
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1iPDjCoScAf5PnyEDfh1Ai5RxUc.cer
File: 1iPDjCoScAf5PnyEDfh1Ai5RxUc.cer (raw, json)
Hash identifier: hGEdAFzxKZ6daenenLNdtEIm4WirgDnRdCajG6f1soo=
Subject key identifier: D6:23:C3:8C:2A:12:70:07:F9:3E:7C:84:0D:F8:75:02:2E:51:C5:47
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 6E74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/224/1iPDjCoScAf5PnyEDfh1Ai5RxUc.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/224/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Wed 15 Jul 2026 01:45:30 +0000
Certificate not after: Thu 15 Jul 2027 01:30:02 +0000
Subordinate resources: IP: 202.213.96.0/19
IP: 202.245.196.0/23
IP: 210.167.0.0/19
IP: 210.250.160.0/19
IP: 211.120.192.0/20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28276 (0x6e74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Jul 15 01:45:30 2026 GMT
Not After : Jul 15 01:30:02 2027 GMT
Subject: CN=D623C38C2A127007F93E7C840DF875022E51C547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:39:e8:47:f1:0d:fc:d6:0b:47:75:7d:c0:5b:
09:d8:50:91:c3:90:a8:db:75:11:1a:3e:6a:b3:f4:
8f:cf:23:e6:53:c4:da:41:e7:fd:6c:ee:4a:ee:67:
9a:0e:dc:34:90:c4:1f:20:04:04:e8:e0:03:b2:be:
01:10:e7:76:4a:ce:a7:c9:1d:65:51:53:f4:0c:47:
9b:13:84:84:15:b6:98:65:05:1b:97:26:af:71:3a:
43:d0:5b:bf:2f:16:37:80:c9:e4:c4:3f:18:e9:b3:
d7:01:df:15:61:77:1e:c5:b1:57:e7:5c:70:8b:03:
69:e9:d3:24:2c:4e:d9:44:fe:cc:ea:a6:a8:5f:f8:
2a:14:88:38:16:90:76:b7:a9:48:81:2d:67:e1:f7:
c2:c4:2f:17:0a:48:1e:2a:5a:de:84:37:a9:50:c6:
46:f2:71:0a:1e:e1:e2:d5:00:73:6c:c5:be:da:66:
9e:bb:51:09:08:5f:3c:db:c8:35:89:11:4d:44:5d:
d4:d7:cf:22:ea:26:ef:e0:50:2a:79:81:85:1b:37:
73:f9:bc:26:03:19:6a:54:86:17:95:e9:7f:97:07:
55:82:36:7e:7c:6d:21:50:31:8a:b4:03:32:bc:9f:
a3:b3:02:39:bb:cb:cd:75:ee:40:e7:60:ad:2f:c2:
a3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:23:C3:8C:2A:12:70:07:F9:3E:7C:84:0D:F8:75:02:2E:51:C5:47
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/224/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/224/1iPDjCoScAf5PnyEDfh1Ai5RxUc.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.213.96.0/19
202.245.196.0/23
210.167.0.0/19
210.250.160.0/19
211.120.192.0/20
Signature Algorithm: sha256WithRSAEncryption
68:d6:de:bd:cd:0f:aa:f8:c0:05:ea:89:17:75:b6:f2:b6:f6:
f1:8d:18:93:70:0e:25:50:22:08:c6:b0:91:64:d9:2e:6d:a4:
48:7b:ed:45:b7:7a:b7:b5:f1:6e:1e:3d:e7:b9:13:4f:79:17:
e8:9a:a2:15:c6:0f:7c:e8:a8:64:34:c2:d8:ab:ed:f5:16:57:
67:d7:15:b3:2f:29:6e:42:27:3e:b2:33:85:b7:2a:a3:b3:85:
b1:ff:06:51:a8:6c:4f:4b:cd:d9:52:a4:89:5e:17:e7:f8:76:
88:b1:06:6f:ec:16:bd:16:0c:ac:30:42:39:5b:4d:19:0a:31:
3d:80:cf:58:64:f4:ab:79:86:87:13:e7:06:48:ec:e6:a9:e4:
84:1e:8b:ae:88:53:31:87:87:01:1f:ae:63:a2:ed:b8:cb:6b:
e3:9e:a3:64:e7:c6:60:2c:82:61:e3:23:ad:ff:39:67:02:ab:
fa:2d:97:83:ee:c7:a4:2e:af:eb:a4:31:51:d6:c9:56:1b:f3:
a2:f8:7c:1d:a3:66:61:04:12:4c:65:6e:8d:ac:05:1d:d8:48:
23:ff:e1:1c:b5:b5:c0:f8:f1:61:0c:ea:eb:c0:10:dd:ac:7f:
18:d5:9a:8f:75:1e:51:a4:78:33:58:c8:b1:49:d0:b4:0e:9b:
eb:96:d1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:11:11 2026 by rpki-client