Certificate
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
File: -way5KnVZ-t9gP9Zp1X9KDv7E6s.cer (raw, json)
Hash identifier: dAY3x1MMEfNHdq1SfAH366CDqmJBrq2uDjquYtbZg9c=
Subject key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 5B80
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Wed 15 Oct 2025 01:42:07 +0000
Certificate not after: Thu 15 Oct 2026 01:30:02 +0000
Subordinate resources: IP: 14.193.0.0/16
IP: 27.113.248.0/22
IP: 27.116.0.0/20
IP: 27.126.64.0 -- 27.126.143.255
IP: 49.250.0.0/15
IP: 58.85.0.0/16
IP: 61.46.0.0/16
IP: 61.115.128.0/18
IP: 61.125.64.0/18
IP: 61.192.0.0/17
IP: 61.203.224.0/19
IP: 61.205.128.0/18
IP: 61.206.96.0/20
IP: 61.211.144.0/20
IP: 61.215.128.0 -- 61.215.175.255
IP: 103.3.4.0/22
IP: 103.55.196.0/22
IP: 103.192.68.0/22
IP: 110.4.48.0/20
IP: 110.92.80.0/20
IP: 110.93.0.0/21
IP: 110.93.96.0/20
IP: 110.172.0.0/20
IP: 110.173.240.0/20
IP: 110.232.0.0/19
IP: 110.232.128.0/21
IP: 111.90.0.0/17
IP: 111.125.144.0/21
IP: 112.137.32.0/20
IP: 112.137.64.0/18
IP: 113.52.16.0/20
IP: 113.61.112.0/20
IP: 113.197.16.0/20
IP: 114.69.160.0/20
IP: 114.134.112.0/20
IP: 114.134.192.0/18
IP: 114.142.128.0/21
IP: 114.198.192.0 -- 114.198.231.255
IP: 115.42.96.0/20
IP: 116.70.128.0/18
IP: 117.53.0.0 -- 117.53.39.255
IP: 118.83.0.0/16
IP: 118.86.0.0/15
IP: 119.24.0.0 -- 119.26.255.255
IP: 119.82.192.0/20
IP: 119.161.112.0/21
IP: 122.50.32.0/19
IP: 122.102.128.0/17
IP: 122.196.0.0/15
IP: 122.255.128.0/17
IP: 123.98.224.0/19
IP: 124.195.144.0/20
IP: 125.4.0.0/16
IP: 125.62.240.0/20
IP: 175.41.64.0/18
IP: 175.103.12.0/22
IP: 175.111.120.0/21
IP: 180.92.32.0/19
IP: 180.131.152.0/21
IP: 180.131.192.0/20
IP: 180.149.160.0/19
IP: 180.220.0.0/15
IP: 182.50.192.0 -- 182.50.239.255
IP: 202.43.16.0/20
IP: 202.43.68.0/22
IP: 202.57.224.0/20
IP: 202.72.64.0/20
IP: 202.78.176.0/20
IP: 202.83.184.0/21
IP: 202.138.80.0/20
IP: 202.148.240.0/20
IP: 202.157.0.0/18
IP: 202.162.128.0/19
IP: 202.178.80.0/20
IP: 202.179.224.0/20
IP: 202.180.176.0/20
IP: 203.89.32.0/19
IP: 203.114.248.0/22
IP: 203.124.64.0/19
IP: 203.153.56.0/22
IP: 203.217.180.0/22
IP: 210.2.192.0/18
IP: 210.135.192.0/19
IP: 210.156.64.0/20
IP: 210.172.240.0/20
IP: 210.211.32.0/20
IP: 210.228.0.0/20
IP: 211.1.176.0/20
IP: 211.19.208.0/20
IP: 211.120.128.0/18
IP: 211.124.0.0/16
IP: 211.135.0.0/17
IP: 218.45.112.0/20
IP: 218.219.80.0/20
