Certificate
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/3YKdZG1T7PKYlQtodTLekm7H68A.cer
File: 3YKdZG1T7PKYlQtodTLekm7H68A.cer (raw, json)
Hash identifier: iSxElkrr1MIKmcABm68XF7J/Nx6QS92rmhW5aRONS+w=
Subject key identifier: DD:82:9D:64:6D:53:EC:F2:98:95:0B:68:75:32:DE:92:6E:C7:EB:C0
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 4701
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/3YKdZG1T7PKYlQtodTLekm7H68A.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Sat 15 Mar 2025 01:32:37 +0000
Certificate not after: Sun 15 Mar 2026 01:30:03 +0000
Subordinate resources: IP: 103.141.34.0/23
IP: 115.31.80.0/21
IP: 202.84.48.0/20
IP: 202.226.56.0/22
IP: 211.14.200.0/21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18177 (0x4701)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000
Validity
Not Before: Mar 15 01:32:37 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=DD829D646D53ECF298950B687532DE926EC7EBC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:37:d4:1b:95:3d:1b:8f:cf:21:bf:c3:20:95:
b0:dc:ac:ad:af:20:81:9a:3f:07:56:30:59:ff:8d:
f9:e9:59:1b:ac:fe:04:ed:90:13:44:97:12:16:26:
e6:3c:8a:14:4c:47:3f:ce:8d:31:61:0f:e3:40:5e:
09:da:ac:03:e9:c0:4a:87:dc:66:a3:ee:d7:94:2f:
e2:a6:18:f7:8a:2c:ab:c3:6b:4a:d8:ca:60:ef:bc:
42:75:69:a4:b3:ba:bc:81:ea:a3:9b:dc:94:94:73:
53:96:18:f5:6d:5d:0f:0e:4e:02:4b:df:59:ce:31:
1c:aa:87:58:ab:0d:81:13:3a:e9:0e:56:46:3b:f8:
0a:d7:31:69:7e:e5:73:4f:13:a3:9d:e1:75:73:e4:
3a:d0:5d:57:84:a4:ba:7e:94:ac:21:16:5b:0c:59:
74:77:d6:21:62:32:74:b2:86:e2:ee:bc:b8:7b:ff:
e4:f8:4a:59:d3:3d:00:30:a6:ad:e0:22:16:90:5d:
c1:44:ad:1c:0f:7e:be:04:ed:da:fa:53:2b:b5:ba:
e1:94:54:7e:0d:38:48:5d:a2:e8:17:0e:73:14:9f:
d6:48:b4:b6:2b:91:74:8d:50:45:bc:13:cc:25:f2:
c6:38:d2:5e:d9:29:65:d4:c8:96:40:c4:57:42:36:
c7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:82:9D:64:6D:53:EC:F2:98:95:0B:68:75:32:DE:92:6E:C7:EB:C0
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/3YKdZG1T7PKYlQtodTLekm7H68A.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.141.34.0/23
115.31.80.0/21
202.84.48.0/20
202.226.56.0/22
211.14.200.0/21
Signature Algorithm: sha256WithRSAEncryption
31:c2:c9:57:76:ad:84:1e:c4:ee:ca:b9:05:ff:58:96:4b:8e:
d2:ca:70:ee:02:49:5b:f1:b2:b8:6f:e3:78:88:ac:40:a0:2b:
7a:a9:8f:d8:eb:6d:fe:8e:a8:0d:86:c7:4e:85:87:23:ad:fd:
b2:22:29:84:64:56:c0:4b:cd:30:61:27:00:1e:db:fb:53:b8:
a3:70:3b:d0:cb:40:75:18:bd:2e:3a:b5:77:bb:40:08:f1:86:
39:bc:8c:e6:79:6b:91:34:54:41:13:e9:a9:44:e9:ca:7e:2a:
a7:2a:3a:11:20:e0:a4:12:d7:c5:75:e4:e1:b9:a1:4c:a7:50:
9a:7c:58:57:9c:68:55:3f:0d:c3:12:c5:f5:e3:6f:b1:9b:fd:
a4:19:c7:9d:d7:bf:1d:a8:11:d6:93:54:cc:3d:fe:96:6d:2d:
82:e6:02:67:da:ee:6e:3c:f3:a2:df:42:33:3a:61:1f:dd:62:
9a:ba:bf:90:9c:6b:bb:63:32:cb:8f:83:8c:b6:0a:98:41:4d:
4f:73:97:76:4d:9c:2e:28:8e:a7:02:7a:77:94:68:7c:4d:34:
49:fa:d5:09:17:9a:c9:22:5a:a3:89:58:0d:ba:a2:06:fa:41:
d4:e6:64:e5:5b:6c:ba:1f:45:d7:23:65:2d:79:75:7d:59:0b:
99:a5:a0:59
-----BEGIN CERTIFICATE-----
MIIFmTCCBIGgAwIBAgICRwEwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC
NTIwREFBQzdEQThGMB4XDTI1MDMxNTAxMzIzN1oXDTI2MDMxNTAxMzAwM1owMzEx
MC8GA1UEAxMoREQ4MjlENjQ2RDUzRUNGMjk4OTUwQjY4NzUzMkRFOTI2RUM3RUJD
MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPs31BuVPRuPzyG/wyCV
sNysra8ggZo/B1YwWf+N+elZG6z+BO2QE0SXEhYm5jyKFExHP86NMWEP40BeCdqs
A+nASofcZqPu15Qv4qYY94osq8NrStjKYO+8QnVppLO6vIHqo5vclJRzU5YY9W1d
Dw5OAkvfWc4xHKqHWKsNgRM66Q5WRjv4CtcxaX7lc08To53hdXPkOtBdV4Skun6U
rCEWWwxZdHfWIWIydLKG4u68uHv/5PhKWdM9ADCmreAiFpBdwUStHA9+vgTt2vpT
K7W64ZRUfg04SF2i6BcOcxSf1ki0tiuRdI1QRbwTzCXyxjjSXtkpZdTIlkDEV0I2
x7MCAwEAAaOCAp4wggKaMB0GA1UdDgQWBBTdgp1kbVPs8piVC2h1Mt6SbsfrwDAf
BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0
b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa
dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j
Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0
NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G
A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB
7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw
L2FwL0E5MUE3MzgxMDAwMC84OTEvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt
cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzg5MS8zWUtkWkcx
VDdQS1lsUXRvZFRMZWttN0g2OEEubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw
a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s
MDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBZ40iAwQDcx9QAwQEylQwAwQC
yuI4AwQD0w7IMA0GCSqGSIb3DQEBCwUAA4IBAQAxwslXdq2EHsTuyrkF/1iWS47S
ynDuAklb8bK4b+N4iKxAoCt6qY/Y623+jqgNhsdOhYcjrf2yIimEZFbAS80wYScA
Htv7U7ijcDvQy0B1GL0uOrV3u0AI8YY5vIzmeWuRNFRBE+mpROnKfiqnKjoRIOCk
EtfFdeThuaFMp1CafFhXnGhVPw3DEsX142+xm/2kGced178dqBHWk1TMPf6WbS2C
5gJn2u5uPPOi30IzOmEf3WKaur+QnGu7YzLLj4OMtgqYQU1Pc5d2TZwuKI6nAnp3
lGh8TTRJ+tUJF5rJIlqjiVgNuqIG+kHU5mTlW2y6H0XXI2UteXV9WQuZpaBZ
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:19:24 2025 by rpki-client