00:
58:0d:31:5c:8e:0c:9f:8b:e8:9e:c7:f8:0d:07:22:be:cd:96:
29:6f:1d:f3:d0:0a:77:70:5a:f0:a1:eb:1c:b3:a4:48:ae:5c:
bd:94:69:28:fc:c1:62:c0:6b:4f:d4:0f:a8:3f:1e:24:92:89:
64:c1:41:37:82:8a:de:ab:1f:42:d2:5e:3b:af:cb:1e:99:79:
06:d1:07:8d:df:a4:49:b0:6d:87:d9:82:1d:42:d0:42:4d:e3:
c5:0c:de:8c:f1:00:80:1a:06:f5:4d:5a:f5:0a:c5:67:e6:2f:
28:82:2e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:25:32 2026 by rpki-client