Certificate
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
File: KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer (raw, json)
Hash identifier: lOzYjr/qRKvoZbobYXVjiz3NOWflQaCgY99yWzVSVb4=
Subject key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 2F77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Wed 15 May 2024 01:32:51 +0000
Certificate not after: Thu 15 May 2025 01:30:03 +0000
Subordinate resources: IP: 27.112.124.0/22
IP: 49.239.64.0/18
IP: 58.138.0.0 -- 58.138.191.255
IP: 61.211.96.0/19
IP: 101.128.128.0/17
IP: 103.2.57.0 -- 103.2.59.255
IP: 113.197.128.0/17
IP: 116.118.192.0/20
IP: 118.151.0.0 -- 118.151.191.255
IP: 119.10.192.0/18
IP: 121.102.0.0/16
IP: 121.200.200.0/21
IP: 124.41.0.0 -- 124.41.191.255
IP: 124.147.64.0/18
IP: 125.30.0.0/16
IP: 133.110.0.0/16
IP: 133.137.0.0/16
IP: 133.142.0.0/16
IP: 133.159.0.0/16
IP: 133.218.0.0/16
IP: 133.236.0.0/16
IP: 133.238.8.0 -- 133.238.255.255
IP: 150.31.0.0/16
IP: 163.49.0.0/16
IP: 163.131.0.0/16
IP: 163.140.0.0/16
IP: 163.218.0.0/16
IP: 202.16.104.0/21
IP: 202.32.0.0/16
IP: 202.48.108.0/23
IP: 202.141.192.0/20
IP: 202.214.0.0/16
IP: 202.221.0.0/16
IP: 202.224.128.0/18
IP: 202.232.0.0/16
IP: 202.238.128.0/17
IP: 202.245.133.0/24
IP: 202.247.136.0/21
IP: 202.247.160.0/19
IP: 202.253.115.0/24
IP: 203.180.0.0/16
IP: 210.128.0.0/16
IP: 210.130.0.0/16
IP: 210.133.192.0/18
IP: 210.138.0.0/16
IP: 210.142.128.0/19
IP: 210.148.0.0/15
IP: 210.173.0.0/19
IP: 211.14.32.0/19
IP: 218.42.160.0/19
IP: 218.228.96.0/19
IP: 219.105.0.0/19
IP: 219.111.0.0/17
IP: 219.119.0.0/16
IP: 219.121.160.0/19
IP: 219.126.128.0/17
IP: 220.100.0.0/16
IP: 220.156.0.0 -- 220.156.159.255
IP: 220.208.192.0/19
IP: 220.210.128.0/18
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 May 2024 08:22:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12151 (0x2f77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: May 15 01:32:51 2024 GMT
Not After : May 15 01:30:03 2025 GMT
Subject: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d7:87:9f:aa:a3:5a:09:42:a3:66:6a:a3:4d:
40:96:73:80:f2:96:56:78:fc:9f:31:04:7a:71:66:
f3:71:2e:24:a5:f0:35:60:a6:75:f2:e5:5f:73:ba:
88:97:fb:d1:d1:fa:c5:b9:18:cf:2d:68:51:7d:72:
a5:f4:42:11:fe:58:96:54:28:d6:a6:c1:49:2b:28:
05:8d:ff:47:d8:40:da:b2:84:2d:5e:02:bb:40:ab:
8a:35:c1:32:86:21:c2:94:11:53:75:8d:9e:df:ea:
6a:ab:80:3c:4f:a2:39:e1:25:73:1b:9d:20:5a:82:
