Certificate
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer
File: qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer (raw, json)
Hash identifier: HcLA2TjKsJBdaSyXG7i3JHHrVGlH+Wpa1M6+NW/KNHI=
Subject key identifier: A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 2F70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Wed 15 May 2024 01:32:40 +0000
Certificate not after: Thu 15 May 2025 01:30:03 +0000
Subordinate resources: IP: 61.122.16.0/22
IP: 103.210.108.0/22
IP: 133.112.0.0/16
IP: 150.41.0.0/16
IP: 202.1.208.0/20
IP: 202.13.62.0 -- 202.13.79.255
IP: 202.210.56.0/22
IP: 202.243.188.0/22
IP: 203.178.8.0/24
IP: 203.178.17.0/24
IP: 203.179.64.0/20
IP: 210.134.208.0/20
IP: 211.1.0.0/19
IP: 211.120.240.0/21
IP: 218.231.16.0/20
IP: 219.101.112.0/20
IP: 220.213.240.0/20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 May 2024 07:35:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12144 (0x2f70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: May 15 01:32:40 2024 GMT
Not After : May 15 01:30:03 2025 GMT
Subject: CN=A935D5AD33DC630C4611987140F5E468B7081D11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fc:d5:8d:5f:ee:b9:c8:c1:73:da:a3:53:aa:
ec:75:d4:7b:f8:71:36:3e:48:e3:19:ed:3e:8a:e3:
2c:c7:62:08:2d:03:dc:91:89:ce:9e:8e:89:84:13:
d0:e0:6d:88:53:bd:35:3a:8b:16:5a:5e:80:c9:d1:
fd:76:23:f6:a0:7c:d2:a9:6b:12:29:c7:0d:b2:f7:
6b:80:56:41:fb:7a:52:63:e2:ba:a8:0a:0e:b5:60:
1c:31:7b:da:66:29:03:89:09:66:78:e0:38:b6:61:
dd:b5:cd:a9:28:7b:c2:76:9e:2b:9a:55:0f:cd:db:
82:0f:c0:2f:d1:e5:0d:4d:e7:23:bd:f2:11:50:cb:
bb:3c:23:d6:7a:91:e3:38:e4:21:3f:ec:e7:76:ac:
f4:b8:2e:0f:7b:5c:1e:63:7d:1b:ce:1e:95:49:6a:
31:2f:eb:7e:7f:6b:72:7a:e8:da:b5:b6:52:54:07:
69:ad:89:f4:b9:8a:67:9a:a1:f2:68:bd:74:84:3d:
d5:5f:13:21:32:12:dc:cd:6b:3a:c4:cb:6d:4c:d8:
e8:2f:71:dd:b6:01:04:9c:9f:53:e3:4a:af:b4:61:
e5:93:ee:4e:91:b3:8b:6b:43:5a:f0:b1:bf:fd:b3:
6f:b1:79:b2:ac:2c:b5:63:be:0c:16:13:de:bb:80:
6f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.122.16.0/22
103.210.108.0/22
133.112.0.0/16
150.41.0.0/16
202.1.208.0/20
202.13.62.0-202.13.79.255
202.210.56.0/22
202.243.188.0/22
203.178.8.0/24
203.178.17.0/24
203.179.64.0/20
210.134.208.0/20
211.1.0.0/19
211.120.240.0/21
218.231.16.0/20
219.101.112.0/20
220.213.240.0/20
Signature Algorithm: sha256WithRSAEncryption
90:d6:f9:55:5d:8d:1c:45:42:51:f0:49:23:30:41:b5:49:1e:
89:15:3b:db:60:60:d6:0d:4a:e0:c5:db:67:42:d0:25:c2:1d:
26:a7:32:10:2d:3c:2a:e6:e3:2e:e2:85:51:48:02:a6:8b:f1:
e4:fd:27:52:61:b3:af:0c:15:97:27:a3:1a:0f:d0:fa:28:2a:
4c:b2:78:e9:f6:7b:f0:59:60:35:38:2b:ae:37:61:96:21:4a:
e4:b4:a4:63:d8:88:a8:f2:e3:b7:ea:67:0f:19:c9:f2:80:92:
02:f8:13:78:ea:a6:9c:a8:5a:e6:7e:ff:5e:fb:95:0f:fa:91:
4b:de:36:83:14:4f:e6:d4:b6:b3:d8:41:f9:86:45:ec:78:cd:
a7:85:e2:aa:85:f8:2b:34:82:87:18:37:17:14:f8:99:0b:0b:
b3:e2:2a:f6:d8:46:89:35:7e:ba:0b:d4:4a:53:5b:fe:73:89:
89:6f:c9:a1:c4:ba:d5:ca:80:6c:6e:78:f9:89:a3:7a:2f:4a:
8c:fc:6a:26:fd:7c:02:c7:32:40:00:2c:83:c5:32:0f:d6:a4:
4e:aa:fc:6b:88:4e:6a:9f:a1:9b:86:0f:ce:b9:f3:4b:0f:e7:
56:12:5b:8f:cb:bc:83:64:8e:f6:2d:3a:a2:99:14:f4:c9:f7:
52:05:7f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 08:12:57 2024 by rpki-client on console-fra.rpki-client.org