Certificate
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
File: Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer (raw, json)
Hash identifier: bSpqkWBal7Pysp5/fIVW2b0pO7N/VRsf7Ywu4fJBAQU=
Subject key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 2F9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Wed 15 May 2024 01:33:45 +0000
Certificate not after: Thu 15 May 2025 01:30:03 +0000
Subordinate resources: IP: 14.8.0.0/13
IP: 14.101.0.0/16
IP: 27.80.0.0/12
IP: 36.8.0.0/13
IP: 49.132.0.0/14
IP: 59.128.0.0/12
IP: 61.114.0.0/18
IP: 61.117.0.0/16
IP: 61.120.0.0/17
IP: 61.198.128.0/17
IP: 61.200.128.0/17
IP: 61.202.0.0/17
IP: 61.204.0.0/16
IP: 61.215.0.0/17
IP: 106.128.0.0/10
IP: 111.86.0.0/15
IP: 111.96.0.0/12
IP: 111.236.0.0/14
IP: 113.144.0.0/12
IP: 114.16.0.0 -- 114.22.255.255
IP: 118.152.0.0/13
IP: 119.104.0.0/14
IP: 121.104.0.0/13
IP: 124.109.128.0/17
IP: 124.208.0.0/13
IP: 125.28.0.0/15
IP: 125.48.0.0/13
IP: 175.108.0.0/15
IP: 175.128.0.0/13
IP: 182.248.0.0/14
IP: 202.161.192.0/18
IP: 202.164.64.0/19
IP: 202.239.128.0/18
IP: 203.140.128.0/19
IP: 203.141.160.0/19
IP: 203.181.96.0/19
IP: 210.132.64.0/18
IP: 210.141.96.0/19
IP: 210.141.224.0 -- 210.142.63.255
IP: 210.143.32.0/19
IP: 210.155.0.0/17
IP: 210.157.128.0/19
IP: 210.158.0.0/19
IP: 210.159.0.0/19
IP: 210.166.128.0/18
IP: 210.167.128.0/17
IP: 210.168.128.0 -- 210.169.127.255
IP: 210.172.64.0/18
IP: 210.173.64.0/19
IP: 210.174.64.0/18
IP: 210.188.128.0/18
IP: 210.189.0.0/18
IP: 210.189.128.0/19
IP: 210.191.0.0/18
IP: 210.191.160.0/19
IP: 210.196.0.0/16
IP: 210.198.64.0 -- 210.199.63.255
IP: 210.199.128.0/17
IP: 210.224.0.0 -- 210.224.159.255
IP: 210.224.192.0/18
IP: 210.228.32.0 -- 210.228.127.255
IP: 210.229.128.0/19
IP: 210.229.192.0/19
IP: 210.230.0.0/16
IP: 210.233.0.0/18
IP: 210.233.96.0/19
IP: 210.234.0.0/16
IP: 210.235.64.0 -- 210.235.159.255
IP: 210.235.192.0/18
IP: 210.236.128.0/19
IP: 210.237.64.0/18
IP: 210.238.0.0/19
IP: 210.238.64.0 -- 210.238.255.255
IP: 210.239.96.0 -- 210.239.255.255
IP: 210.249.0.0 -- 210.249.191.255
IP: 210.250.0.0/18
IP: 210.250.128.0/19
IP: 210.251.0.0/17
IP: 210.253.0.0/19
IP: 210.253.128.0/18
IP: 210.254.64.0/18
IP: 210.255.0.0/17
IP: 210.255.160.0 -- 210.255.223.255
IP: 211.1.64.0/18
IP: 211.4.0.0/15
IP: 211.7.0.0/18
IP: 211.7.128.0/18
IP: 211.9.128.0/18
IP: 211.10.128.0/17
IP: 211.12.0.0/17