bf:1e:0d:ed:0c:7a:88:c4:b0:fc:bd:1f:80:4a:a0:
e4:2f:a2:fe:60:84:f2:b9:94:b8:8e:e5:b9:70:0c:
ec:7e:41:64:2f:e8:6a:93:ec:ae:37:3f:58:19:5e:
48:a4:b5:95:9b:a8:e9:32:91:70:e7:60:61:32:c7:
d2:6e:62:60:11:5e:54:6d:3d:ce:5b:7d:f1:d1:05:
61:e2:80:8d:e3:eb:5d:c4:b2:76:e8:e7:fd:20:e0:
15:fa:6c:9d:ae:06:3f:32:83:fc:c0:ce:24:32:e1:
8e:9f:97:d7:a9:ee:b5:83:d6:ad:5b:1a:eb:30:ec:
07:12:9f:81:ec:16:fb:cc:a0:5d:67:ce:cc:9a:9a:
52:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.112.124.0/22
49.239.64.0/18
58.138.0.0-58.138.191.255
61.211.96.0/19
101.128.128.0/17
103.2.57.0-103.2.59.255
113.197.128.0/17
116.118.192.0/20
118.151.0.0-118.151.191.255
119.10.192.0/18
121.102.0.0/16
121.200.200.0/21
124.41.0.0-124.41.191.255
124.147.64.0/18
125.30.0.0/16
133.110.0.0/16
133.137.0.0/16
133.142.0.0/16
133.159.0.0/16
133.218.0.0/16
133.236.0.0/16
133.238.8.0-133.238.255.255
150.31.0.0/16
163.49.0.0/16
163.131.0.0/16
163.140.0.0/16
163.218.0.0/16
202.16.104.0/21
202.32.0.0/16
202.48.108.0/23
202.141.192.0/20
202.214.0.0/16
202.221.0.0/16
202.224.128.0/18
202.232.0.0/16
202.238.128.0/17
202.245.133.0/24
202.247.136.0/21
202.247.160.0/19
202.253.115.0/24
203.180.0.0/16
210.128.0.0/16
210.130.0.0/16
210.133.192.0/18
210.138.0.0/16
210.142.128.0/19
210.148.0.0/15
210.173.0.0/19
211.14.32.0/19
218.42.160.0/19
218.228.96.0/19
219.105.0.0/19
219.111.0.0/17
219.119.0.0/16
219.121.160.0/19
219.126.128.0/17
220.100.0.0/16
220.156.0.0-220.156.159.255
220.208.192.0/19
220.210.128.0/18
Signature Algorithm: sha256WithRSAEncryption
02:2c:05:6d:29:7c:a8:37:79:7b:a4:f0:40:f9:95:69:ef:a6:
b7:55:14:18:29:9e:e3:e6:9c:08:ab:98:3f:51:0f:75:8d:a3:
9f:63:bd:0a:9b:ee:ff:44:b0:e5:4b:a5:af:26:0e:ff:fe:0b:
6c:4b:aa:39:aa:c7:0b:1e:be:32:e3:42:25:1e:1e:c0:80:da:
c3:67:29:42:6f:cd:57:3a:a4:6a:4a:14:12:ba:cc:57:17:da:
70:c4:e0:ba:c0:d2:95:e9:76:49:35:01:f7:fe:93:22:ba:fd:
db:e0:31:b5:60:7b:e8:00:b7:94:f0:63:e7:de:e9:a2:c3:dd:
aa:af:e3:f5:1c:03:18:65:f8:0b:20:78:00:d8:d9:31:0f:80:
6d:c4:a3:d5:09:12:b8:cf:b1:ac:12:21:74:80:fa:f7:f0:63:
d7:1f:7f:a8:db:b7:f2:7c:8e:51:a0:86:33:f4:80:38:8c:ea:
9e:39:62:6c:2f:ed:75:c1:db:28:b3:23:e4:dd:51:d9:f3:03:
a4:94:97:10:1e:c3:57:cf:0c:bb:7b:cf:d5:8e:69:e9:53:bf:
de:97:21:7c:c4:d6:19:da:36:d7:8d:14:d7:7d:3c:23:0e:a3:
59:f1:ae:86:13:d9:d6:44:49:99:23:98:4f:04:4b:40:5f:ce:
6b:96:38:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 12:06:29 2024 by rpki-client on console-fra.rpki-client.org