
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/if8a6GSr-fEmFOMHZAT1VtVv-oI.cer
File: if8a6GSr-fEmFOMHZAT1VtVv-oI.cer (raw, json)
Hash identifier: GTgGtyydxhLo2Zf+U2jy4VRFK1JcwSCzf5Mf1dLSPhk=
Subject key identifier: 89:FF:1A:E8:64:AB:F9:F1:26:14:E3:07:64:04:F5:56:D5:6F:FA:82
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 6E0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20250/if8a6GSr-fEmFOMHZAT1VtVv-oI.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20250/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Wed 15 Jul 2026 01:42:17 +0000
Certificate not after: Thu 15 Jul 2027 01:30:02 +0000
Subordinate resources: IP: 203.178.12.0/24
IP: 210.171.160.0/20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28170 (0x6e0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Jul 15 01:42:17 2026 GMT
Not After : Jul 15 01:30:02 2027 GMT
Subject: CN=89FF1AE864ABF9F12614E3076404F556D56FFA82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1e:ed:d1:27:40:4b:c1:6f:73:47:17:1f:17:
92:46:b9:1f:9f:49:8b:28:68:f3:71:0d:7f:50:9d:
3d:de:0f:bc:fb:c4:ed:f7:12:7e:78:b5:5c:a4:73:
d3:c8:52:60:19:52:81:12:ba:c8:65:31:cc:1b:56:
ae:c6:06:7a:c4:c0:a4:f6:e1:a0:46:fd:2e:7c:36:
7c:b1:fb:42:f3:2d:4b:cf:8d:45:23:db:0e:8c:2b:
85:57:1f:d5:c1:14:31:ea:ac:1a:c2:be:f9:52:cd:
04:b2:9d:db:96:1e:8d:26:db:ab:94:8b:10:7c:1a:
a6:c2:79:ef:0e:3a:a0:de:e4:f3:4c:40:ee:3d:68:
1b:21:c1:4c:1b:65:fe:51:83:78:22:42:52:41:70:
39:53:58:7d:b1:72:81:f1:43:92:14:d8:b0:c2:18:
45:66:46:40:43:83:ef:f6:c0:ad:23:5f:3a:cf:15:
8d:84:44:56:bf:88:a0:65:30:e4:e5:12:ac:f6:aa:
6f:53:2c:cd:c0:c3:17:a3:1f:f4:7a:1b:7a:88:08:
e1:cc:4c:58:99:d7:ae:f4:7c:5f:55:32:00:d5:4c:
0d:d4:2b:c2:9c:04:7e:cc:7e:2a:99:5d:d0:36:22:
97:72:20:72:a0:66:a4:cd:6a:75:b4:eb:6c:6a:d8:
20:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:FF:1A:E8:64:AB:F9:F1:26:14:E3:07:64:04:F5:56:D5:6F:FA:82
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20250/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20250/if8a6GSr-fEmFOMHZAT1VtVv-oI.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.178.12.0/24
210.171.160.0/20
Signature Algorithm: sha256WithRSAEncryption
06:29:0d:15:9c:a8:45:0b:c8:c4:df:48:e8:0e:20:d9:11:3b:
af:f0:d9:e5:27:8e:01:64:4c:f9:b2:ca:03:99:c6:91:e3:f9:
6d:78:bf:de:97:cc:27:77:07:78:cd:d1:ff:83:16:2f:20:3a:
d1:67:79:32:a7:6e:19:af:eb:8c:00:2f:5b:30:a9:de:e0:47:
f1:93:f8:2c:f1:a2:31:2a:ee:5c:51:dd:a2:55:05:de:29:9e:
00:5b:84:36:7d:32:55:b5:80:79:f0:9a:73:2a:ae:44:1d:05:
dd:d5:93:4b:c6:f5:b7:e5:5d:e8:55:e7:2c:e5:34:bc:7e:89:
de:5a:7a:3a:ef:f4:81:d6:c5:46:e2:85:ab:69:ac:4e:ec:e0:
bc:26:c8:92:38:5d:82:80:52:1c:1c:c4:c6:45:18:8c:79:f0:
4c:54:24:dc:dc:95:e4:a1:43:8d:91:8f:4d:dc:a3:ad:65:97:
4d:86:fb:6d:44:70:6f:c4:3b:9f:d7:ca:f5:0b:3d:79:38:f8:
82:a5:87:bb:22:a4:22:1c:30:70:c7:a0:ea:5f:58:6d:c5:d0:
89:6f:c9:e2:f6:e5:18:b5:91:0b:28:b3:1f:a8:b4:8c:6a:b1:
47:9b:e9:0d:0c:34:30:cc:1d:cd:6d:e7:fd:a8:bf:27:27:c6:
ae:f5:11:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:12:26 2026 by rpki-client