IP: 211.13.160.0/20
IP: 211.15.128.0/17
IP: 211.18.0.0/16
IP: 211.125.160.0/19
IP: 211.126.0.0/16
IP: 211.134.0.0/16
IP: 218.222.0.0/16
IP: 218.225.0.0/17
IP: 218.230.0.0/17
IP: 218.231.0.0/20
IP: 219.108.0.0/16
IP: 219.118.0.0/19
IP: 219.125.0.0/16
IP: 220.214.0.0/16
IP: 220.217.0.0/16
IP: 221.119.0.0/16
IP: 222.0.0.0/12
IP: 222.225.0.0 -- 222.227.255.255
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 May 2024 00:07:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12186 (0x2f9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: May 15 01:33:45 2024 GMT
Not After : May 15 01:30:03 2025 GMT
Subject: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:87:8e:5a:8d:d5:5f:9c:ac:86:4d:a1:9a:3a:
a4:47:b7:84:79:25:d1:7e:78:f8:a4:55:a6:aa:c2:
44:96:d6:a5:26:18:04:1e:73:31:b4:7e:a4:4f:f9:
32:c2:56:7b:54:cb:a3:81:c6:6c:14:43:e8:37:0e:
0f:31:e8:06:7a:ef:c7:1c:68:38:9e:e1:20:1e:10:
ae:5a:5d:f4:07:b0:6d:fd:f1:55:3e:84:87:d9:7e:
6b:8e:4b:90:30:9d:32:87:c2:b7:43:37:c5:73:ca:
24:ea:79:91:d6:31:f0:65:b8:dc:ab:b4:67:58:4e:
f1:a6:ca:3b:df:96:49:36:fa:17:a0:a6:68:1a:01:
24:22:50:34:70:49:b6:cd:2f:40:18:0b:d9:ae:1f:
aa:75:ac:9f:17:dd:c5:40:4c:80:1c:54:3b:9e:42:
a2:e7:76:26:a6:59:60:f0:4d:9a:84:68:2e:b4:7f:
8d:7d:1b:32:ee:7d:9d:d0:08:ea:84:2b:0d:0c:04:
3e:37:3f:50:09:00:74:f7:7c:af:8a:00:7d:a3:88:
bf:f1:ea:ca:2e:76:e0:51:23:93:b9:87:0e:3b:7d:
e0:98:ed:e2:0d:57:ec:fd:8f:90:b0:21:d8:0b:f9:
98:e6:e6:d2:cf:1f:db:b1:05:43:9a:ed:e3:0c:c0:
13:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.8.0.0/13
14.101.0.0/16
27.80.0.0/12
36.8.0.0/13
49.132.0.0/14
59.128.0.0/12
61.114.0.0/18
61.117.0.0/16
61.120.0.0/17
61.198.128.0/17
61.200.128.0/17
61.202.0.0/17
61.204.0.0/16
61.215.0.0/17
106.128.0.0/10
111.86.0.0/15
111.96.0.0/12
111.236.0.0/14
113.144.0.0/12
114.16.0.0-114.22.255.255
118.152.0.0/13
119.104.0.0/14
121.104.0.0/13
124.109.128.0/17
124.208.0.0/13
125.28.0.0/15
125.48.0.0/13
175.108.0.0/15
175.128.0.0/13
182.248.0.0/14
202.161.192.0/18
202.164.64.0/19
202.239.128.0/18
203.140.128.0/19
203.141.160.0/19
203.181.96.0/19
210.132.64.0/18
210.141.96.0/19
210.141.224.0-210.142.63.255
210.143.32.0/19
210.155.0.0/17
210.157.128.0/19
210.158.0.0/19
210.159.0.0/19
210.166.128.0/18
210.167.128.0/17
210.168.128.0-210.169.127.255
210.172.64.0/18
210.173.64.0/19
210.174.64.0/18
210.188.128.0/18
210.189.0.0/18
