Certificate
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/l_K0uP4loMDH9Nb9T6G6fK5hKhI.cer
File: l_K0uP4loMDH9Nb9T6G6fK5hKhI.cer (raw, json)
Hash identifier: /+Xsu/VyTJR2s7XXkQJptXo6y4UL+lBoDiAFEleUmGk=
Subject key identifier: 97:F2:B4:B8:FE:25:A0:C0:C7:F4:D6:FD:4F:A1:BA:7C:AE:61:2A:12
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 4764
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30260/l_K0uP4loMDH9Nb9T6G6fK5hKhI.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30260/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Sat 15 Mar 2025 01:34:41 +0000
Certificate not after: Sun 15 Mar 2026 01:30:03 +0000
Subordinate resources: IP: 2001:2f0::/32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18276 (0x4764)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Mar 15 01:34:41 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=97F2B4B8FE25A0C0C7F4D6FD4FA1BA7CAE612A12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:38:2c:56:40:ef:1b:56:45:1a:b9:05:ca:99:
ac:68:6e:70:37:ff:db:c6:95:0b:aa:72:46:b8:ef:
b3:5f:d5:ba:0e:6b:ba:d6:8b:d7:82:24:9c:34:ac:
57:98:3a:5a:e6:a8:0d:65:2f:75:36:34:b5:5a:c5:
f2:f1:12:6c:9e:ea:ac:2f:16:02:5f:e7:06:ba:10:
f5:3f:dd:97:57:fd:7a:64:12:99:a7:1f:08:91:f5:
7f:a9:f6:56:19:d5:a0:e7:04:8f:6f:6c:88:e6:a2:
50:c6:27:2e:e6:c1:00:87:5d:f0:13:39:b8:bb:51:
c7:b9:39:19:d5:9f:d2:73:a3:15:55:d7:ac:b0:0e:
87:b6:25:17:1e:62:a7:c4:64:ec:a6:87:64:9b:2e:
f2:65:44:6b:a1:67:4a:85:fd:44:8c:23:d8:20:58:
11:f0:18:5a:0c:d1:9a:76:28:26:9b:2d:1d:ed:48:
1b:5c:94:01:ce:bd:3b:79:aa:08:2e:75:aa:7a:02:
ed:b3:94:dc:5c:67:f3:58:64:b0:cd:6b:80:ab:d2:
34:32:12:c3:08:7d:0f:40:be:a1:22:01:92:89:24:
58:f6:b6:c0:8d:b3:fe:38:fc:0a:0b:b5:41:b8:00:
7f:2a:2c:4f:9a:00:99:58:49:80:08:21:22:3f:79:
4a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F2:B4:B8:FE:25:A0:C0:C7:F4:D6:FD:4F:A1:BA:7C:AE:61:2A:12
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30260/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30260/l_K0uP4loMDH9Nb9T6G6fK5hKhI.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:2f0::/32
Signature Algorithm: sha256WithRSAEncryption
3c:bf:68:3f:5f:e5:e3:5b:47:3d:ba:d8:99:ce:d6:bc:53:5f:
21:8b:e4:03:f8:2c:a8:1a:4f:34:eb:b3:42:8b:23:ab:0c:a2:
15:57:99:ba:0a:15:93:30:4f:e9:69:41:93:9a:c1:a0:55:c8:
c8:3f:05:c9:d3:d0:1d:77:92:e6:a3:bf:89:b9:95:21:0d:63:
2b:d5:84:3e:d7:64:7f:5f:de:00:3a:d4:1b:ab:ad:ff:ec:b0:
b9:dd:4e:d5:4f:bb:79:d1:be:26:f5:3d:cd:41:d7:49:08:f9:
16:59:ad:0b:46:9e:69:61:7c:a3:28:8f:21:7c:1f:96:7f:12:
be:48:e2:96:1e:8a:8a:42:d2:e0:ca:3d:73:aa:0f:31:e8:9e:
c9:5e:81:1a:10:f3:d2:5b:6e:d1:20:1c:c4:f8:91:22:33:2f:
d7:b2:b8:43:80:3c:c8:7e:62:82:e4:a6:27:a2:5c:7f:09:db:
ab:18:a7:2c:39:83:ef:11:7c:8c:93:55:c2:6a:55:7e:53:f4:
d8:3a:b4:2b:e5:fe:21:9b:f1:5d:c1:16:f8:63:cf:4c:8e:55:
52:11:9b:03:43:df:10:29:ed:5f:12:45:7c:f3:bf:f3:ea:06:
44:1b:3a:36:eb:3b:4c:0c:cd:4a:98:6c:d4:6a:00:a5:6a:0d:
6d:36:c8:00
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgICR2QwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC
NTIwREFBQzdEQThGMB4XDTI1MDMxNTAxMzQ0MVoXDTI2MDMxNTAxMzAwM1owMzEx
MC8GA1UEAxMoOTdGMkI0QjhGRTI1QTBDMEM3RjRENkZENEZBMUJBN0NBRTYxMkEx
MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOY4LFZA7xtWRRq5BcqZ
rGhucDf/28aVC6pyRrjvs1/Vug5rutaL14IknDSsV5g6WuaoDWUvdTY0tVrF8vES
bJ7qrC8WAl/nBroQ9T/dl1f9emQSmacfCJH1f6n2VhnVoOcEj29siOaiUMYnLubB
AIdd8BM5uLtRx7k5GdWf0nOjFVXXrLAOh7YlFx5ip8Rk7KaHZJsu8mVEa6FnSoX9
RIwj2CBYEfAYWgzRmnYoJpstHe1IG1yUAc69O3mqCC51qnoC7bOU3Fxn81hksM1r
gKvSNDISwwh9D0C+oSIBkokkWPa2wI2z/jj8Cgu1QbgAfyosT5oAmVhJgAghIj95
SucCAwEAAaOCAowwggKIMB0GA1UdDgQWBBSX8rS4/iWgwMf01v1Pobp8rmEqEjAf
BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0
b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa
dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j
Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0
NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G
A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw
gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9hcC9BOTFBNzM4MTAwMDAvMzAyNjAvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw
a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMjYwL2xf
SzB1UDRsb01ESDlOYjlUNkc2Zks1aEtoSS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz
Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv
bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAgAQLwMA0GCSqGSIb3
DQEBCwUAA4IBAQA8v2g/X+XjW0c9utiZzta8U18hi+QD+CyoGk8067NCiyOrDKIV
V5m6ChWTME/paUGTmsGgVcjIPwXJ09Add5Lmo7+JuZUhDWMr1YQ+12R/X94AOtQb
q63/7LC53U7VT7t50b4m9T3NQddJCPkWWa0LRp5pYXyjKI8hfB+WfxK+SOKWHoqK
QtLgyj1zqg8x6J7JXoEaEPPSW27RIBzE+JEiMy/XsrhDgDzIfmKC5KYnolx/Cdur
GKcsOYPvEXyMk1XCalV+U/TYOrQr5f4hm/FdwRb4Y89MjlVSEZsDQ98QKe1fEkV8
87/z6gZEGzo26ztMDM1KmGzUagClag1tNsgA
-----END CERTIFICATE-----
Generated at Mon Apr 14 15:38:41 2025 by rpki-client