Certificate
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/I2bjTNj3O65pB3q5YZzhiXXq19M.cer
File: I2bjTNj3O65pB3q5YZzhiXXq19M.cer (raw, json)
Hash identifier: liKinGkUbnLwSBJMp8EpJQcFaDnVzqVgWhIfi5s0mws=
Subject key identifier: 23:66:E3:4C:D8:F7:3B:AE:69:07:7A:B9:61:9C:E1:89:75:EA:D7:D3
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 42F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1785/I2bjTNj3O65pB3q5YZzhiXXq19M.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1785/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Mon 27 Jan 2025 09:07:17 +0000
Certificate not after: Tue 27 Jan 2026 09:02:30 +0000
Subordinate resources: AS: 10014
Validation: Failed, certificate revoked on Mon 03 Feb 2025 00:25:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17144 (0x42f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Jan 27 09:07:17 2025 GMT
Not After : Jan 27 09:02:30 2026 GMT
Subject: CN=2366E34CD8F73BAE69077AB9619CE18975EAD7D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:45:d5:37:ef:f7:91:5a:8c:4a:a6:cd:a0:c1:
f8:c6:c0:50:4b:41:8c:49:ed:8d:e2:a9:d4:d6:25:
ea:b4:b7:63:01:4d:97:67:ec:7a:af:b1:06:13:81:
90:23:4e:4a:68:b9:0b:ae:59:de:9f:a8:d8:c1:aa:
0b:60:39:23:a6:d0:33:ef:ee:f5:7c:ee:6b:da:a2:
17:6e:82:a2:7f:50:61:14:d4:ec:40:d7:4b:25:df:
de:0b:93:9f:56:01:03:a2:41:9a:c8:6f:00:e8:6a:
33:f3:c9:7b:b1:bd:34:c8:a4:ea:63:87:c7:e7:2c:
96:22:42:35:8a:c8:c3:54:80:8c:bc:53:fb:3e:d3:
cf:3a:b4:66:40:9f:2b:dc:f2:70:b3:51:39:e7:a1:
66:24:b2:60:a4:8c:09:bd:b7:cc:0f:8d:90:71:46:
3a:41:00:04:b1:4f:f3:51:03:47:a8:02:c4:4e:81:
e6:df:43:44:80:56:4f:aa:55:f9:1b:bd:90:aa:c4:
3b:bc:ff:bd:6c:83:90:88:fa:30:87:52:37:fe:57:
97:f8:d5:91:4e:6d:5a:a6:bc:ce:6d:63:6f:de:71:
d9:06:5d:89:1d:ee:6c:95:70:fa:a4:1c:f2:6f:26:
f9:a2:e3:33:74:87:b0:7b:9c:20:bd:c4:f9:13:84:
1a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:66:E3:4C:D8:F7:3B:AE:69:07:7A:B9:61:9C:E1:89:75:EA:D7:D3
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1785/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1785/I2bjTNj3O65pB3q5YZzhiXXq19M.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
10014
Signature Algorithm: sha256WithRSAEncryption
2a:8e:14:db:72:f6:cf:49:fd:6f:f6:2a:af:4d:e7:81:3a:8f:
bf:94:50:30:96:47:65:5b:15:da:9e:32:9b:7e:f1:04:78:cc:
ae:74:5c:54:5a:0c:c6:b1:d5:c3:18:d3:1a:bf:9f:0a:c3:16:
2b:9f:3d:b0:8f:7d:6b:34:50:d6:b6:0f:f3:fc:33:5a:1e:5d:
ab:a7:34:47:16:68:89:0d:8c:ff:48:d0:af:96:ba:f8:a6:55:
0f:8b:9d:25:97:6f:b5:24:40:60:6e:0b:09:7f:50:76:39:00:
4c:e2:c9:fe:59:52:29:37:41:23:5a:b7:11:dd:1b:6c:9b:8c:
ed:ab:e7:8b:de:84:92:06:88:a2:c5:38:c4:35:c9:00:2d:21:
7b:89:2d:18:29:bb:f2:1b:0f:d3:b0:15:52:4a:c4:78:f0:91:
88:08:7d:f8:5c:22:6a:26:78:71:ca:d6:85:07:68:15:15:68:
4f:60:a7:6f:45:41:2e:f8:9f:17:3d:ae:60:16:8b:14:b6:b2:
20:e2:4c:7d:2a:6a:5d:74:fb:4b:54:b4:15:08:98:73:fe:5c:
76:00:13:2f:de:3d:8a:e4:30:eb:98:ca:02:ee:a4:52:6c:7c:
c0:7d:90:73:f1:2a:77:86:dc:f4:41:c1:d3:92:ba:6b:66:f5:
01:5e:d2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:30:38 2025 by rpki-client