
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/iYAdvb4WiGOrDoAvDskKNSXCNHw.cer
File: iYAdvb4WiGOrDoAvDskKNSXCNHw.cer (raw, json)
Hash identifier: MZkY0lfGDPpN6CIHOTuClKZCzFPjiI3hNOMW02OaVow=
Subject key identifier: 89:80:1D:BD:BE:16:88:63:AB:0E:80:2F:0E:C9:0A:35:25:C2:34:7C
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 64F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/iYAdvb4WiGOrDoAvDskKNSXCNHw.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Sun 15 Mar 2026 01:37:53 +0000
Certificate not after: Mon 15 Mar 2027 01:30:02 +0000
Subordinate resources: IP: 2402:c800::/32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 05:36:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25847 (0x64f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Mar 15 01:37:53 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=89801DBDBE168863AB0E802F0EC90A3525C2347C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7f:64:e1:5e:fa:4b:9d:4e:f0:81:d7:45:41:
00:8c:c5:dd:d0:5e:e4:d0:5f:a7:f1:9e:6d:3f:a7:
ac:79:cf:d0:81:0a:5f:bc:42:2e:af:21:c2:88:6d:
6e:8d:0c:b6:8a:af:d2:6f:e7:d7:df:be:06:b0:48:
ec:04:77:54:cd:59:2e:87:79:a4:8b:19:6f:5b:c8:
91:c9:03:61:93:17:0f:a9:89:60:a2:88:8b:62:5d:
d7:57:0a:66:a6:4d:6d:c9:91:05:00:ce:35:55:05:
05:70:41:d7:88:ec:fd:98:08:50:67:8a:4f:49:f9:
23:cb:e8:2c:5d:74:6e:a5:ef:59:45:1e:22:8f:58:
56:e3:4d:2c:a2:6a:d8:df:dd:f6:8b:1f:56:c0:28:
f8:41:34:9c:77:65:51:49:46:55:d6:d2:4f:ff:43:
24:5c:35:61:1e:1a:99:c6:51:c3:24:c0:9c:16:45:
34:db:bd:6c:5a:87:38:ea:6e:d7:dc:0a:00:92:7a:
7e:77:ae:bd:54:8d:c3:16:81:b0:18:c8:46:ea:69:
71:e3:55:8b:ea:80:1b:40:84:cf:a4:c2:03:73:d1:
c9:e1:b6:3f:e9:4d:28:bf:8c:35:02:9f:00:37:4a:
6d:34:0e:5f:7d:11:01:27:3a:85:ab:a2:d5:ac:6c:
73:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:80:1D:BD:BE:16:88:63:AB:0E:80:2F:0E:C9:0A:35:25:C2:34:7C
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/iYAdvb4WiGOrDoAvDskKNSXCNHw.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:c800::/32
Signature Algorithm: sha256WithRSAEncryption
35:61:92:10:f8:00:d2:92:56:a5:53:16:4f:ee:1d:13:5b:a8:
ab:95:a1:b4:75:c4:15:ce:d0:ca:82:91:a3:16:94:d1:3d:88:
96:72:9d:c2:19:7f:f3:7c:d8:2c:89:03:1a:88:e8:0b:a2:61:
8e:9a:bc:56:cb:3c:89:10:78:ca:28:27:48:8b:b9:91:f2:07:
34:27:72:9c:6f:fd:f5:1e:6b:17:d8:60:88:23:b2:9f:61:d6:
7b:97:d2:45:d7:90:7a:65:9c:24:5f:68:ab:28:56:b7:bc:8a:
da:a7:fd:8c:0b:3f:22:1c:af:ac:58:f5:fa:c9:04:1f:44:ca:
78:5e:b3:41:3b:35:e6:f9:eb:0f:73:0a:c9:81:db:98:d8:6d:
19:65:06:6c:47:86:47:03:bc:d9:69:10:b1:05:d3:93:0b:56:
de:7e:bf:35:7d:9d:6a:b7:f4:90:a7:5a:61:8b:c1:01:79:99:
47:3a:de:27:e7:d9:84:da:34:40:97:a7:ec:be:d4:30:50:df:
a3:c8:1d:b3:0f:9e:1b:9b:a7:a0:eb:ae:75:62:4f:9e:54:59:
90:5f:5d:0d:ba:21:19:65:6e:01:7f:b3:d7:11:87:37:40:03:
bb:ef:d7:a0:2d:21:06:6f:da:5f:7e:63:18:03:2c:c2:9d:6a:
1c:38:fe:41
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgICZPcwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC
NTIwREFBQzdEQThGMB4XDTI2MDMxNTAxMzc1M1oXDTI3MDMxNTAxMzAwMlowMzEx
MC8GA1UEAxMoODk4MDFEQkRCRTE2ODg2M0FCMEU4MDJGMEVDOTBBMzUyNUMyMzQ3
QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALZ/ZOFe+kudTvCB10VB
AIzF3dBe5NBfp/GebT+nrHnP0IEKX7xCLq8hwohtbo0Mtoqv0m/n19++BrBI7AR3
VM1ZLod5pIsZb1vIkckDYZMXD6mJYKKIi2Jd11cKZqZNbcmRBQDONVUFBXBB14js
/ZgIUGeKT0n5I8voLF10bqXvWUUeIo9YVuNNLKJq2N/d9osfVsAo+EE0nHdlUUlG
VdbST/9DJFw1YR4amcZRwyTAnBZFNNu9bFqHOOpu19wKAJJ6fneuvVSNwxaBsBjI
RuppceNVi+qAG0CEz6TCA3PRyeG2P+lNKL+MNQKfADdKbTQOX30RASc6haui1axs
c2cCAwEAAaOCAowwggKIMB0GA1UdDgQWBBSJgB29vhaIY6sOgC8OyQo1JcI0fDAf
BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0
b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa
dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j
Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0
NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G
A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw
gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9hcC9BOTFBNzM4MTAwMDAvMzAwOTEvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw
a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMDkxL2lZ
QWR2YjRXaUdPckRvQXZEc2tLTlNYQ05Idy5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz
Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv
bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAsgAMA0GCSqGSIb3
DQEBCwUAA4IBAQA1YZIQ+ADSklalUxZP7h0TW6irlaG0dcQVztDKgpGjFpTRPYiW
cp3CGX/zfNgsiQMaiOgLomGOmrxWyzyJEHjKKCdIi7mR8gc0J3Kcb/31HmsX2GCI
I7KfYdZ7l9JF15B6ZZwkX2irKFa3vIrap/2MCz8iHK+sWPX6yQQfRMp4XrNBOzXm
+esPcwrJgduY2G0ZZQZsR4ZHA7zZaRCxBdOTC1befr81fZ1qt/SQp1phi8EBeZlH
Ot4n59mE2jRAl6fsvtQwUN+jyB2zD54bm6eg6651Yk+eVFmQX10NuiEZZW4Bf7PX
EYc3QAO779egLSEGb9pffmMYAyzCnWocOP5B
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:54:09 2026 by rpki-client