Certificate
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/l4_8Zcbv7A-XngkD5WZMu3fw7I0.cer
File: l4_8Zcbv7A-XngkD5WZMu3fw7I0.cer (raw, json)
Hash identifier: f/JAAUQeJFl02z8zYX+sdrpdOnAT54plMeit1qggtwY=
Subject key identifier: 97:8F:FC:65:C6:EF:EC:0F:97:9E:09:03:E5:66:4C:BB:77:F0:EC:8D
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 1EFB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/362/l4_8Zcbv7A-XngkD5WZMu3fw7I0.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/362/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Sat 15 Apr 2023 01:34:32 +0000
Certificate not after: Sun 14 Apr 2024 01:30:02 +0000
Subordinate resources: IP: 61.245.0.0/17
IP: 101.203.0.0/18
IP: 112.136.0.0/17
IP: 123.230.0.0/16
IP: 182.22.128.0/17
IP: 218.33.128.0/17
IP: 218.185.128.0/18
IP: 218.231.128.0/17
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7931 (0x1efb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Apr 15 01:34:32 2023 GMT
Not After : Apr 14 01:30:02 2024 GMT
Subject: CN=978FFC65C6EFEC0F979E0903E5664CBB77F0EC8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:44:c2:0d:4e:22:7c:6d:d6:76:03:2c:55:6d:
0d:8f:31:11:13:16:6a:e5:e3:e5:7d:07:7d:05:b5:
e9:45:a7:91:3e:be:e1:38:29:85:9f:3f:d7:2b:10:
70:40:1f:a6:2a:14:c2:67:2c:ed:fc:c9:be:82:65:
eb:05:d9:84:7a:02:c8:30:15:b1:bd:5c:11:49:72:
95:6e:12:e4:53:92:70:b7:ed:93:ed:65:ea:f3:39:
9b:4a:d5:5e:3d:43:56:59:76:24:b6:f5:a6:03:b2:
ef:34:e2:e0:39:ad:93:f5:45:d7:87:a6:f0:f6:51:
bc:af:07:b4:d7:eb:64:e4:1f:31:b2:9d:e1:11:df:
06:5b:c3:99:02:05:6b:b7:42:3f:7e:ca:7e:2f:b2:
fe:10:6a:ff:5c:6f:07:03:5d:3d:7a:5b:3a:bf:6d:
d0:53:a1:52:a2:50:cb:46:f6:fc:2f:a1:26:7f:3d:
b3:5b:e5:cf:a2:92:8d:42:10:e6:58:0b:1d:dd:cb:
38:01:81:bf:fb:06:0f:de:48:8d:57:a7:b4:6c:1f:
d7:2b:0a:52:af:f4:97:79:74:71:b9:0e:f9:b0:de:
1d:8a:bd:3d:4a:f4:26:a1:de:00:23:e9:3b:5e:01:
95:30:c6:f6:89:4c:be:1f:f3:20:2d:56:8c:8c:03:
55:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8F:FC:65:C6:EF:EC:0F:97:9E:09:03:E5:66:4C:BB:77:F0:EC:8D
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/362/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/362/l4_8Zcbv7A-XngkD5WZMu3fw7I0.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.245.0.0/17
101.203.0.0/18
112.136.0.0/17
123.230.0.0/16
182.22.128.0/17
218.33.128.0/17
218.185.128.0/18
218.231.128.0/17
Signature Algorithm: sha256WithRSAEncryption
2c:fd:0f:fa:ab:b1:d1:ef:52:57:40:32:3d:fd:36:d7:61:8f:
04:6a:e0:bd:4b:05:42:68:43:7d:ac:d1:63:23:09:2a:bf:e7:
09:0c:2f:d7:13:aa:3f:1e:57:0d:5a:2b:ef:32:54:00:9a:fc:
f9:47:45:5c:b6:6c:8d:7a:78:79:89:5d:e2:b5:14:5b:c2:c7:
66:d5:00:fe:5d:d4:c2:ef:9b:08:2c:99:12:4a:55:61:42:dd:
bf:32:94:03:10:0a:5f:03:16:d9:30:bf:e9:05:7b:2e:87:ae:
7f:70:73:34:32:4f:0d:62:ae:16:af:81:5b:b9:87:45:93:08:
31:0c:e0:f3:bc:02:e7:a3:3c:fc:25:b4:c0:bb:9e:f3:69:6c:
67:c6:5d:0f:fe:75:2a:dc:41:78:67:86:9b:3c:38:09:0d:ed:
6d:13:40:79:87:b8:af:64:a0:a2:c3:7b:0d:7f:5e:c4:20:24:
39:42:85:b4:cf:36:f7:af:16:81:3a:ab:53:26:c1:90:14:e9:
9c:0e:a3:f6:0a:d5:34:2a:3c:17:ee:b6:a0:6c:dd:96:d1:94:
b4:d2:ae:4e:c3:4a:ca:7a:4f:c3:4f:82:b7:ed:6b:d4:0e:83:
6b:38:da:8a:65:87:b4:66:83:11:85:8c:cf:fc:92:0f:26:a6:
89:13:b9:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:31 2024 by rpki-client on console-ams.rpki-client.org