IP: 218.220.0.0/16
IP: 219.100.24.0/22
IP: 219.100.152.0/22
IP: 219.105.80.0 -- 219.105.127.255
IP: 219.111.192.0/20
IP: 219.112.128.0/19
IP: 219.112.192.0/19
IP: 219.113.96.0/20
IP: 219.114.192.0 -- 219.115.255.255
IP: 219.117.0.0/20
IP: 219.117.160.0/19
IP: 219.124.16.0/20
IP: 219.124.224.0/19
IP: 220.208.64.0/18
IP: 221.132.128.0/18
IP: 223.165.20.0/22
IP: 223.165.32.0/19
IP: 223.223.208.0/21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 08:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23424 (0x5b80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Oct 15 01:42:07 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f3:64:ed:60:7f:80:d9:15:6a:03:ce:9a:d3:
6c:2b:0e:d4:67:e0:ab:ed:9d:61:d7:9c:9d:9c:53:
06:87:a4:4c:0a:ae:d2:f2:3d:50:d6:58:14:71:38:
bf:01:d3:bf:a0:7b:9d:6d:35:30:6d:99:8e:9d:59:
1c:75:61:42:9c:47:55:a1:4e:76:58:f6:81:d7:56:
6f:ab:06:1a:f7:61:9d:e4:31:b3:65:f4:da:d2:c1:
4a:c0:68:b8:91:0e:fa:73:14:26:b2:db:43:bf:a6:
c0:fe:12:8c:d4:a3:ce:ac:7d:57:43:8d:6d:7c:88:
8c:36:6e:69:37:c1:b5:f0:31:c4:4e:41:30:13:0c:
cb:a1:37:60:de:29:cb:d0:ae:08:74:e2:f9:92:cc:
53:29:ae:9f:03:61:be:f1:1b:5c:eb:6d:13:c8:eb:
8f:28:a9:a9:7d:ee:62:07:e4:88:d8:ac:db:2e:7c:
e6:2a:ac:43:a3:76:5c:31:9a:23:81:71:3f:2f:dd:
ee:64:cb:d6:0d:25:90:c1:4e:97:98:18:2c:76:51:
ca:a3:4e:94:2b:95:47:b0:0e:bd:b5:e2:aa:2b:a4:
65:9c:07:1e:59:57:9b:88:88:f5:b5:0e:1d:78:ad:
68:12:5e:57:3c:33:c7:46:a2:18:be:4c:6c:00:40:
23:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.193.0.0/16
27.113.248.0/22
27.116.0.0/20
27.126.64.0-27.126.143.255
49.250.0.0/15
58.85.0.0/16
61.46.0.0/16
61.115.128.0/18
61.125.64.0/18
61.192.0.0/17
61.203.224.0/19
61.205.128.0/18
61.206.96.0/20
61.211.144.0/20
61.215.128.0-61.215.175.255
103.3.4.0/22
103.55.196.0/22
103.192.68.0/22
110.4.48.0/20
110.92.80.0/20
110.93.0.0/21
110.93.96.0/20
110.172.0.0/20
110.173.240.0/20
110.232.0.0/19
110.232.128.0/21
111.90.0.0/17
111.125.144.0/21
112.137.32.0/20
112.137.64.0/18
113.52.16.0/20
113.61.112.0/20
113.197.16.0/20
114.69.160.0/20
114.134.112.0/20
114.134.192.0/18
114.142.128.0/21
114.198.192.0-114.198.231.255
115.42.96.0/20
116.70.128.0/18
117.53.0.0-117.53.39.255
118.83.0.0/16
118.86.0.0/15
119.24.0.0-119.26.255.255
119.82.192.0/20
119.161.112.0/21
122.50.32.0/19
122.102.128.0/17
122.196.0.0/15
122.255.128.0/17
123.98.224.0/19
124.195.144.0/20
125.4.0.0/16
