Certificate
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
File: J12XgrE-mRKM008iwJ_o57XLpws.cer (raw, json)
Hash identifier: ERzNhknTgCs3o55+2KIZuRAYHO6yMy1kl+GloEBiRbY=
Subject key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 5006
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Fri 23 May 2025 10:02:20 +0000
Certificate not after: Sat 23 May 2026 09:51:00 +0000
Subordinate resources: IP: 49.156.192.0/18
IP: 58.3.0.0/16
IP: 61.114.128.0/19
IP: 61.203.192.0/19
IP: 103.2.4.0/22
IP: 110.54.0.0/17
IP: 114.142.0.0/17
IP: 115.124.128.0/17
IP: 116.94.0.0/16
IP: 119.47.32.0/19
IP: 119.47.128.0/17
IP: 124.150.176.0 -- 124.150.255.255
IP: 124.159.0.0/16
IP: 125.31.64.0/18
IP: 125.56.0.0/17
IP: 175.28.128.0/17
IP: 202.146.16.0/21
IP: 202.220.40.0/21
IP: 202.226.224.0/19
IP: 203.114.192.0/19
IP: 203.135.192.0/18
IP: 203.179.192.0/19
IP: 210.143.64.0/19
IP: 210.191.64.0/18
IP: 210.203.192.0/18
IP: 210.235.160.0/19
IP: 210.238.32.0/19
IP: 210.252.0.0/18
IP: 211.9.64.0/18
IP: 211.132.96.0/19
IP: 218.40.224.0/20
IP: 218.219.96.0 -- 218.219.143.255
IP: 219.99.176.0/20
IP: 222.159.0.0/16
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Jun 2025 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20486 (0x5006)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: May 23 10:02:20 2025 GMT
Not After : May 23 09:51:00 2026 GMT
Subject: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f5:fd:c9:cf:fb:93:98:52:f4:23:a3:e0:55:
e8:c2:48:ca:65:52:06:0b:c9:69:dc:eb:16:2a:ef:
b5:19:fa:a3:c6:38:94:87:f1:6c:a8:40:43:c4:e6:
4f:dc:84:33:29:d9:9c:f0:b8:7c:b1:1b:7a:d4:f1:
11:56:67:fa:dd:ba:c2:55:5f:a1:83:95:c1:96:2d:
47:07:2d:55:43:ca:f8:33:0b:70:cf:5d:68:24:18:
f2:33:bc:87:cc:0f:32:0d:00:93:ef:d1:d2:20:ca:
65:f5:c8:ea:db:b6:b9:ee:f7:ec:0c:df:23:e3:5e:
39:ec:31:20:0d:a8:48:53:02:bc:84:92:9e:1d:0a:
68:d7:67:ca:3c:41:b9:61:b8:cf:fc:05:48:b6:8b:
23:a2:b1:bc:77:63:7d:67:1f:71:93:8b:e9:a3:dd:
19:d4:af:f0:99:b3:2a:8b:76:e9:ef:4d:33:7e:21:
e5:b0:1e:42:a7:f8:d7:97:b1:c3:ad:6a:3e:ca:ca:
13:fa:b1:fb:5b:2c:82:b5:a9:f0:00:1c:00:9a:2f:
32:7e:8e:66:35:02:cf:0d:76:7b:f6:ee:ca:22:de:
bf:8b:5c:fa:0c:47:9e:e2:0a:41:c2:5c:89:55:df:
94:68:e4:c3:23:b2:4a:50:87:3e:fc:f4:f1:43:d2:
b2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.156.192.0/18
58.3.0.0/16
61.114.128.0/19
61.203.192.0/19
103.2.4.0/22
110.54.0.0/17
114.142.0.0/17
115.124.128.0/17
116.94.0.0/16
119.47.32.0/19
119.47.128.0/17
124.150.176.0-124.150.255.255
124.159.0.0/16
125.31.64.0/18
125.56.0.0/17
175.28.128.0/17
202.146.16.0/21
202.220.40.0/21
202.226.224.0/19
203.114.192.0/19
203.135.192.0/18
203.179.192.0/19
210.143.64.0/19
210.191.64.0/18
210.203.192.0/18
210.235.160.0/19
210.238.32.0/19
210.252.0.0/18
211.9.64.0/18
211.132.96.0/19
218.40.224.0/20
218.219.96.0-218.219.143.255
219.99.176.0/20
222.159.0.0/16
Signature Algorithm: sha256WithRSAEncryption
15:f7:a8:ed:5f:02:0f:ee:4a:f5:46:97:89:21:dc:bb:cd:46:
a5:8a:59:c7:f4:45:9d:ed:be:d9:18:e8:c3:a6:dd:94:c4:75:
bb:e4:b3:0d:1a:7c:63:2a:75:c9:c5:9c:24:c3:37:41:ae:a1:
31:15:2b:b6:fb:58:29:3d:e0:46:a4:c8:c4:df:42:83:1e:9f:
da:56:65:38:68:ed:ce:2e:02:ed:f5:5f:f1:4a:a6:4c:e3:61:
3b:7f:7a:51:c5:bc:38:91:d4:42:bd:fe:51:8f:86:8e:3b:bd:
26:88:55:16:3b:e2:a5:84:32:c9:a0:3f:0c:1a:dd:8a:51:05:
89:ad:d4:55:5f:ab:7a:f1:57:18:dd:4d:6d:23:e5:27:f8:09:
68:fb:b8:99:45:a9:23:92:9e:15:45:a7:f2:33:6e:66:7f:cf:
c6:77:06:7a:0a:21:b8:bf:2d:17:3a:9a:71:2b:f5:bb:2c:17:
86:c8:4f:5e:7e:25:59:a2:7b:84:d4:f7:59:05:5d:03:a1:c6:
65:ef:bd:73:a7:13:e4:80:02:69:e8:b0:a5:6b:91:a0:fe:57:
ae:a0:52:63:71:a0:58:01:e0:e9:31:3b:01:82:f7:80:bf:c9:
b6:a0:71:35:07:d5:9f:cb:13:4c:b9:27:77:8c:95:70:4c:43:
c3:da:cb:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 07:23:37 2025 by rpki-client