
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/lMLwvhgAiadZPZ7TfQToUu1aJZo.cer
File: lMLwvhgAiadZPZ7TfQToUu1aJZo.cer (raw, json)
Hash identifier: K/KgEn19ZDGCLvSMNWYBDmZOK80LtyPZ3x69cOj0h54=
Subject key identifier: 94:C2:F0:BE:18:00:89:A7:59:3D:9E:D3:7D:04:E8:52:ED:5A:25:9A
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 6E99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/lMLwvhgAiadZPZ7TfQToUu1aJZo.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Wed 15 Jul 2026 01:46:51 +0000
Certificate not after: Thu 15 Jul 2027 01:30:02 +0000
Subordinate resources: IP: 103.157.156.0/23
IP: 202.79.240.0/21
IP: 210.134.128.0 -- 210.134.147.255
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 00:40:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28313 (0x6e99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Jul 15 01:46:51 2026 GMT
Not After : Jul 15 01:30:02 2027 GMT
Subject: CN=94C2F0BE180089A7593D9ED37D04E852ED5A259A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:90:b3:58:29:47:a3:0d:dc:76:19:de:86:11:
06:1c:78:a7:99:e6:b0:39:77:37:1e:69:db:37:5f:
bc:85:47:45:01:78:46:17:fe:29:6f:8d:6f:a9:dc:
37:38:1e:9d:90:e2:f3:7e:c8:29:62:f8:11:4a:b0:
a1:1b:2d:dd:87:fa:02:70:63:4a:ef:ed:d5:c1:5c:
1c:7e:df:97:f0:c4:95:c8:e2:9e:97:5e:03:36:6a:
73:ce:8c:a5:89:ee:08:4e:f1:8f:74:0b:8f:ec:37:
88:fa:bb:a1:bb:49:2c:e0:fa:0d:f5:dc:b7:9b:0d:
1e:2b:d6:39:70:cb:9d:9f:09:ce:7e:f7:ad:03:78:
32:a2:24:6a:0c:69:6d:95:ba:69:38:be:ca:6b:a4:
7b:41:b8:dc:d2:0a:af:a9:ec:60:f9:ad:2d:0d:da:
88:3f:e9:91:67:07:d0:75:0f:20:2b:4e:00:f8:10:
b2:43:fd:14:16:94:ed:a5:25:11:9b:7f:75:31:17:
a6:a9:dd:c1:e9:9b:a6:18:c6:2d:a4:b2:8f:3d:01:
3b:61:5f:aa:4c:18:ba:a1:5d:96:a1:96:de:7f:6c:
7f:a3:24:0d:cb:2f:e4:92:6c:32:8a:9e:b5:58:cf:
1d:2d:fc:34:fe:33:56:37:3b:66:fb:25:02:5c:b1:
61:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C2:F0:BE:18:00:89:A7:59:3D:9E:D3:7D:04:E8:52:ED:5A:25:9A
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/lMLwvhgAiadZPZ7TfQToUu1aJZo.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.157.156.0/23
202.79.240.0/21
210.134.128.0-210.134.147.255
Signature Algorithm: sha256WithRSAEncryption
3c:79:f9:82:b8:a1:e1:8f:ae:cb:5a:42:ff:5a:d8:ca:4b:09:
a4:32:28:e8:ef:1c:8d:9c:c1:88:f7:ca:6e:10:6e:e0:17:50:
b4:7f:13:c2:62:e7:4f:c7:5e:94:c4:28:db:d5:30:34:c1:7a:
f2:d2:d0:20:84:17:b6:db:14:20:35:19:03:2f:74:cf:7c:90:
e1:45:0b:81:da:ac:9e:cf:e1:0d:41:51:87:98:5e:39:8a:9b:
71:7f:34:a9:cc:44:a1:3b:4b:0f:bb:67:0f:fe:63:7a:3e:53:
8e:59:c9:0a:5f:3e:1d:fa:1c:b0:a1:bc:5d:2e:bc:6b:30:9a:
c2:7d:08:5e:85:3a:55:3d:00:04:4f:1b:24:c4:fc:bb:b4:07:
06:6c:7f:48:ff:ed:6d:6e:3d:d7:cd:d9:20:60:bb:0f:b7:03:
43:cc:13:1a:89:fa:f8:50:26:ac:e4:dd:ac:12:a9:43:d7:47:
84:5a:64:ea:24:ef:2f:f9:a8:d4:d0:64:09:ec:1b:4a:49:74:
cc:c3:e7:96:b5:90:69:ef:ec:46:21:85:a3:79:00:6b:bc:e9:
3c:4b:5a:80:30:02:e1:c0:4e:17:7e:e0:f4:cb:19:77:9b:cf:
eb:6a:b6:8b:7a:35:84:15:a8:42:2e:c5:b7:78:ab:a0:0d:bb:
2e:c9:ac:6a
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgICbpkwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC
NTIwREFBQzdEQThGMB4XDTI2MDcxNTAxNDY1MVoXDTI3MDcxNTAxMzAwMlowMzEx
MC8GA1UEAxMoOTRDMkYwQkUxODAwODlBNzU5M0Q5RUQzN0QwNEU4NTJFRDVBMjU5
QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMOQs1gpR6MN3HYZ3oYR
Bhx4p5nmsDl3Nx5p2zdfvIVHRQF4Rhf+KW+Nb6ncNzgenZDi837IKWL4EUqwoRst
3Yf6AnBjSu/t1cFcHH7fl/DElcjinpdeAzZqc86MpYnuCE7xj3QLj+w3iPq7obtJ
LOD6DfXct5sNHivWOXDLnZ8Jzn73rQN4MqIkagxpbZW6aTi+ymuke0G43NIKr6ns
YPmtLQ3aiD/pkWcH0HUPICtOAPgQskP9FBaU7aUlEZt/dTEXpqndwembphjGLaSy
jz0BO2FfqkwYuqFdlqGW3n9sf6MkDcsv5JJsMoqetVjPHS38NP4zVjc7ZvslAlyx
YccCAwEAAaOCApowggKWMB0GA1UdDgQWBBSUwvC+GACJp1k9ntN9BOhS7VolmjAf
BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0
b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa
dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j
Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0
NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G
A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB
7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw
L2FwL0E5MUE3MzgxMDAwMC85MDMvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt
cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzkwMy9sTUx3dmhn
QWlhZFpQWjdUZlFUb1V1MWFKWm8ubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw
a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s
MDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQBZ52cAwQDyk/wMAwDBAfShoAD
BALShpAwDQYJKoZIhvcNAQELBQADggEBADx5+YK4oeGPrstaQv9a2MpLCaQyKOjv
HI2cwYj3ym4QbuAXULR/E8Ji50/HXpTEKNvVMDTBevLS0CCEF7bbFCA1GQMvdM98
kOFFC4HarJ7P4Q1BUYeYXjmKm3F/NKnMRKE7Sw+7Zw/+Y3o+U45ZyQpfPh36HLCh
vF0uvGswmsJ9CF6FOlU9AARPGyTE/Lu0BwZsf0j/7W1uPdfN2SBguw+3A0PMExqJ
+vhQJqzk3awSqUPXR4RaZOok7y/5qNTQZAnsG0pJdMzD55a1kGnv7EYhhaN5AGu8
6TxLWoAwAuHAThd+4PTLGXebz+tqtot6NYQVqEIuxbd4q6ANuy7JrGo=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:39:37 2026 by rpki-client