Certificate
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
File: -way5KnVZ-t9gP9Zp1X9KDv7E6s.cer (raw, json)
Hash identifier: 0ohhbXLVGQGcQQrDZYLFS1rFYlyD91vUerUiki/cp8w=
Subject key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 4B09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Thu 15 May 2025 01:37:31 +0000
Certificate not after: Fri 15 May 2026 01:30:03 +0000
Subordinate resources: IP: 14.193.0.0/16
IP: 27.113.248.0/22
IP: 27.116.0.0/20
IP: 27.126.64.0 -- 27.126.143.255
IP: 49.250.0.0/15
IP: 58.85.0.0/16
IP: 61.46.0.0/16
IP: 61.115.128.0/18
IP: 61.125.64.0/18
IP: 61.192.0.0/17
IP: 61.203.224.0/19
IP: 61.205.128.0/18
IP: 61.206.96.0/20
IP: 61.211.144.0/20
IP: 61.215.128.0 -- 61.215.175.255
IP: 103.3.4.0/22
IP: 103.55.196.0/22
IP: 103.192.68.0/22
IP: 110.4.48.0/20
IP: 110.92.80.0/20
IP: 110.93.0.0/21
IP: 110.93.96.0/20
IP: 110.172.0.0/20
IP: 110.173.240.0/20
IP: 110.232.0.0/19
IP: 110.232.128.0/21
IP: 111.90.0.0/17
IP: 111.125.144.0/21
IP: 112.137.32.0/20
IP: 112.137.64.0/18
IP: 113.52.16.0/20
IP: 113.61.112.0/20
IP: 113.197.16.0/20
IP: 114.69.160.0/20
IP: 114.134.112.0/20
IP: 114.134.192.0/18
IP: 114.142.128.0/21
IP: 114.198.192.0 -- 114.198.231.255
IP: 115.42.96.0/20
IP: 116.70.128.0/18
IP: 117.53.0.0 -- 117.53.39.255
IP: 118.83.0.0/16
IP: 118.86.0.0/15
IP: 119.24.0.0 -- 119.26.255.255
IP: 119.82.192.0/20
IP: 119.161.112.0/21
IP: 122.50.32.0/19
IP: 122.102.128.0/17
IP: 122.196.0.0/15
IP: 122.255.128.0/17
IP: 123.98.224.0/19
IP: 124.195.144.0/20
IP: 125.4.0.0/16
IP: 125.62.240.0/20
IP: 175.41.64.0/18
IP: 175.103.12.0/22
IP: 175.111.120.0/21
IP: 180.92.32.0/19
IP: 180.131.152.0/21
IP: 180.131.192.0/20
IP: 180.149.160.0/19
IP: 180.220.0.0/15
IP: 182.50.192.0 -- 182.50.239.255
IP: 202.43.16.0/20
IP: 202.43.68.0/22
IP: 202.57.224.0/20
IP: 202.72.64.0/20
IP: 202.78.176.0/20
IP: 202.83.184.0/21
IP: 202.138.80.0/20
IP: 202.148.240.0/20
IP: 202.157.0.0/18
IP: 202.162.128.0/19
IP: 202.178.80.0/20
IP: 202.179.224.0/20
IP: 202.180.176.0/20
IP: 203.89.32.0/19
IP: 203.114.248.0/22
IP: 203.124.64.0/19
IP: 203.153.56.0/22
IP: 203.217.180.0/22
IP: 210.2.192.0/18
IP: 210.135.192.0/19
IP: 210.156.64.0/20
IP: 210.172.240.0/20
IP: 210.211.32.0/20
IP: 210.228.0.0/20
IP: 211.1.176.0/20
IP: 211.19.208.0/20
IP: 211.120.128.0/18
IP: 211.124.0.0/16
IP: 211.135.0.0/17
IP: 218.45.112.0/20
IP: 218.219.80.0/20
IP: 218.220.0.0/16
IP: 219.100.24.0/22
IP: 219.100.152.0/22
IP: 219.105.80.0 -- 219.105.127.255
IP: 219.111.192.0/20
IP: 219.112.128.0/19
IP: 219.112.192.0/19
IP: 219.113.96.0/20
IP: 219.114.192.0 -- 219.115.255.255
IP: 219.117.0.0/20
IP: 219.117.160.0/19
IP: 219.124.16.0/20
IP: 219.124.224.0/19
IP: 220.208.64.0/18
IP: 221.132.128.0/18
IP: 223.165.20.0/22
IP: 223.165.32.0/19
IP: 223.223.208.0/21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 May 2025 10:41:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19209 (0x4b09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: May 15 01:37:31 2025 GMT
Not After : May 15 01:30:03 2026 GMT
Subject: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f3:64:ed:60:7f:80:d9:15:6a:03:ce:9a:d3:
6c:2b:0e:d4:67:e0:ab:ed:9d:61:d7:9c:9d:9c:53:
06:87:a4:4c:0a:ae:d2:f2:3d:50:d6:58:14:71:38:
bf:01:d3:bf:a0:7b:9d:6d:35:30:6d:99:8e:9d:59:
1c:75:61:42:9c:47:55:a1:4e:76:58:f6:81:d7:56:
6f:ab:06:1a:f7:61:9d:e4:31:b3:65:f4:da:d2:c1:
4a:c0:68:b8:91:0e:fa:73:14:26:b2:db:43:bf:a6:
c0:fe:12:8c:d4:a3:ce:ac:7d:57:43:8d:6d:7c:88:
8c:36:6e:69:37:c1:b5:f0:31:c4:4e:41:30:13:0c:
cb:a1:37:60:de:29:cb:d0:ae:08:74:e2:f9:92:cc:
53:29:ae:9f:03:61:be:f1:1b:5c:eb:6d:13:c8:eb:
8f:28:a9:a9:7d:ee:62:07:e4:88:d8:ac:db:2e:7c:
e6:2a:ac:43:a3:76:5c:31:9a:23:81:71:3f:2f:dd:
ee:64:cb:d6:0d:25:90:c1:4e:97:98:18:2c:76:51:
ca:a3:4e:94:2b:95:47:b0:0e:bd:b5:e2:aa:2b:a4:
65:9c:07:1e:59:57:9b:88:88:f5:b5:0e:1d:78:ad:
68:12:5e:57:3c:33:c7:46:a2:18:be:4c:6c:00:40:
23:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.193.0.0/16
27.113.248.0/22
27.116.0.0/20
27.126.64.0-27.126.143.255
49.250.0.0/15
58.85.0.0/16
61.46.0.0/16
61.115.128.0/18
61.125.64.0/18
61.192.0.0/17
61.203.224.0/19
61.205.128.0/18
61.206.96.0/20
61.211.144.0/20
61.215.128.0-61.215.175.255
103.3.4.0/22
103.55.196.0/22
103.192.68.0/22
110.4.48.0/20
110.92.80.0/20
110.93.0.0/21
110.93.96.0/20
110.172.0.0/20
110.173.240.0/20
110.232.0.0/19
110.232.128.0/21
111.90.0.0/17
111.125.144.0/21
112.137.32.0/20
112.137.64.0/18
113.52.16.0/20
113.61.112.0/20
113.197.16.0/20
114.69.160.0/20
114.134.112.0/20
114.134.192.0/18
114.142.128.0/21
114.198.192.0-114.198.231.255
115.42.96.0/20
116.70.128.0/18
117.53.0.0-117.53.39.255
118.83.0.0/16
118.86.0.0/15
119.24.0.0-119.26.255.255
119.82.192.0/20
119.161.112.0/21
122.50.32.0/19
122.102.128.0/17
122.196.0.0/15
122.255.128.0/17
123.98.224.0/19
124.195.144.0/20
125.4.0.0/16
125.62.240.0/20
175.41.64.0/18
175.103.12.0/22
175.111.120.0/21
180.92.32.0/19
180.131.152.0/21
180.131.192.0/20
180.149.160.0/19
180.220.0.0/15
182.50.192.0-182.50.239.255
202.43.16.0/20
202.43.68.0/22
202.57.224.0/20
202.72.64.0/20
202.78.176.0/20
202.83.184.0/21
202.138.80.0/20
202.148.240.0/20
202.157.0.0/18
202.162.128.0/19
202.178.80.0/20
202.179.224.0/20
202.180.176.0/20
203.89.32.0/19
203.114.248.0/22
203.124.64.0/19
203.153.56.0/22
203.217.180.0/22
210.2.192.0/18
210.135.192.0/19
210.156.64.0/20
210.172.240.0/20
210.211.32.0/20
210.228.0.0/20
211.1.176.0/20
211.19.208.0/20
211.120.128.0/18
211.124.0.0/16
211.135.0.0/17
218.45.112.0/20
218.219.80.0/20
218.220.0.0/16
219.100.24.0/22
219.100.152.0/22
219.105.80.0-219.105.127.255
219.111.192.0/20
219.112.128.0/19
219.112.192.0/19
219.113.96.0/20
219.114.192.0-219.115.255.255
219.117.0.0/20
219.117.160.0/19
219.124.16.0/20
219.124.224.0/19
220.208.64.0/18
221.132.128.0/18
223.165.20.0/22
223.165.32.0/19
223.223.208.0/21
Signature Algorithm: sha256WithRSAEncryption
9b:5c:71:74:5e:6f:3e:44:a8:e6:a9:e8:0d:4d:38:6b:3a:35:
92:08:14:8e:f9:84:0f:88:12:86:04:b2:04:be:25:95:28:18:
c5:02:ab:a3:4f:d8:55:23:15:a1:b5:7f:18:39:f2:a4:14:f5:
51:e7:3f:18:71:83:4a:26:1e:e9:1f:26:a3:11:c3:68:ef:d4:
66:54:d3:48:68:50:14:27:7b:72:ec:e3:b7:37:9d:76:3d:23:
41:60:49:2f:ec:51:07:31:dc:c0:e0:c6:3b:ec:c6:b3:71:7a:
0c:38:97:ed:fd:2c:24:9e:f0:ba:90:30:b3:b2:c8:56:83:9e:
9b:05:6b:e0:48:24:39:7f:6e:b8:8b:30:ee:9e:5d:b1:a3:a8:
ae:d6:b6:6a:d7:48:13:5a:10:2c:bd:78:76:d0:9b:ce:59:f7:
c1:5f:72:80:72:41:86:14:e3:dc:d4:30:71:a1:5a:ed:21:b5:
06:a9:91:6e:ce:06:45:95:b2:fd:61:f5:50:38:dd:49:19:a6:
bf:81:e4:7e:13:b4:cd:9e:d8:3e:6a:51:1b:93:e9:b3:1c:a1:
37:95:a8:00:8f:ed:ea:9d:42:50:74:32:74:5c:f0:52:d5:26:
3e:00:b9:9e:5b:d7:fa:59:9a:1f:25:1b:95:f0:9e:7d:f0:72:
e2:61:5d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 14:21:44 2025 by rpki-client