125.62.240.0/20
175.41.64.0/18
175.103.12.0/22
175.111.120.0/21
180.92.32.0/19
180.131.152.0/21
180.131.192.0/20
180.149.160.0/19
180.220.0.0/15
182.50.192.0-182.50.239.255
202.43.16.0/20
202.43.68.0/22
202.57.224.0/20
202.72.64.0/20
202.78.176.0/20
202.83.184.0/21
202.138.80.0/20
202.148.240.0/20
202.157.0.0/18
202.162.128.0/19
202.178.80.0/20
202.179.224.0/20
202.180.176.0/20
203.89.32.0/19
203.114.248.0/22
203.124.64.0/19
203.153.56.0/22
203.217.180.0/22
210.2.192.0/18
210.135.192.0/19
210.156.64.0/20
210.172.240.0/20
210.211.32.0/20
210.228.0.0/20
211.1.176.0/20
211.19.208.0/20
211.120.128.0/18
211.124.0.0/16
211.135.0.0/17
218.45.112.0/20
218.219.80.0/20
218.220.0.0/16
219.100.24.0/22
219.100.152.0/22
219.105.80.0-219.105.127.255
219.111.192.0/20
219.112.128.0/19
219.112.192.0/19
219.113.96.0/20
219.114.192.0-219.115.255.255
219.117.0.0/20
219.117.160.0/19
219.124.16.0/20
219.124.224.0/19
220.208.64.0/18
221.132.128.0/18
223.165.20.0/22
223.165.32.0/19
223.223.208.0/21
Signature Algorithm: sha256WithRSAEncryption
21:95:37:4c:71:3e:89:37:a0:65:99:df:97:e1:86:50:79:a2:
38:27:3f:e7:09:66:22:c5:a8:bf:f7:e2:2a:4b:b7:a0:4b:73:
48:6d:30:6b:13:aa:35:3e:79:4e:c1:72:a7:0f:56:c7:b4:36:
36:e1:a5:68:98:b7:bd:3a:b5:1c:4e:5d:9f:79:b3:3a:7c:10:
fe:60:5b:a3:88:e3:1f:72:62:d5:30:b2:ff:de:56:fb:01:87:
c8:e4:23:32:c8:cf:76:c7:e8:65:e4:3e:a1:79:10:78:9d:63:
bd:0c:bb:62:55:2e:d1:40:36:6d:9f:a0:96:94:fe:80:eb:3e:
a0:ec:7a:ff:37:08:c2:ab:c1:43:b9:ea:f6:ea:08:72:4b:70:
dc:f4:d8:e4:e9:a1:dc:6c:56:73:48:c2:45:19:fd:e1:de:0e:
69:9d:03:d9:be:b7:25:da:63:07:f9:09:d5:cd:ed:d3:32:ad:
35:c0:55:b2:ed:a2:ed:bc:9b:41:2e:50:10:3d:d3:81:b7:fc:
e9:6d:5a:55:ae:1e:88:18:38:32:6f:41:4f:76:24:32:b3:74:
43:e6:56:fc:b7:ce:e2:a6:46:b5:fc:3c:86:1b:6a:07:4f:e3:
5c:0c:a7:11:0d:c4:de:18:5c:bb:af:aa:11:d6:0e:0c:c2:87:
39:93:e2:44
-----BEGIN CERTIFICATE-----
MIIIVjCCBz6gAwIBAgICW4AwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC
NTIwREFBQzdEQThGMB4XDTI1MTAxNTAxNDIwN1oXDTI2MTAxNTAxMzAwMlowMzEx
MC8GA1UEAxMoRkIwNkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNB
QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAO7zZO1gf4DZFWoDzprT
bCsO1Gfgq+2dYdecnZxTBoekTAqu0vI9UNZYFHE4vwHTv6B7nW01MG2Zjp1ZHHVh
QpxHVaFOdlj2gddWb6sGGvdhneQxs2X02tLBSsBouJEO+nMUJrLbQ7+mwP4SjNSj
zqx9V0ONbXyIjDZuaTfBtfAxxE5BMBMMy6E3YN4py9CuCHTi+ZLMUymunwNhvvEb
