
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/vWkALQ6LftLD0dXQeuaSLHSX8C0.cer
File: vWkALQ6LftLD0dXQeuaSLHSX8C0.cer (raw, json)
Hash identifier: mE81ByS/u7knJdQPvAKlJr/+LCJe07Nfl/kW0Ld2w5U=
Subject key identifier: BD:69:00:2D:0E:8B:7E:D2:C3:D1:D5:D0:7A:E6:92:2C:74:97:F0:2D
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 5B98
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/vWkALQ6LftLD0dXQeuaSLHSX8C0.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Wed 15 Oct 2025 01:42:54 +0000
Certificate not after: Thu 15 Oct 2026 01:30:02 +0000
Subordinate resources: IP: 61.195.48.0/20
IP: 119.252.32.0/19
IP: 124.150.152.0/21
IP: 202.67.48.0/20
IP: 219.117.144.0/20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 17:27:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23448 (0x5b98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Oct 15 01:42:54 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=BD69002D0E8B7ED2C3D1D5D07AE6922C7497F02D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:dd:fa:48:01:7c:79:d0:be:35:4c:da:3f:f8:
ac:ad:40:97:d3:c8:ba:30:1a:53:47:ac:1f:a4:80:
b4:1d:13:ed:3c:85:8c:b4:cb:db:62:fe:d3:0e:ec:
74:2f:ac:75:69:6d:0c:1d:29:58:6e:2b:2f:ce:c0:
03:69:bf:e2:1c:f4:44:9b:3a:ed:7f:fe:22:61:c5:
95:00:9b:41:15:e9:2a:2b:03:0d:aa:33:be:83:7a:
c7:fe:8d:f2:ba:31:bc:f8:fe:00:52:9f:a7:b6:a9:
73:f6:b9:a1:f6:5e:67:e6:82:82:22:f7:83:25:56:
00:b0:d3:cb:f5:3c:0f:76:a0:ae:6e:ef:55:ec:f5:
b5:4b:02:bd:51:6f:23:80:0c:e4:32:0c:fe:53:08:
b5:62:e2:af:1e:d3:65:9c:90:96:b1:32:07:98:31:
23:9d:73:80:02:f2:9a:7f:62:40:aa:af:b6:db:e8:
b8:92:d7:8a:be:c1:f2:2a:e7:39:9f:51:0c:94:03:
2b:0a:49:03:6e:14:98:01:5d:b6:ab:01:5f:05:87:
77:8b:48:9b:ce:68:8e:b6:9e:83:85:e3:9a:60:45:
cb:e6:27:18:fe:3d:e0:c8:c4:67:9e:db:37:9f:eb:
2b:17:d5:b6:66:bb:8c:3d:8f:2d:c2:d2:97:ab:1b:
83:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:69:00:2D:0E:8B:7E:D2:C3:D1:D5:D0:7A:E6:92:2C:74:97:F0:2D
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/vWkALQ6LftLD0dXQeuaSLHSX8C0.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.195.48.0/20
119.252.32.0/19
124.150.152.0/21
202.67.48.0/20
219.117.144.0/20
Signature Algorithm: sha256WithRSAEncryption
0a:92:cc:a4:c9:6c:75:a4:8f:7f:40:05:d1:ca:12:bf:ed:a4:
12:ad:16:13:c7:0a:59:6a:ab:d8:05:84:2c:1b:03:1e:17:19:
57:2c:d6:8a:df:ee:0e:cb:aa:f0:c3:9f:b4:9f:94:6f:9d:8d:
b3:6e:26:58:1f:3e:08:c2:7f:dd:0f:9d:7c:10:19:8e:a9:0f:
d4:55:46:83:8a:9a:c6:70:f4:ad:46:58:06:82:21:bf:b8:e9:
c3:ca:18:46:3b:16:2d:6c:13:07:75:46:06:cb:e0:cf:9e:af:
d5:e1:97:3e:4b:c5:8e:37:52:87:03:29:21:69:e9:73:7a:b2:
86:ea:49:cf:dd:b4:a3:f8:b1:34:a6:84:9e:fb:81:30:6f:04:
02:60:ab:6e:eb:11:54:de:53:13:a9:88:56:4b:51:36:9e:34:
04:a9:76:b2:ed:62:23:aa:f2:f2:2c:9d:0e:1e:f3:3b:6e:67:
f2:0a:13:10:16:99:3a:c7:05:c9:22:25:7c:ce:dd:58:ab:f8:
a6:41:b0:7e:d0:18:f0:5a:2f:bd:a1:f1:b5:c8:49:b5:c1:ae:
c9:9f:c9:e1:96:2c:31:a7:69:e8:13:65:08:15:a1:fc:9b:bd:
2d:43:b5:4b:cc:77:7f:47:a3:74:bc:cc:77:37:52:0c:0f:17:
bc:9d:71:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:13:47 2025 by rpki-client