210.189.128.0/19
210.191.0.0/18
210.191.160.0/19
210.196.0.0/16
210.198.64.0-210.199.63.255
210.199.128.0/17
210.224.0.0-210.224.159.255
210.224.192.0/18
210.228.32.0-210.228.127.255
210.229.128.0/19
210.229.192.0/19
210.230.0.0/16
210.233.0.0/18
210.233.96.0/19
210.234.0.0/16
210.235.64.0-210.235.159.255
210.235.192.0/18
210.236.128.0/19
210.237.64.0/18
210.238.0.0/19
210.238.64.0-210.238.255.255
210.239.96.0-210.239.255.255
210.249.0.0-210.249.191.255
210.250.0.0/18
210.250.128.0/19
210.251.0.0/17
210.253.0.0/19
210.253.128.0/18
210.254.64.0/18
210.255.0.0/17
210.255.160.0-210.255.223.255
211.1.64.0/18
211.4.0.0/15
211.7.0.0/18
211.7.128.0/18
211.9.128.0/18
211.10.128.0/17
211.12.0.0/17
211.13.160.0/20
211.15.128.0/17
211.18.0.0/16
211.125.160.0/19
211.126.0.0/16
211.134.0.0/16
218.222.0.0/16
218.225.0.0/17
218.230.0.0/17
218.231.0.0/20
219.108.0.0/16
219.118.0.0/19
219.125.0.0/16
220.214.0.0/16
220.217.0.0/16
221.119.0.0/16
222.0.0.0/12
222.225.0.0-222.227.255.255
Signature Algorithm: sha256WithRSAEncryption
59:f9:16:36:5e:f1:33:e5:0d:1b:26:77:1a:e4:f1:39:37:19:
69:a9:17:a8:89:ea:c9:ea:35:89:da:e7:44:6f:9d:8b:16:3c:
20:3f:7c:3b:21:73:5e:d0:ea:86:80:fd:ab:6e:25:92:93:37:
42:34:6b:3c:07:71:05:4c:e9:d3:b0:9b:23:c8:87:9d:02:9e:
f4:0f:f2:64:fe:bb:a0:c3:e7:f1:3b:fd:a3:23:c5:c8:48:8c:
b5:61:42:2e:39:a9:18:e8:87:d0:e0:9d:ae:c0:b5:2e:d1:45:
cc:0a:99:1f:51:38:a3:87:3e:ed:dd:5a:2b:7d:36:2f:ba:b9:
72:a3:37:7f:96:fd:2b:04:82:62:a9:9c:e4:10:09:bf:e0:fa:
90:c1:fb:85:0f:ab:5d:5b:d7:45:23:09:b4:ce:a9:c0:a0:5c:
a8:f4:9f:c6:02:25:84:79:61:b0:58:e0:b3:ef:df:16:20:7b:
5c:fe:69:dd:3b:de:f9:4b:71:27:01:ba:63:f4:56:22:84:55:
4f:74:59:6c:2a:14:3d:73:0d:24:3c:eb:ae:62:0c:61:28:71:
95:90:3f:df:7e:ae:91:c2:45:ad:f9:48:75:25:b5:c0:ca:1c:
ad:da:3e:1c:a6:35:a2:5d:ba:61:3d:f3:21:ec:cd:51:70:43:
56:ce:0b:7f
-----BEGIN CERTIFICATE-----
MIIIQTCCBymgAwIBAgICL5owDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC
NTIwREFBQzdEQThGMB4XDTI0MDUxNTAxMzM0NVoXDTI1MDUxNTAxMzAwM1owMzEx
MC8GA1UEAxMoMTVCRkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNC
NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALiHjlqN1V+crIZNoZo6
pEe3hHkl0X54+KRVpqrCRJbWpSYYBB5zMbR+pE/5MsJWe1TLo4HGbBRD6DcODzHo
BnrvxxxoOJ7hIB4Qrlpd9Aewbf3xVT6Eh9l+a45LkDCdMofCt0M3xXPKJOp5kdYx
8GW43Ku0Z1hO8abKO9+WSTb6F6CmaBoBJCJQNHBJts0vQBgL2a4fqnWsnxfdxUBM
