Certificate
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
File: xJ5k-3yMfGtc18dwGILoWXxCg44.cer (raw, json)
Hash identifier: kxwgoDM8n4U3wElJABeVecZ9o+bDcI1+MqGy4gvQu1I=
Subject key identifier: C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 493A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Tue 15 Apr 2025 01:35:53 +0000
Certificate not after: Wed 15 Apr 2026 01:30:03 +0000
Subordinate resources: IP: 43.223.0.0/16
IP: 103.2.12.0/22
IP: 103.2.28.0/24
IP: 103.2.30.0/23
IP: 103.2.244.0/22
IP: 118.151.224.0/19
IP: 119.235.224.0/24
IP: 119.235.232.0/24
IP: 119.235.235.0 -- 119.235.237.255
IP: 124.147.32.0/19
IP: 182.22.0.0/17
IP: 202.93.64.0/19
IP: 202.239.0.0/20
IP: 203.104.128.0 -- 203.104.158.255
IP: 203.141.32.0/20
IP: 203.141.54.0/24
IP: 203.216.224.0/19
IP: 211.14.8.0/24
IP: 211.14.12.0/22
IP: 211.14.20.0/22
IP: 211.14.26.0 -- 211.14.29.255
IP: 219.100.144.0/22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 May 2025 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18746 (0x493a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Apr 15 01:35:53 2025 GMT
Not After : Apr 15 01:30:03 2026 GMT
Subject: CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f7:a6:ab:4d:7b:5a:d9:e6:61:5d:fa:57:bb:
62:f9:97:88:e5:84:9c:93:01:af:25:4a:88:d8:a1:
06:ad:8d:9f:37:f2:dc:be:ea:98:96:ff:cc:eb:c8:
3e:7f:1d:d8:ac:b6:30:99:97:ea:23:ef:e4:e7:11:
8d:70:8c:d9:df:c9:ea:af:27:16:e2:84:6e:ee:ca:
35:77:ea:63:2b:be:e8:c9:98:bd:64:09:65:61:f3:
25:71:4b:5f:de:0e:ad:59:ad:3b:7f:cb:61:7a:b7:
1e:b5:d5:bc:e1:a1:9a:f0:63:c9:f4:41:2a:d4:ec:
38:96:75:25:a6:de:0e:1c:d3:35:a9:a9:09:62:0e:
90:7a:86:80:41:4c:48:0b:df:9b:0c:bb:91:65:98:
be:97:c1:57:68:f5:d8:d7:df:09:bf:ec:c7:8a:5d:
04:c5:57:de:35:e2:50:1b:bb:27:a7:06:82:e4:89:
a4:2f:08:d2:94:40:86:6c:13:87:4f:fd:4c:5b:ed:
db:6b:2e:48:35:bc:38:30:c9:e6:da:72:8b:85:de:
fa:ec:e1:1c:6e:3b:b1:49:70:2a:79:a3:48:ea:40:
86:4f:cb:6b:5f:9c:11:16:a9:77:b1:b6:c6:8d:82:
d7:94:ad:39:97:cb:41:f2:86:1f:15:89:36:c4:35:
34:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.223.0.0/16
103.2.12.0/22
103.2.28.0/24
103.2.30.0/23
103.2.244.0/22
118.151.224.0/19
119.235.224.0/24
119.235.232.0/24
119.235.235.0-119.235.237.255
124.147.32.0/19
182.22.0.0/17
202.93.64.0/19
202.239.0.0/20
203.104.128.0-203.104.158.255
203.141.32.0/20
203.141.54.0/24
203.216.224.0/19
211.14.8.0/24
211.14.12.0/22
211.14.20.0/22
211.14.26.0-211.14.29.255
219.100.144.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:13:e6:8a:04:41:14:f1:5f:e8:5d:28:15:eb:21:49:21:1b:
47:e1:52:80:8e:d4:b6:72:95:ec:7e:55:b1:6a:ea:61:31:ba:
90:09:2a:08:1f:a8:57:86:1c:75:bd:ca:23:f2:7a:e5:96:aa:
4c:c1:a8:b4:35:b6:9a:98:7a:de:ae:ed:0b:47:b8:ff:7d:58:
51:01:d9:44:03:1f:a2:d1:ea:37:3d:fc:2d:18:f8:21:cd:b4:
f6:d5:9a:f1:8c:a9:32:70:92:9d:d4:56:71:1c:3e:db:b1:cb:
10:08:6f:a8:a8:8c:1e:08:d9:8b:3c:43:f8:38:0c:b2:7d:a2:
5b:08:e9:6f:45:73:5e:8b:b2:17:ad:d4:b5:c8:0a:84:19:06:
20:8d:ce:11:aa:d7:eb:0a:b2:2c:81:4e:19:e3:f5:61:54:24:
0f:94:98:7e:40:45:8c:1e:02:25:8f:89:10:77:a1:e0:01:74:
23:7c:10:8a:79:d5:16:d3:5a:b5:8b:ab:7c:e9:75:ba:9c:0b:
18:2f:27:2a:f4:44:7e:60:63:5d:9f:40:b6:45:aa:8a:98:9c:
0b:72:72:13:a4:b0:a5:ad:dd:55:4e:da:c7:48:86:63:c8:bd:
73:64:4a:10:cb:2a:9b:da:e2:71:78:90:35:fb:60:83:07:e7:
15:ec:72:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:22:32 2025 by rpki-client