XOttE8jrjyipqX3uYgfkiNis2y585iqsQ6N2XDGaI4FxPy/d7mTL1g0lkMFOl5gY
LHZRyqNOlCuVR7AOvbXiqiukZZwHHllXm4iI9bUOHXitaBJeVzwzx0aiGL5MbABA
I+0CAwEAAaOCBVswggVXMB0GA1UdDgQWBBT7BrLkqdVn632A/1mnVf0oO/sTqzAf
BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0
b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa
dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j
Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0
NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G
A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB
7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw
L2FwL0E5MUE3MzgxMDAwMC82NzEvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt
cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzY3MS8td2F5NUtu
VlotdDlnUDlacDFYOUtEdjdFNnMubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw
a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s
MIIC8gYIKwYBBQUHAQcBAf8EggLhMIIC3TCCAtkEAgABMIIC0QMDAA7BAwQCG3H4
AwQEG3QAMAwDBAYbfkADBAQbfoADAwEx+gMDADpVAwMAPS4DBAY9c4ADBAY9fUAD
BAc9wAADBAU9y+ADBAY9zYADBAQ9zmADBAQ905AwDAMEBz3XgAMEBD3XoAMEAmcD
BAMEAmc3xAMEAmfARAMEBG4EMAMEBG5cUAMEA25dAAMEBG5dYAMEBG6sAAMEBG6t
8AMEBW7oAAMEA27ogAMEB29aAAMEA299kAMEBHCJIAMEBnCJQAMEBHE0EAMEBHE9
cAMEBHHFEAMEBHJFoAMEBHKGcAMEBnKGwAMEA3KOgDAMAwQGcsbAAwQDcsbgAwQE
cypgAwQGdEaAMAsDAwB1NQMEA3U1IAMDAHZTAwMBdlYwCgMDA3cYAwMAdxoDBAR3
UsADBAN3oXADBAV6MiADBAd6ZoADAwF6xAMEB3r/gAMEBXti4AMEBHzDkAMDAH0E
AwQEfT7wAwQGrylAAwQCr2cMAwQDr294AwQFtFwgAwQDtIOYAwQEtIPAAwQFtJWg
AwMBtNwwDAMEBrYywAMEBLYy4AMEBMorEAMEAsorRAMEBMo54AMEBMpIQAMEBMpO
sAMEA8pTuAMEBMqKUAMEBMqU8AMEBsqdAAMEBcqigAMEBMqyUAMEBMqz4AMEBMq0
sAMEBctZIAMEAsty+AMEBct8QAMEAsuZOAMEAsvZtAMEBtICwAMEBdKHwAMEBNKc
QAMEBNKs8AMEBNLTIAMEBNLkAAMEBNMBsAMEBNMT0AMEBtN4gAMDANN8AwQH04cA
AwQE2i1wAwQE2ttQAwMA2twDBALbZBgDBALbZJgwDAMEBNtpUAMEB9tpAAMEBNtv
wAMEBdtwgAMEBdtwwAMEBNtxYDALAwQG23LAAwMC23ADBATbdQADBAXbdaADBATb
fBADBAXbfOADBAbc0EADBAbdhIADBALfpRQDBAXfpSADBAPf39AwDQYJKoZIhvcN
AQELBQADggEBACGVN0xxPok3oGWZ35fhhlB5ojgnP+cJZiLFqL/34ipLt6BLc0ht
MGsTqjU+eU7BcqcPVse0NjbhpWiYt706tRxOXZ95szp8EP5gW6OI4x9yYtUwsv/e
VvsBh8jkIzLIz3bH6GXkPqF5EHidY70Mu2JVLtFANm2foJaU/oDrPqDsev83CMKr
wUO56vbqCHJLcNz02OTpodxsVnNIwkUZ/eHeDmmdA9m+tyXaYwf5CdXN7dMyrTXA
VbLtou28m0EuUBA904G3/OltWlWuHogYODJvQU92JDKzdEPmVvy3zuKmRrX8PIYb
agdP41wMpxENxN4YXLuvqhHWDgzChzmT4kQ=
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:49:25 2025 by rpki-client