gBxUO55Coud2JqZZYPBNmoRoLrR/jX0bMu59ndAI6oQrDQwEPjc/UAkAdPd8r4oA
faOIv/Hqyi524FEjk7mHDjt94Jjt4g1X7P2PkLAh2Av5mObm0s8f27EFQ5rt4wzA
E3MCAwEAAaOCBUYwggVCMB0GA1UdDgQWBBQVv6PlPlkUkjmhaN/ZLHV0WrZstjAf
BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0
b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa
dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j
Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0
NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G
A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB
7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw
L2FwL0E5MUE3MzgxMDAwMC8xNjEvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt
cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzE2MS9GYi1qNVQ1
WkZKSTVvV2pmMlN4MWRGcTJiTFkubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw
a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s
MIIC3QYIKwYBBQUHAQcBAf8EggLMMIICyDCCAsQEAgABMIICvAMDAw4IAwMADmUD
AwQbUAMDAyQIAwMCMYQDAwQ7gAMEBj1yAAMDAD11AwQHPXgAAwQHPcaAAwQHPciA
AwQHPcoAAwMAPcwDBAc91wADAwZqgAMDAW9WAwMEb2ADAwJv7AMDBHGQMAoDAwRy
EAMDAHIWAwMDdpgDAwJ3aAMDA3loAwQHfG2AAwMDfNADAwF9HAMDA30wAwMBr2wD
AwOvgAMDArb4AwQGyqHAAwQFyqRAAwQGyu+AAwQFy4yAAwQFy42gAwQFy7VgAwQG
0oRAAwQF0o1gMAwDBAXSjeADBAbSjgADBAXSjyADBAfSmwADBAXSnYADBAXSngAD
BAXSnwADBAbSpoADBAfSp4AwDAMEB9KogAMEB9KpAAMEBtKsQAMEBdKtQAMEBtKu
QAMEBtK8gAMEBtK9AAMEBdK9gAMEBtK/AAMEBdK/oAMDANLEMAwDBAbSxkADBAbS
xwADBAfSx4AwCwMDBdLgAwQF0uCAAwQG0uDAMAwDBAXS5CADBAfS5AADBAXS5YAD
BAXS5cADAwDS5gMEBtLpAAMEBdLpYAMDANLqMAwDBAbS60ADBAXS64ADBAbS68AD
BAXS7IADBAbS7UADBAXS7gAwCwMEBtLuQAMDANLuMAsDBAXS72ADAwTS4DALAwMA
0vkDBAbS+YADBAbS+gADBAXS+oADBAfS+wADBAXS/QADBAbS/YADBAbS/kADBAfS
/wAwDAMEBdL/oAMEBdL/wAMEBtMBQAMDAdMEAwQG0wcAAwQG0weAAwQG0wmAAwQH
0wqAAwQH0wwAAwQE0w2gAwQH0w+AAwMA0xIDBAXTfaADAwDTfgMDANOGAwMA2t4D
BAfa4QADBAfa5gADBATa5wADAwDbbAMEBdt2AAMDANt9AwMA3NYDAwDc2QMDAN13
AwME3gAwCgMDAN7hAwMC3uAwDQYJKoZIhvcNAQELBQADggEBAFn5FjZe8TPlDRsm
dxrk8Tk3GWmpF6iJ6snqNYna50RvnYsWPCA/fDshc17Q6oaA/atuJZKTN0I0azwH
cQVM6dOwmyPIh50CnvQP8mT+u6DD5/E7/aMjxchIjLVhQi45qRjoh9Dgna7AtS7R
RcwKmR9ROKOHPu3dWit9Ni+6uXKjN3+W/SsEgmKpnOQQCb/g+pDB+4UPq11b10Uj
CbTOqcCgXKj0n8YCJYR5YbBY4LPv3xYge1z+ad073vlLcScBumP0ViKEVU90WWwq
FD1zDSQ8665iDGEocZWQP99+rpHCRa35SHUltcDKHK3aPhymNaJdumE98yHszVFw
Q1bOC38=
-----END CERTIFICATE-----
Generated at Fri May 17 01:01:20 2024 by rpki-client on console-ams.rpki-client.org