
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/cQ8h-ENs0DYxVkw45JQL2fyj8Rw.cer
File: cQ8h-ENs0DYxVkw45JQL2fyj8Rw.cer (raw, json)
Hash identifier: DngXBwYv8HCBcwI1VU68Pz08pCuU1Uj7u1ts6URY8JI=
Subject key identifier: 71:0F:21:F8:43:6C:D0:36:31:56:4C:38:E4:94:0B:D9:FC:A3:F1:1C
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 6CCD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/880/cQ8h-ENs0DYxVkw45JQL2fyj8Rw.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/880/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Wed 15 Jul 2026 01:32:28 +0000
Certificate not after: Thu 15 Jul 2027 01:30:02 +0000
Subordinate resources: IP: 103.78.118.0/23
IP: 202.71.48.0/20
IP: 202.90.208.0/20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27853 (0x6ccd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Jul 15 01:32:28 2026 GMT
Not After : Jul 15 01:30:02 2027 GMT
Subject: CN=710F21F8436CD03631564C38E4940BD9FCA3F11C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:74:9a:61:67:e5:45:8a:b0:14:74:7b:78:c0:
c7:d8:82:36:31:08:31:05:1f:9f:09:5d:8d:cb:dd:
39:26:a6:0e:27:15:ca:64:6b:c4:25:ac:f9:28:a3:
4f:bd:61:13:da:f1:71:0d:fb:b5:e3:70:70:e2:b3:
ac:40:fa:12:41:a7:c6:20:4d:60:65:79:8b:41:99:
16:43:bc:02:f0:5d:2c:25:7f:6a:18:b5:06:44:00:
e0:b9:bb:e3:71:c9:35:14:38:ab:4e:81:7a:3c:43:
c7:a2:f7:71:44:c6:36:6c:92:3c:eb:bc:5e:c4:bf:
1e:6e:8a:9f:71:8d:cd:2f:6a:34:d2:83:cd:fc:8a:
d9:0c:56:35:63:66:0a:01:c3:ed:c4:ba:47:5b:27:
95:6b:6e:a4:de:c8:81:2f:7d:9a:21:c9:68:5a:01:
2d:c5:48:b5:81:fc:e1:5c:5f:40:2d:a6:d4:91:40:
44:fd:de:7a:98:12:e9:78:41:ca:05:e2:29:d5:c9:
59:e1:a2:77:8c:4d:72:b3:7f:2b:36:65:9b:2e:b5:
77:9f:ee:f8:58:13:b0:25:2d:84:18:19:03:74:8b:
d1:bc:18:b2:6e:77:ac:f0:c7:f9:be:01:bc:75:cc:
d3:b4:98:57:0d:97:9b:96:19:2a:61:a9:d8:4c:52:
c1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:0F:21:F8:43:6C:D0:36:31:56:4C:38:E4:94:0B:D9:FC:A3:F1:1C
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/880/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/880/cQ8h-ENs0DYxVkw45JQL2fyj8Rw.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.78.118.0/23
202.71.48.0/20
202.90.208.0/20
Signature Algorithm: sha256WithRSAEncryption
6c:fd:6e:60:50:32:8f:da:2a:41:bd:53:01:2c:1f:38:93:f7:
eb:62:11:6b:e7:4a:71:9f:9a:ec:07:1e:88:76:28:a0:f1:94:
62:b4:19:76:78:c0:a2:14:cb:fc:67:73:ba:d3:93:71:ef:91:
e8:e6:f2:66:0e:bf:50:bd:2c:52:3f:20:49:1b:93:02:1a:24:
8d:a9:33:5a:21:61:8d:dd:b6:55:6d:b1:5b:e9:28:f0:27:f8:
9b:5b:80:51:c7:2b:f8:ff:d0:f4:9f:41:2f:70:7a:07:5a:95:
2a:86:7d:31:0e:09:45:2f:6b:27:a1:4f:07:a0:ef:3a:50:34:
56:2f:58:0f:bc:7c:6e:ae:ed:48:92:ec:3d:63:5d:95:c3:27:
55:bd:0c:11:55:82:84:f6:1e:ff:6e:91:b2:10:0b:ae:5a:ef:
60:63:cd:c0:0d:a1:28:6b:a9:99:2c:25:94:2a:af:f1:88:95:
36:bd:a6:8d:56:cb:d3:85:7f:ca:c8:10:3e:55:17:27:f5:7e:
e4:7f:df:30:e2:80:00:c4:66:fc:77:5c:41:89:6c:b5:4c:ce:
37:42:ad:e5:12:db:56:fd:67:b9:fb:34:04:b3:58:65:a1:56:
bc:f8:9c:69:55:fe:82:f1:99:0a:d1:0f:81:ba:12:7c:df:0b:
4a:ba:3a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:16:58 2026 by rpki-client