Certificate
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/kAXvCz2-_ZVqMWY0Z5XNtT1dm2I.cer
File: kAXvCz2-_ZVqMWY0Z5XNtT1dm2I.cer (raw, json)
Hash identifier: 21I/MWy/++fh3fowUpg0H7qbiwqr43FEYz8SkpQEGnw=
Subject key identifier: 90:05:EF:0B:3D:BE:FD:95:6A:31:66:34:67:95:CD:B5:3D:5D:9B:62
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 47D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20125/kAXvCz2-_ZVqMWY0Z5XNtT1dm2I.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20125/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Sat 15 Mar 2025 01:37:00 +0000
Certificate not after: Sun 15 Mar 2026 01:30:03 +0000
Subordinate resources: IP: 110.172.48.0/22
IP: 210.167.64.0/19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18393 (0x47d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Mar 15 01:37:00 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=9005EF0B3DBEFD956A3166346795CDB53D5D9B62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c6:b4:70:5d:da:8e:2a:25:1e:dd:50:d5:85:
9a:76:95:59:22:65:9e:2b:8d:21:03:5a:38:3d:b0:
3c:1d:d5:cb:a9:53:23:e0:22:20:98:7f:a3:8f:eb:
a0:78:fb:13:f4:e7:97:31:25:61:4a:c7:11:47:16:
ac:a1:fd:61:4e:97:2a:59:4f:bb:13:cb:4a:4b:57:
6b:43:10:93:e3:8b:5a:80:d4:15:fd:72:48:09:3c:
bb:79:1d:10:bb:3b:9e:57:ae:2a:7d:54:ca:92:33:
64:97:c1:a8:59:0f:9b:b8:8b:f9:3e:b6:de:4d:3c:
c5:ef:1a:83:50:4f:f1:ed:c4:75:3c:a2:cc:e0:55:
fb:21:d1:ec:64:a7:45:45:4d:55:f0:91:cd:a6:20:
86:cc:7a:85:3a:23:d0:6d:dd:b0:cf:79:72:1a:9b:
ba:8c:65:b1:f9:c1:ac:31:88:7d:7f:1f:04:83:69:
d4:cc:4d:00:67:92:1c:6f:ab:35:c4:30:97:cc:84:
45:92:87:cf:56:6d:08:73:a1:7f:24:90:19:c0:d0:
9a:87:5b:80:4f:e0:9f:96:58:e2:94:71:e6:e7:b1:
0c:80:2c:b3:62:b0:9c:3f:f5:e3:27:ee:61:dc:c3:
22:1c:c2:a4:ac:72:a0:09:0c:6b:5a:68:79:d5:b3:
53:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:05:EF:0B:3D:BE:FD:95:6A:31:66:34:67:95:CD:B5:3D:5D:9B:62
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20125/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20125/kAXvCz2-_ZVqMWY0Z5XNtT1dm2I.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.172.48.0/22
210.167.64.0/19
Signature Algorithm: sha256WithRSAEncryption
7d:8d:70:02:15:54:88:72:80:5d:e9:65:b5:b7:20:84:89:51:
58:20:89:0f:6b:cc:91:43:cf:4c:86:6e:19:b3:f1:6b:7a:bd:
0a:e3:5a:c8:02:7b:3e:91:a1:e8:d4:e4:1c:81:38:ef:fa:ab:
16:96:63:ee:d6:26:03:18:78:47:61:98:d3:e6:95:dc:94:f0:
b4:10:7b:47:21:7c:92:8f:cd:68:eb:1c:40:2a:14:0f:5a:dd:
ad:09:e2:1c:19:99:c9:6e:ef:18:ec:46:85:fe:ca:d8:7f:0a:
b4:18:97:6e:d4:8a:97:b0:38:a6:68:5d:a7:e9:96:a2:f6:18:
e5:d6:dc:e1:f6:64:b0:0c:9b:1f:be:44:54:4b:d6:0c:78:30:
ec:1c:0d:29:ee:ad:8b:23:66:6f:b2:04:f9:d1:bd:b8:c7:f1:
ad:ba:3f:e2:fe:8c:ce:ff:c5:8e:16:c3:a8:9d:8a:99:c7:2d:
f1:66:8b:47:ea:71:d9:39:8a:1d:7f:33:42:a4:3f:15:1a:97:
3a:a7:3b:d5:db:0d:69:b8:5e:0f:73:f7:61:13:23:d7:a5:fc:
02:c5:71:f8:7a:c3:d4:a5:17:c8:4f:9c:fa:2f:f5:2b:b8:a4:
d4:9b:ad:d8:be:90:7c:18:86:3d:92:a9:e1:7b:a8:af:4c:c5:
c7:a7:bc:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 21:12:03 2025 by rpki-client