Certificate
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
File: KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer (raw, json)
Hash identifier: NpfDvjyMc1ClCBA+2shwosCb41IOdrWMmjkEZsKqzcs=
Subject key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 4EF3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Fri 23 May 2025 09:54:01 +0000
Certificate not after: Sat 23 May 2026 09:51:00 +0000
Subordinate resources: IP: 27.112.124.0/22
IP: 49.239.64.0/18
IP: 58.138.0.0 -- 58.138.191.255
IP: 61.211.96.0/19
IP: 101.128.128.0/17
IP: 103.2.57.0 -- 103.2.59.255
IP: 113.197.128.0/17
IP: 116.118.192.0/20
IP: 118.151.0.0 -- 118.151.191.255
IP: 119.10.192.0/18
IP: 121.102.0.0/16
IP: 121.200.200.0/21
IP: 124.41.0.0 -- 124.41.191.255
IP: 124.147.64.0/18
IP: 125.30.0.0/16
IP: 133.110.0.0/16
IP: 133.137.0.0/16
IP: 133.142.0.0/16
IP: 133.159.0.0/16
IP: 133.218.0.0/16
IP: 133.236.0.0/16
IP: 133.238.8.0 -- 133.238.255.255
IP: 150.31.0.0/16
IP: 163.49.0.0/16
IP: 163.131.0.0/16
IP: 163.140.0.0/16
IP: 163.218.0.0/16
IP: 202.16.104.0/21
IP: 202.32.0.0/16
IP: 202.48.108.0/23
IP: 202.141.192.0/20
IP: 202.214.0.0/16
IP: 202.221.0.0/16
IP: 202.224.128.0/18
IP: 202.232.0.0/16
IP: 202.238.128.0/17
IP: 202.245.133.0/24
IP: 202.247.136.0/21
IP: 202.247.160.0/19
IP: 202.253.115.0/24
IP: 203.180.0.0/16
IP: 210.128.0.0/16
IP: 210.130.0.0/16
IP: 210.133.192.0/18
IP: 210.138.0.0/16
IP: 210.142.128.0/19
IP: 210.148.0.0/15
IP: 210.173.0.0/19
IP: 211.14.32.0/19
IP: 218.42.160.0/19
IP: 218.228.96.0/19
IP: 219.105.0.0/19
IP: 219.111.0.0/17
IP: 219.119.0.0/16
IP: 219.121.160.0/19
IP: 219.126.128.0/17
IP: 220.100.0.0/16
IP: 220.156.0.0 -- 220.156.159.255
IP: 220.208.192.0/19
IP: 220.210.128.0/18
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Jun 2025 05:36:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20211 (0x4ef3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: May 23 09:54:01 2025 GMT
Not After : May 23 09:51:00 2026 GMT
Subject: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d7:87:9f:aa:a3:5a:09:42:a3:66:6a:a3:4d:
40:96:73:80:f2:96:56:78:fc:9f:31:04:7a:71:66:
f3:71:2e:24:a5:f0:35:60:a6:75:f2:e5:5f:73:ba:
88:97:fb:d1:d1:fa:c5:b9:18:cf:2d:68:51:7d:72:
a5:f4:42:11:fe:58:96:54:28:d6:a6:c1:49:2b:28:
05:8d:ff:47:d8:40:da:b2:84:2d:5e:02:bb:40:ab:
8a:35:c1:32:86:21:c2:94:11:53:75:8d:9e:df:ea:
6a:ab:80:3c:4f:a2:39:e1:25:73:1b:9d:20:5a:82:
