
Certificate
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
File: -way5KnVZ-t9gP9Zp1X9KDv7E6s.cer (raw, json)
Hash identifier: RGO+nQVTzZpRfyLHdKMWtIaJtuucLYl3aAYdivHuIwo=
Subject key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 47A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Sat 15 Mar 2025 01:36:01 +0000
Certificate not after: Sun 15 Mar 2026 01:30:03 +0000
Subordinate resources: IP: 14.193.0.0/16
IP: 27.113.248.0/22
IP: 27.116.0.0/20
IP: 27.126.64.0 -- 27.126.143.255
IP: 49.250.0.0/15
IP: 58.85.0.0/16
IP: 61.46.0.0/16
IP: 61.115.128.0/18
IP: 61.125.64.0/18
IP: 61.192.0.0/17
IP: 61.203.224.0/19
IP: 61.205.128.0/18
IP: 61.206.96.0/20
IP: 61.211.144.0/20
IP: 61.215.128.0 -- 61.215.175.255
IP: 103.3.4.0/22
IP: 103.55.196.0/22
IP: 103.192.68.0/22
IP: 110.4.48.0/20
IP: 110.92.80.0/20
IP: 110.93.0.0/21
IP: 110.93.96.0/20
IP: 110.172.0.0/20
IP: 110.173.240.0/20
IP: 110.232.0.0/19
IP: 110.232.128.0/21
IP: 111.90.0.0/17
IP: 111.125.144.0/21
IP: 112.137.32.0/20
IP: 112.137.64.0/18
IP: 113.52.16.0/20
IP: 113.61.112.0/20
IP: 113.197.16.0/20
IP: 114.69.160.0/20
IP: 114.134.112.0/20
IP: 114.134.192.0/18
IP: 114.142.128.0/21
IP: 114.198.192.0 -- 114.198.231.255
IP: 115.42.96.0/20
IP: 116.70.128.0/18
IP: 117.53.0.0 -- 117.53.39.255
IP: 118.83.0.0/16
IP: 118.86.0.0/15
IP: 119.24.0.0 -- 119.26.255.255
IP: 119.82.192.0/20
IP: 119.161.112.0/21
IP: 122.50.32.0/19
IP: 122.102.128.0/17
IP: 122.196.0.0/15
IP: 122.255.128.0/17
IP: 123.98.224.0/19
IP: 124.195.144.0/20
IP: 125.4.0.0/16
IP: 125.62.240.0/20
IP: 175.41.64.0/18
IP: 175.103.12.0/22
IP: 175.111.120.0/21
IP: 180.92.32.0/19
IP: 180.131.152.0/21
IP: 180.131.192.0/20
IP: 180.149.160.0/19
IP: 180.220.0.0/15
IP: 182.50.192.0 -- 182.50.239.255
IP: 202.43.16.0/20
IP: 202.43.68.0/22
IP: 202.57.224.0/20
IP: 202.72.64.0/20
IP: 202.78.176.0/20
IP: 202.83.184.0/21
IP: 202.138.80.0/20
IP: 202.148.240.0/20
IP: 202.157.0.0/18
IP: 202.162.128.0/19
IP: 202.178.80.0/20
IP: 202.179.224.0/20
IP: 202.180.176.0/20
IP: 203.89.32.0/19
IP: 203.114.248.0/22
IP: 203.124.64.0/19
IP: 203.153.56.0/22
IP: 203.217.180.0/22
IP: 210.2.192.0/18
IP: 210.135.192.0/19
IP: 210.156.64.0/20
IP: 210.172.240.0/20
IP: 210.211.32.0/20
IP: 210.228.0.0/20
IP: 211.1.176.0/20
IP: 211.19.208.0/20
IP: 211.120.128.0/18
IP: 211.124.0.0/16
IP: 211.135.0.0/17
IP: 218.45.112.0/20
IP: 218.219.80.0/20
IP: 218.220.0.0/16
IP: 219.100.24.0/22
IP: 219.100.152.0/22
IP: 219.105.80.0 -- 219.105.127.255
IP: 219.111.192.0/20
IP: 219.112.128.0/19
IP: 219.112.192.0/19
IP: 219.113.96.0/20
IP: 219.114.192.0 -- 219.115.255.255
IP: 219.117.0.0/20
IP: 219.117.160.0/19
IP: 219.124.16.0/20
IP: 219.124.224.0/19
IP: 220.208.64.0/18
IP: 221.132.128.0/18
IP: 223.165.20.0/22
IP: 223.165.32.0/19
IP: 223.223.208.0/21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Apr 2025 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18340 (0x47a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000
Validity
Not Before: Mar 15 01:36:01 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f3:64:ed:60:7f:80:d9:15:6a:03:ce:9a:d3:
6c:2b:0e:d4:67:e0:ab:ed:9d:61:d7:9c:9d:9c:53:
06:87:a4:4c:0a:ae:d2:f2:3d:50:d6:58:14:71:38:
bf:01:d3:bf:a0:7b:9d:6d:35:30:6d:99:8e:9d:59:
1c:75:61:42:9c:47:55:a1:4e:76:58:f6:81:d7:56:
6f:ab:06:1a:f7:61:9d:e4:31:b3:65:f4:da:d2:c1:
