
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/W5QLtjE0-eny_hJPzYbjB-v4slM.cer
File: W5QLtjE0-eny_hJPzYbjB-v4slM.cer (raw, json)
Hash identifier: BQTUICNEIQFo6r14GJdW+VEuWlA4drtH6NIAZ+8fAtY=
Subject key identifier: 5B:94:0B:B6:31:34:F9:E9:F2:FE:12:4F:CD:86:E3:07:EB:F8:B2:53
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 7761
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
CRL Distribution Point: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/556/W5QLtjE0-eny_hJPzYbjB-v4slM.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/556/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Sun 15 Nov 2026 01:41:06 +0000
Certificate not after: Mon 15 Nov 2027 01:30:02 +0000
Subordinate resources: IP: 103.30.164.0/22
IP: 150.9.252.0/23
IP: 219.100.252.0/24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 08:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30561 (0x7761)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Nov 15 01:41:06 2026 GMT
Not After : Nov 15 01:30:02 2027 GMT
Subject: CN=5B940BB63134F9E9F2FE124FCD86E307EBF8B253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:06:ea:83:4e:a0:74:7d:c1:e6:57:c9:49:1c:
18:49:cc:cc:d3:8f:e4:da:70:1f:a4:aa:85:96:96:
0f:e6:a1:c4:85:da:4d:8d:3e:e4:85:0a:0a:46:6d:
a2:95:fd:b8:d7:89:1c:39:3e:af:ea:16:3d:a2:c3:
5b:57:cb:0c:70:3f:33:03:66:ef:97:cd:d1:b0:e6:
90:72:83:db:74:f1:14:40:3e:66:46:ff:58:0d:05:
d9:1e:f5:95:8c:fd:69:02:15:f1:5a:be:d2:19:cb:
3f:e0:4f:ab:05:39:18:98:2a:5a:cc:20:16:25:c1:
1a:c5:b2:b3:67:b3:15:bb:0b:18:08:9f:ff:a1:ad:
6c:b4:44:3f:e2:fb:ed:0d:8c:a0:4b:12:ba:53:1d:
50:52:85:20:51:35:05:4e:2a:70:eb:a3:48:c5:0e:
03:d0:ad:ea:00:6f:01:57:1d:bc:22:16:19:d6:f7:
d4:35:c3:a7:7c:a0:f7:26:c4:c5:a4:a7:21:51:01:
67:12:41:a9:2d:22:7d:af:95:a6:44:ac:92:b0:d3:
fb:c9:c8:c4:49:da:5b:1a:fb:5a:31:b1:0d:91:df:
c3:15:2d:6e:8f:46:68:d3:a2:1d:5e:15:86:97:8d:
f9:ff:1c:41:11:29:b8:a7:e5:e1:22:05:5a:54:94:
28:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:94:0B:B6:31:34:F9:E9:F2:FE:12:4F:CD:86:E3:07:EB:F8:B2:53
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/556/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/556/W5QLtjE0-eny_hJPzYbjB-v4slM.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.30.164.0/22
150.9.252.0/23
219.100.252.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:d0:d7:d9:5a:d9:56:61:f8:b9:3c:80:8c:d2:b7:03:f4:f6:
1e:45:f2:09:e6:9e:0a:eb:d3:ef:d2:9b:e0:cc:58:75:a5:dd:
75:3f:3e:d6:a6:82:23:95:fa:c6:a9:fc:31:e6:04:44:26:23:
02:38:46:cd:cb:81:77:51:27:ae:cb:4a:0f:27:35:22:4c:56:
e1:6b:71:da:e5:ff:6a:10:dd:30:bc:8b:14:f3:22:60:52:cc:
94:f9:62:92:98:9e:b8:f0:46:6f:ee:23:91:66:4c:7a:4c:7a:
b9:1c:bc:7d:e7:d8:8c:d8:12:87:c6:db:e4:a6:71:53:d3:29:
e4:c4:1d:61:e8:90:57:b6:a9:52:1f:63:bf:07:ee:28:6e:d2:
ac:3c:7b:4a:8c:a4:39:56:40:19:e5:be:83:63:4d:a4:cd:cc:
b1:32:ef:fe:1a:b2:d6:65:78:9f:31:33:a2:e4:c2:a1:fc:f8:
09:5f:ce:d5:60:fd:fc:57:7b:27:ff:59:f9:5a:b6:a9:6a:20:
cc:10:3e:86:9f:3c:3f:80:c1:45:26:b5:41:f8:7f:1a:6c:37:
fd:fa:3e:61:ac:14:66:fe:6e:49:45:33:e7:37:49:14:b0:38:
bc:4a:26:69:34:3c:e6:47:b5:ef:73:dd:76:5e:6f:c9:2b:93:
a3:fa:dc:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:48:55 2026 by rpki-client