
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
File: xgB2_CjwTeuYF6NIIiaULL7x-A0.cer (raw, json)
Hash identifier: Six6qWH4TUNjQCkPHr/BL9JKR3bPYazdqOs1KIqeuh0=
Subject key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 6581
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Sun 15 Mar 2026 01:42:04 +0000
Certificate not after: Mon 15 Mar 2027 01:30:02 +0000
Subordinate resources: IP: 133.181.0.0 -- 133.185.255.255
IP: 202.244.202.0/23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 04:30:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25985 (0x6581)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Mar 15 01:42:04 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ff:d9:7e:c3:fc:65:53:da:a1:dc:26:43:2d:
37:37:55:98:9e:00:11:1e:4b:d8:d2:0e:2e:d0:4c:
86:99:c5:61:e7:ed:8e:a2:d9:f8:7b:d8:7a:be:90:
9f:b5:7e:12:8e:93:06:61:cc:9f:21:43:3a:c7:1a:
0c:56:a1:1b:bf:73:9c:06:f0:98:8b:bb:9f:6e:ef:
37:30:5c:31:64:91:47:5d:7d:64:8d:5a:e0:f8:b6:
fa:be:50:00:31:e5:df:62:f8:5c:db:b2:ec:5b:91:
2a:17:bf:40:ee:84:dc:44:dc:dd:0f:62:dc:7a:f8:
43:7e:03:85:f6:5f:cc:4a:f4:41:a7:76:89:04:8e:
16:61:99:91:d6:8a:a5:19:e3:25:1c:9c:71:83:73:
9e:fb:f1:ee:2a:27:60:fb:3e:f8:10:50:82:27:54:
09:c3:af:f1:90:6b:f8:a0:f6:c5:e6:a7:94:e2:c0:
0a:66:7e:4c:45:bf:7f:68:85:ff:b5:ce:f3:68:c8:
59:3d:34:2d:e3:5e:2e:bb:5f:f9:17:da:1e:d7:36:
c6:8e:8b:f5:d8:80:b6:1e:26:90:62:0d:44:c7:b1:
f4:41:11:91:f9:a3:f7:e7:24:ea:65:63:93:74:03:
30:6c:ca:64:cf:63:35:67:0a:13:12:aa:99:fe:8a:
c8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
133.181.0.0-133.185.255.255
202.244.202.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:e8:b8:e4:0b:22:2c:61:a1:8f:b8:7d:2b:ac:18:e4:bc:33:
7b:76:42:2e:9c:95:62:e1:32:73:e0:f9:d5:b6:fa:a2:de:05:
54:a7:ea:24:02:07:1d:c0:01:c8:37:0d:c2:79:c5:36:64:b2:
40:73:cc:8e:2e:d0:c2:a5:a7:b8:85:f3:52:82:ea:80:0f:65:
da:ac:72:4f:89:89:db:78:65:ca:ba:17:50:8a:a9:2c:ec:8d:
2c:05:d8:16:1d:18:86:86:2f:c7:75:8e:04:5d:cd:56:d0:9f:
76:ee:79:e5:01:c3:e1:51:d0:24:09:7f:3a:59:d7:65:81:57:
5c:4d:af:00:4d:d8:21:0f:7a:d0:05:93:8c:e1:1a:88:2f:6a:
e1:e9:22:86:ca:d2:be:12:32:45:1b:bb:aa:b1:5c:78:74:90:
83:54:cf:34:0a:81:8a:01:73:7d:a4:c3:71:88:87:3a:00:01:
f9:d1:02:2b:ea:78:86:79:2d:f1:fb:68:78:91:32:79:d6:5c:
81:9e:2a:2f:bb:d2:fc:d2:c3:7c:38:fd:0a:33:88:14:f7:43:
2c:76:e9:5c:b3:89:f4:82:07:2e:b6:61:1e:02:6e:ea:22:33:
d5:42:80:b5:a6:2b:83:75:c1:01:a7:fd:0c:83:b7:3d:33:67:
04:97:af:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:23:22 2026 by rpki-client