bf:1e:0d:ed:0c:7a:88:c4:b0:fc:bd:1f:80:4a:a0:
e4:2f:a2:fe:60:84:f2:b9:94:b8:8e:e5:b9:70:0c:
ec:7e:41:64:2f:e8:6a:93:ec:ae:37:3f:58:19:5e:
48:a4:b5:95:9b:a8:e9:32:91:70:e7:60:61:32:c7:
d2:6e:62:60:11:5e:54:6d:3d:ce:5b:7d:f1:d1:05:
61:e2:80:8d:e3:eb:5d:c4:b2:76:e8:e7:fd:20:e0:
15:fa:6c:9d:ae:06:3f:32:83:fc:c0:ce:24:32:e1:
8e:9f:97:d7:a9:ee:b5:83:d6:ad:5b:1a:eb:30:ec:
07:12:9f:81:ec:16:fb:cc:a0:5d:67:ce:cc:9a:9a:
52:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.112.124.0/22
49.239.64.0/18
58.138.0.0-58.138.191.255
61.211.96.0/19
101.128.128.0/17
103.2.57.0-103.2.59.255
113.197.128.0/17
116.118.192.0/20
118.151.0.0-118.151.191.255
119.10.192.0/18
121.102.0.0/16
121.200.200.0/21
124.41.0.0-124.41.191.255
124.147.64.0/18
125.30.0.0/16
133.110.0.0/16
133.137.0.0/16
133.142.0.0/16
133.159.0.0/16
133.218.0.0/16
133.236.0.0/16
133.238.8.0-133.238.255.255
150.31.0.0/16
163.49.0.0/16
163.131.0.0/16
163.140.0.0/16
163.218.0.0/16
202.16.104.0/21
202.32.0.0/16
202.48.108.0/23
202.141.192.0/20
202.214.0.0/16
202.221.0.0/16
202.224.128.0/18
202.232.0.0/16
202.238.128.0/17
202.245.133.0/24
202.247.136.0/21
202.247.160.0/19
202.253.115.0/24
203.180.0.0/16
210.128.0.0/16
210.130.0.0/16
210.133.192.0/18
210.138.0.0/16
210.142.128.0/19
210.148.0.0/15
210.173.0.0/19
211.14.32.0/19
218.42.160.0/19
218.228.96.0/19
219.105.0.0/19
219.111.0.0/17
219.119.0.0/16
219.121.160.0/19
219.126.128.0/17
220.100.0.0/16
220.156.0.0-220.156.159.255
220.208.192.0/19
220.210.128.0/18
Signature Algorithm: sha256WithRSAEncryption
02:1c:cf:09:d4:99:6d:9f:13:2b:78:56:28:45:81:70:60:17:
1f:25:ab:d0:12:3c:1b:b3:84:a9:45:b1:2a:d9:4b:3f:8b:21:
aa:f1:c8:8e:ca:ad:58:04:1a:b8:1b:a6:cd:44:2d:67:c2:a5:
e8:e5:8c:4d:2c:ac:b0:66:21:02:34:cf:2c:07:fd:27:1b:4c:
e4:31:a6:70:10:d9:23:52:2f:fd:66:3a:5d:b3:7b:7d:00:78:
2f:c3:90:ac:9b:83:11:83:8b:60:8a:44:42:3e:d2:43:b3:17:
12:04:1e:83:6b:39:07:d8:06:aa:cf:96:86:88:bb:0b:0a:dd:
3a:3a:35:e4:4d:d8:54:5f:4a:ff:e2:8b:d1:60:0a:7f:ba:fa:
f7:6d:42:c2:f3:76:32:33:9e:c5:0f:b6:f9:46:cf:4c:b6:97:
3d:0f:6e:26:bf:2f:4b:51:7c:6e:bc:f3:52:aa:c1:8d:3c:1d:
1d:ab:f0:9f:f4:06:2b:93:72:a0:21:7f:57:0a:c9:69:15:e5:
87:84:36:c3:1a:ce:7d:9f:a7:ba:56:2f:0d:60:2a:e9:c7:cb:
d7:7f:8a:cb:25:8d:81:d6:ba:26:03:32:4b:b1:66:31:1d:58:
d8:dc:b6:3c:1c:b2:8e:c4:05:f6:37:1d:73:29:ad:3e:45:ea:
2f:86:49:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 07:24:12 2025 by rpki-client