
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9hM65Yv3N_GdHXkc-luOk9VsfDk.cer
File: 9hM65Yv3N_GdHXkc-luOk9VsfDk.cer (raw, json)
Hash identifier: bteJYyB+/4JDkp1HftxyeIE3WNj6K0kGlp4iAhQfI+E=
Subject key identifier: F6:13:3A:E5:8B:F7:37:F1:9D:1D:79:1C:FA:5B:8E:93:D5:6C:7C:39
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 6425
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30309/9hM65Yv3N_GdHXkc-luOk9VsfDk.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30309/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Sun 15 Mar 2026 01:31:28 +0000
Certificate not after: Mon 15 Mar 2027 01:30:02 +0000
Subordinate resources: IP: 2401:a240::/32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 04:30:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25637 (0x6425)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Mar 15 01:31:28 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=F6133AE58BF737F19D1D791CFA5B8E93D56C7C39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5f:dd:0e:c9:0a:f3:16:29:a2:65:91:03:11:
c2:e6:eb:6c:6d:2b:1b:9b:90:75:5e:17:a2:77:e2:
20:e1:c7:fe:7d:7e:96:33:f1:1a:7a:f0:ac:da:b3:
b5:d2:04:6c:0d:3f:67:d6:b8:e9:75:07:da:38:c5:
29:1b:16:92:ea:4c:f8:83:50:2f:eb:5b:df:96:02:
9e:09:8a:15:19:2a:b8:49:ea:94:ee:b9:7f:c7:8b:
e5:52:c0:1e:15:19:82:a7:8d:98:6b:63:32:68:4f:
5a:36:1a:94:16:7d:67:34:90:25:15:91:6b:38:8c:
61:16:a1:8d:44:68:c3:1d:18:ef:ed:fb:25:fb:ed:
9a:99:fb:f3:f9:c4:72:36:fd:4d:58:34:4c:7c:4a:
72:f0:9b:e3:6b:de:7f:5a:e7:f5:3a:b6:71:c9:cb:
ac:0d:26:d8:2d:34:6b:8c:07:31:a3:c2:3d:09:05:
4b:0b:52:8d:0a:a8:bc:4d:30:93:d9:ed:bc:41:3e:
6c:f0:1f:c9:6c:dd:3e:0c:fa:7b:0c:d0:42:b4:d1:
e2:01:08:31:c8:8c:68:06:03:99:74:bc:e8:4a:2f:
e8:12:eb:56:62:68:9f:6f:78:51:f5:c4:df:56:b8:
d2:ed:c8:ae:fa:b5:18:b4:8f:59:8a:62:33:da:2b:
25:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:13:3A:E5:8B:F7:37:F1:9D:1D:79:1C:FA:5B:8E:93:D5:6C:7C:39
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30309/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30309/9hM65Yv3N_GdHXkc-luOk9VsfDk.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:a240::/32
Signature Algorithm: sha256WithRSAEncryption
a5:f8:cb:eb:7b:9d:9d:ec:10:56:ec:a2:db:08:c0:3d:e1:ba:
23:94:c4:86:e9:b0:e8:4c:43:d5:90:d9:af:01:d6:ca:0c:8a:
1d:53:c2:c8:d5:80:04:23:0f:95:8e:ec:8f:4e:07:39:46:1e:
65:31:9a:7e:10:e2:61:f0:0c:00:cb:46:a6:14:9a:cb:48:ec:
c7:5c:92:53:23:a5:ea:ee:7e:d4:f7:c1:1b:36:9e:7a:88:00:
79:c8:f4:1f:3e:86:da:48:05:e9:56:ab:ac:09:2f:c1:b1:d8:
a4:be:88:6d:91:cb:19:04:30:93:57:6b:cc:9a:db:21:0a:50:
51:3f:a8:0f:a8:fa:5b:94:7b:09:e7:f8:51:32:98:f0:cc:4d:
70:7b:67:5d:d8:bc:56:12:f5:f3:90:a0:7e:81:85:a6:14:0e:
08:ca:09:5e:99:12:cd:07:63:3f:ce:91:11:b9:05:4b:98:fb:
77:24:af:0c:a2:bd:9d:a5:5e:a3:bb:32:9a:ba:76:80:12:c4:
6a:b4:54:c6:20:b0:e4:d7:58:11:1c:9e:b6:a5:99:30:59:82:
47:f0:7a:d7:a6:26:dc:5a:d9:f0:d9:94:75:1c:dd:d7:b5:d1:
1a:88:b5:46:a5:2f:d9:8a:be:f6:3b:db:1f:4d:29:62:87:8b:
e2:66:0e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:28:22 2026 by rpki-client