4a:c0:68:b8:91:0e:fa:73:14:26:b2:db:43:bf:a6:
c0:fe:12:8c:d4:a3:ce:ac:7d:57:43:8d:6d:7c:88:
8c:36:6e:69:37:c1:b5:f0:31:c4:4e:41:30:13:0c:
cb:a1:37:60:de:29:cb:d0:ae:08:74:e2:f9:92:cc:
53:29:ae:9f:03:61:be:f1:1b:5c:eb:6d:13:c8:eb:
8f:28:a9:a9:7d:ee:62:07:e4:88:d8:ac:db:2e:7c:
e6:2a:ac:43:a3:76:5c:31:9a:23:81:71:3f:2f:dd:
ee:64:cb:d6:0d:25:90:c1:4e:97:98:18:2c:76:51:
ca:a3:4e:94:2b:95:47:b0:0e:bd:b5:e2:aa:2b:a4:
65:9c:07:1e:59:57:9b:88:88:f5:b5:0e:1d:78:ad:
68:12:5e:57:3c:33:c7:46:a2:18:be:4c:6c:00:40:
23:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.193.0.0/16
27.113.248.0/22
27.116.0.0/20
27.126.64.0-27.126.143.255
49.250.0.0/15
58.85.0.0/16
61.46.0.0/16
61.115.128.0/18
61.125.64.0/18
61.192.0.0/17
61.203.224.0/19
61.205.128.0/18
61.206.96.0/20
61.211.144.0/20
61.215.128.0-61.215.175.255
103.3.4.0/22
103.55.196.0/22
103.192.68.0/22
110.4.48.0/20
110.92.80.0/20
110.93.0.0/21
110.93.96.0/20
110.172.0.0/20
110.173.240.0/20
110.232.0.0/19
110.232.128.0/21
111.90.0.0/17
111.125.144.0/21
112.137.32.0/20
112.137.64.0/18
113.52.16.0/20
113.61.112.0/20
113.197.16.0/20
114.69.160.0/20
114.134.112.0/20
114.134.192.0/18
114.142.128.0/21
114.198.192.0-114.198.231.255
115.42.96.0/20
116.70.128.0/18
117.53.0.0-117.53.39.255
118.83.0.0/16
118.86.0.0/15
119.24.0.0-119.26.255.255
119.82.192.0/20
119.161.112.0/21
122.50.32.0/19
122.102.128.0/17
122.196.0.0/15
122.255.128.0/17
123.98.224.0/19
124.195.144.0/20
125.4.0.0/16
125.62.240.0/20
175.41.64.0/18
175.103.12.0/22
175.111.120.0/21
180.92.32.0/19
180.131.152.0/21
180.131.192.0/20
180.149.160.0/19
180.220.0.0/15
182.50.192.0-182.50.239.255
202.43.16.0/20
202.43.68.0/22
202.57.224.0/20
202.72.64.0/20
202.78.176.0/20
202.83.184.0/21
202.138.80.0/20
202.148.240.0/20
202.157.0.0/18
202.162.128.0/19
202.178.80.0/20
202.179.224.0/20
202.180.176.0/20
203.89.32.0/19
203.114.248.0/22
203.124.64.0/19
203.153.56.0/22
203.217.180.0/22
210.2.192.0/18
210.135.192.0/19
210.156.64.0/20
210.172.240.0/20
210.211.32.0/20
210.228.0.0/20
211.1.176.0/20
211.19.208.0/20
211.120.128.0/18
211.124.0.0/16
211.135.0.0/17
218.45.112.0/20
218.219.80.0/20
218.220.0.0/16
219.100.24.0/22
219.100.152.0/22
219.105.80.0-219.105.127.255
219.111.192.0/20
219.112.128.0/19
219.112.192.0/19
219.113.96.0/20
219.114.192.0-219.115.255.255
219.117.0.0/20
219.117.160.0/19
219.124.16.0/20
219.124.224.0/19
220.208.64.0/18
221.132.128.0/18
223.165.20.0/22
223.165.32.0/19
223.223.208.0/21
Signature Algorithm: sha256WithRSAEncryption
7a:a8:8c:4a:f7:a0:8b:11:29:32:d9:9e:ce:49:88:a8:f9:23:
1e:e8:68:6d:48:f9:81:88:3c:24:1f:9b:63:f2:64:a5:48:af:
35:bf:3a:ee:f1:1e:07:21:5b:7f:ce:b8:3d:03:02:f3:aa:d8:
c0:d1:2d:9a:88:a1:a0:54:72:61:7a:5b:9c:3f:d6:9b:56:26:
31:30:2f:9a:56:9b:f3:69:08:25:9a:57:29:a7:ea:99:b5:f3:
18:6b:45:95:4f:ab:af:fa:d4:13:9b:c8:95:d2:cc:30:7d:63:
94:9f:32:4e:21:2c:7c:0a:9e:1c:56:ac:6c:a0:a0:22:f2:b0:
f5:70:e5:e9:2b:ef:c5:85:f7:96:ad:3a:64:07:d3:06:35:55:
68:ca:33:0c:b7:0d:24:bf:47:14:04:25:05:81:69:26:52:c1:
90:df:c0:fb:43:43:c8:52:16:f5:d5:a4:46:f7:15:ae:b0:4c:
ad:c3:12:d8:86:1d:d8:85:05:cb:35:ed:12:04:e2:47:9b:8f:
a4:3f:1f:ea:c3:7f:ef:74:8b:15:8a:8c:9c:5f:49:6e:52:33:
71:b8:a0:43:11:6e:60:1a:d6:8a:ca:a3:26:29:6b:dc:e5:7f:
a6:b1:45:68:9c:4d:2f:bd:cd:09:2a:4c:8f:d2:11:25:8e:8f:
ab:78:25:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:21:25 2025 by rpki-client