
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/XFfdxZJIJx5x4TJYd5krlzjgQ9Q.cer
File: XFfdxZJIJx5x4TJYd5krlzjgQ9Q.cer (raw, json)
Hash identifier: FrCTxPvN1YnhKKwUmzD9EIlQwHrIbFvc4XXyp0FXLN8=
Subject key identifier: 5C:57:DD:C5:92:48:27:1E:71:E1:32:58:77:99:2B:97:38:E0:43:D4
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 6E7E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20153/XFfdxZJIJx5x4TJYd5krlzjgQ9Q.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20153/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Wed 15 Jul 2026 01:45:48 +0000
Certificate not after: Thu 15 Jul 2027 01:30:02 +0000
Subordinate resources: IP: 103.167.44.0/23
IP: 133.32.104.0 -- 133.32.109.255
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 05:26:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28286 (0x6e7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Jul 15 01:45:48 2026 GMT
Not After : Jul 15 01:30:02 2027 GMT
Subject: CN=5C57DDC59248271E71E1325877992B9738E043D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:5d:e2:bd:49:06:d7:ec:3b:5b:3a:55:e8:2f:
e8:6a:81:a1:80:d1:34:43:e1:e2:43:c4:e7:15:f1:
a6:9e:ec:5d:29:cc:fe:d4:6f:2d:95:e3:21:e0:c5:
d0:09:83:06:4a:4e:59:d5:07:70:1b:d1:d7:ff:f4:
5f:25:6d:ad:f2:f2:a8:e1:80:19:c6:7c:8f:df:92:
66:d2:43:b9:44:bf:e5:ac:4f:49:81:94:93:8b:cb:
9a:1b:54:ca:a7:5b:c1:fc:78:36:9f:e5:0f:14:74:
d9:0c:c1:b7:13:ea:25:d0:36:c2:2d:aa:6a:b0:b4:
eb:d2:96:90:59:96:22:b4:36:1c:c3:a3:2c:85:f9:
db:19:3f:54:74:c0:7a:12:69:72:ab:eb:72:5d:2b:
c3:a3:cf:4e:38:45:ea:16:d2:fe:13:2c:e8:27:14:
53:e7:6a:43:5f:c9:df:7d:4a:4e:d0:57:49:bd:e2:
25:c5:ca:73:11:65:81:63:ff:05:22:a7:09:f4:f8:
73:eb:58:b7:5d:8d:b9:d4:47:9f:5a:b7:6b:79:5e:
60:34:64:97:f4:ac:67:d4:2f:80:f1:c5:ec:69:c1:
31:26:6a:54:c8:ed:4f:af:d9:43:71:49:19:98:b0:
31:eb:28:e5:ab:33:15:0a:49:bb:d1:9c:63:be:fb:
90:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:57:DD:C5:92:48:27:1E:71:E1:32:58:77:99:2B:97:38:E0:43:D4
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20153/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20153/XFfdxZJIJx5x4TJYd5krlzjgQ9Q.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.167.44.0/23
133.32.104.0-133.32.109.255
Signature Algorithm: sha256WithRSAEncryption
2e:c2:31:73:b9:fa:48:52:a4:23:68:0b:68:54:fb:69:25:68:
8b:9f:24:0b:9a:31:fb:e3:5e:fe:33:de:2e:5d:89:d7:6f:c6:
dc:35:5b:00:ee:79:32:66:12:c7:8e:f5:f4:64:9e:57:72:39:
a2:b7:d4:18:71:72:2a:40:5c:9e:cb:7f:a1:00:4b:1f:57:dc:
20:d5:51:a5:ed:19:c6:93:a2:19:4b:35:70:97:ba:4f:1e:24:
98:a8:3c:79:45:7a:16:88:2c:25:e6:cc:b1:74:60:c7:1c:65:
f9:e5:e1:40:66:de:2d:d2:eb:a1:4e:f2:36:44:75:e4:d4:70:
6f:d6:6b:ac:37:14:ea:5d:f9:9b:3a:e4:b7:57:6e:4e:d1:58:
72:b5:10:7d:1b:8d:54:3c:fa:1a:49:5a:e1:db:74:46:33:99:
3b:cf:88:30:37:74:04:01:a2:56:f1:ef:b6:18:af:7d:f3:ab:
ba:66:a8:9a:88:bf:06:96:5a:cb:6e:c8:23:b3:85:e8:74:eb:
1f:89:3e:d8:75:19:92:76:bc:01:35:11:67:66:97:4d:b1:6f:
b4:c6:f6:31:3a:09:e3:7d:70:db:fa:f6:77:eb:d8:19:d4:dc:
79:cb:a4:1f:79:8c:43:fa:fc:07:70:99:80:79:bf:fe:95:0a:
f8:10:f0:ce
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgICbn4wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC
NTIwREFBQzdEQThGMB4XDTI2MDcxNTAxNDU0OFoXDTI3MDcxNTAxMzAwMlowMzEx
MC8GA1UEAxMoNUM1N0REQzU5MjQ4MjcxRTcxRTEzMjU4Nzc5OTJCOTczOEUwNDNE
NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOld4r1JBtfsO1s6Vegv
6GqBoYDRNEPh4kPE5xXxpp7sXSnM/tRvLZXjIeDF0AmDBkpOWdUHcBvR1//0XyVt
rfLyqOGAGcZ8j9+SZtJDuUS/5axPSYGUk4vLmhtUyqdbwfx4Np/lDxR02QzBtxPq
JdA2wi2qarC069KWkFmWIrQ2HMOjLIX52xk/VHTAehJpcqvrcl0rw6PPTjhF6hbS
/hMs6CcUU+dqQ1/J331KTtBXSb3iJcXKcxFlgWP/BSKnCfT4c+tYt12NudRHn1q3
a3leYDRkl/SsZ9QvgPHF7GnBMSZqVMjtT6/ZQ3FJGZiwMeso5aszFQpJu9GcY777
kP0CAwEAAaOCApkwggKVMB0GA1UdDgQWBBRcV93FkkgnHnHhMlh3mSuXOOBD1DAf
BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0
b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa
dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j
Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0
NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G
A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw
gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9hcC9BOTFBNzM4MTAwMDAvMjAxNTMvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw
a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMTUzL1hG
ZmR4WkpJSng1eDRUSllkNWtybHpqZ1E5US5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz
Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv
bi54bWwwLQYIKwYBBQUHAQcBAf8EHjAcMBoEAgABMBQDBAFnpywwDAMEA4UgaAME
AYUgbDANBgkqhkiG9w0BAQsFAAOCAQEALsIxc7n6SFKkI2gLaFT7aSVoi58kC5ox
++Ne/jPeLl2J12/G3DVbAO55MmYSx4719GSeV3I5orfUGHFyKkBcnst/oQBLH1fc
INVRpe0ZxpOiGUs1cJe6Tx4kmKg8eUV6FogsJebMsXRgxxxl+eXhQGbeLdLroU7y
NkR15NRwb9ZrrDcU6l35mzrkt1duTtFYcrUQfRuNVDz6Gkla4dt0RjOZO8+IMDd0
BAGiVvHvthivffOrumaomoi/BpZay27II7OF6HTrH4k+2HUZkna8ATURZ2aXTbFv
tMb2MToJ431w2/r2d+vYGdTcecukH3mMQ/r8B3CZgHm//pUK+BDwzg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:43:56 2026 by rpki-client