
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/is2rHh6mM7qK0Yoqy3I2DpKAxLY.cer
File: is2rHh6mM7qK0Yoqy3I2DpKAxLY.cer (raw, json)
Hash identifier: UFtHXOzxeynSQeK/c7r8pVH3OnFSZgz2uxHTprlzdzc=
Subject key identifier: 8A:CD:AB:1E:1E:A6:33:BA:8A:D1:8A:2A:CB:72:36:0E:92:80:C4:B6
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 7449
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
CRL Distribution Point: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1003/is2rHh6mM7qK0Yoqy3I2DpKAxLY.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1003/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Thu 15 Oct 2026 01:36:22 +0000
Certificate not after: Fri 15 Oct 2027 01:30:02 +0000
Subordinate resources: IP: 202.12.30.0/24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 14:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29769 (0x7449)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Oct 15 01:36:22 2026 GMT
Not After : Oct 15 01:30:02 2027 GMT
Subject: CN=8ACDAB1E1EA633BA8AD18A2ACB72360E9280C4B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d4:bf:35:f3:e3:c9:3f:02:88:15:b9:99:3c:
59:66:2c:8b:cb:01:ea:87:76:21:d3:9d:ce:3a:82:
68:5a:39:9c:c3:36:e0:8e:05:46:dd:b7:cb:8b:25:
c7:35:7b:20:fa:b0:fb:df:b8:f1:7d:fe:b3:75:3a:
28:8b:53:f1:a1:cc:d0:26:89:78:18:06:fc:a5:03:
c9:7d:5d:eb:56:fa:76:a7:b3:57:71:e4:c1:e8:96:
19:f2:90:2d:21:b5:b4:57:fd:b7:0f:bb:3d:49:2c:
63:13:a5:a0:d5:b7:87:1b:06:28:f6:0e:f7:d5:a1:
31:6a:c8:af:e6:59:88:db:4e:5a:98:18:86:33:3f:
0e:8b:9b:83:a4:34:ca:8b:7d:4a:65:87:9b:5b:75:
e5:32:47:8a:11:83:64:7e:e1:60:6f:2e:80:01:70:
97:f0:48:b6:6c:dc:93:f4:90:68:35:ec:58:89:d6:
f8:02:67:ae:d1:95:4f:6e:2c:5c:6b:9e:46:f4:77:
35:1a:dd:60:85:8b:28:e6:8a:d8:c4:a3:ba:da:4d:
74:64:2a:12:b6:7f:7a:b1:45:2b:99:4f:db:d9:32:
d5:7e:66:27:89:10:b0:39:65:7e:4b:ea:31:b4:72:
47:d4:50:44:9f:e2:88:12:d4:9c:3b:a0:aa:05:f2:
07:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:CD:AB:1E:1E:A6:33:BA:8A:D1:8A:2A:CB:72:36:0E:92:80:C4:B6
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1003/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1003/is2rHh6mM7qK0Yoqy3I2DpKAxLY.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.12.30.0/24
Signature Algorithm: sha256WithRSAEncryption
32:3d:38:d2:82:79:23:94:ed:8d:73:25:82:bb:61:9a:e7:8d:
a7:89:e7:05:33:77:64:d8:32:4f:58:5c:ad:d2:6f:ad:93:2b:
77:d2:08:df:a0:40:f8:78:e2:a0:25:84:6c:7a:46:4a:2b:bb:
a9:7c:a2:2d:6e:c2:06:3f:00:e1:06:4d:55:df:aa:70:9f:66:
fc:7e:5f:36:27:dd:7a:74:31:cf:6a:b3:2f:c0:2e:b1:58:c1:
94:4b:52:5f:df:47:e4:f2:ce:5f:01:fc:eb:38:6b:16:8b:59:
17:3f:1d:f4:4b:10:eb:3b:ab:82:d6:fc:7e:98:c6:4a:06:ff:
77:36:98:f7:cb:63:ff:df:f0:73:0e:0e:0c:d9:cc:22:69:fe:
5a:ef:bc:7d:81:c4:38:9f:40:f0:a9:6b:8f:16:d7:67:9b:50:
1d:c4:1f:84:ec:67:c7:0e:c4:de:1d:49:ad:ac:c9:4c:18:8a:
08:c9:3c:f7:ac:a5:73:e7:3e:53:d7:0e:28:d3:5e:29:53:89:
38:e5:91:8b:a5:f5:2d:dc:36:88:72:2a:e3:16:ca:49:64:b6:
a0:18:5d:16:10:69:ac:53:f0:64:9e:9c:fb:13:c6:18:85:b0:
26:71:01:4a:91:af:69:76:4a:fa:9a:82:5f:0e:ce:96:d1:fa:
e6:ca:7d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:42:35 2026 by rpki-client