Certificate
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
File: KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer (raw, json)
Hash identifier: 8k4CDDrWng3lgl5w70iUjCNbgDUfX8ktrX3NcT7oXfg=
Subject key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 5A7B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Wed 15 Oct 2025 01:33:49 +0000
Certificate not after: Thu 15 Oct 2026 01:30:02 +0000
Subordinate resources: IP: 27.112.124.0/22
IP: 49.239.64.0/18
IP: 58.138.0.0 -- 58.138.191.255
IP: 61.211.96.0/19
IP: 101.128.128.0/17
IP: 103.2.57.0 -- 103.2.59.255
IP: 113.197.128.0/17
IP: 116.118.192.0/20
IP: 118.151.0.0 -- 118.151.191.255
IP: 119.10.192.0/18
IP: 121.102.0.0/16
IP: 121.200.200.0/21
IP: 124.41.0.0 -- 124.41.191.255
IP: 124.147.64.0/18
IP: 125.30.0.0/16
IP: 133.110.0.0/16
IP: 133.137.0.0/16
IP: 133.142.0.0/16
IP: 133.159.0.0/16
IP: 133.218.0.0/16
IP: 133.236.0.0/16
IP: 133.238.8.0 -- 133.238.255.255
IP: 150.31.0.0/16
IP: 163.49.0.0/16
IP: 163.131.0.0/16
IP: 163.140.0.0/16
IP: 163.218.0.0/16
IP: 202.16.104.0/21
IP: 202.32.0.0/16
IP: 202.48.108.0/23
IP: 202.141.192.0/20
IP: 202.214.0.0/16
IP: 202.221.0.0/16
IP: 202.224.128.0/18
IP: 202.232.0.0/16
IP: 202.238.128.0/17
IP: 202.245.133.0/24
IP: 202.247.136.0/21
IP: 202.247.160.0/19
IP: 202.253.115.0/24
IP: 203.180.0.0/16
IP: 210.128.0.0/16
IP: 210.130.0.0/16
IP: 210.133.192.0/18
IP: 210.138.0.0/16
IP: 210.142.128.0/19
IP: 210.148.0.0/15
IP: 210.173.0.0/19
IP: 211.14.32.0/19
IP: 218.42.160.0/19
IP: 218.228.96.0/19
IP: 219.105.0.0/19
IP: 219.111.0.0/17
IP: 219.119.0.0/16
IP: 219.121.160.0/19
IP: 219.126.128.0/17
IP: 220.100.0.0/16
IP: 220.156.0.0 -- 220.156.159.255
IP: 220.208.192.0/19
IP: 220.210.128.0/18
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 03:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23163 (0x5a7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Oct 15 01:33:49 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d7:87:9f:aa:a3:5a:09:42:a3:66:6a:a3:4d:
40:96:73:80:f2:96:56:78:fc:9f:31:04:7a:71:66:
f3:71:2e:24:a5:f0:35:60:a6:75:f2:e5:5f:73:ba:
88:97:fb:d1:d1:fa:c5:b9:18:cf:2d:68:51:7d:72:
a5:f4:42:11:fe:58:96:54:28:d6:a6:c1:49:2b:28:
05:8d:ff:47:d8:40:da:b2:84:2d:5e:02:bb:40:ab:
8a:35:c1:32:86:21:c2:94:11:53:75:8d:9e:df:ea:
6a:ab:80:3c:4f:a2:39:e1:25:73:1b:9d:20:5a:82:
bf:1e:0d:ed:0c:7a:88:c4:b0:fc:bd:1f:80:4a:a0:
e4:2f:a2:fe:60:84:f2:b9:94:b8:8e:e5:b9:70:0c:
ec:7e:41:64:2f:e8:6a:93:ec:ae:37:3f:58:19:5e:
48:a4:b5:95:9b:a8:e9:32:91:70:e7:60:61:32:c7:
d2:6e:62:60:11:5e:54:6d:3d:ce:5b:7d:f1:d1:05:
61:e2:80:8d:e3:eb:5d:c4:b2:76:e8:e7:fd:20:e0:
15:fa:6c:9d:ae:06:3f:32:83:fc:c0:ce:24:32:e1:
8e:9f:97:d7:a9:ee:b5:83:d6:ad:5b:1a:eb:30:ec:
07:12:9f:81:ec:16:fb:cc:a0:5d:67:ce:cc:9a:9a:
52:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.112.124.0/22
49.239.64.0/18
58.138.0.0-58.138.191.255
61.211.96.0/19
101.128.128.0/17
103.2.57.0-103.2.59.255
113.197.128.0/17
116.118.192.0/20
118.151.0.0-118.151.191.255
119.10.192.0/18
121.102.0.0/16
121.200.200.0/21
124.41.0.0-124.41.191.255
124.147.64.0/18
125.30.0.0/16
133.110.0.0/16
133.137.0.0/16
133.142.0.0/16
133.159.0.0/16
133.218.0.0/16
133.236.0.0/16
133.238.8.0-133.238.255.255
150.31.0.0/16
163.49.0.0/16
163.131.0.0/16
163.140.0.0/16
163.218.0.0/16
202.16.104.0/21
202.32.0.0/16
202.48.108.0/23
202.141.192.0/20
202.214.0.0/16
202.221.0.0/16
202.224.128.0/18
202.232.0.0/16
202.238.128.0/17
202.245.133.0/24
202.247.136.0/21
202.247.160.0/19
202.253.115.0/24
203.180.0.0/16
210.128.0.0/16
210.130.0.0/16
210.133.192.0/18
210.138.0.0/16
210.142.128.0/19
210.148.0.0/15
210.173.0.0/19
211.14.32.0/19
218.42.160.0/19
218.228.96.0/19
219.105.0.0/19
219.111.0.0/17
219.119.0.0/16
219.121.160.0/19
219.126.128.0/17
220.100.0.0/16
220.156.0.0-220.156.159.255
220.208.192.0/19
220.210.128.0/18
Signature Algorithm: sha256WithRSAEncryption
71:64:11:60:b1:ea:d6:5a:a0:39:33:b5:82:75:4e:15:90:44:
37:ce:0e:8e:14:dc:26:fc:29:c3:3c:45:98:25:10:4b:d0:90:
17:2b:24:1a:0d:66:e8:49:e4:22:ac:96:11:45:52:4b:35:46:
79:e8:cc:6b:ee:03:f4:9c:45:a8:84:25:ce:4a:b4:16:c4:20:
7c:a0:0c:dc:56:90:23:85:a0:c3:c6:36:11:82:f4:d1:4e:cf:
ee:db:2a:6b:de:af:85:83:55:40:45:ad:a2:68:2a:5c:58:b2:
81:81:cf:d7:16:3c:96:69:46:f5:f3:6f:8b:9c:65:1b:93:81:
60:85:0f:7c:aa:bf:ae:59:cb:a5:f2:06:f8:68:31:2f:2c:55:
9f:fe:37:4f:3a:2e:e7:c0:8f:73:b4:79:90:7a:61:8f:b7:a3:
e7:8d:48:e5:39:26:68:60:97:48:96:b3:32:4b:ec:fe:86:23:
88:29:44:9f:f8:47:f0:88:ee:f1:10:6f:72:39:ed:ee:8b:b7:
d0:63:bc:9e:8b:bb:33:35:a5:78:3a:e7:28:90:4d:7a:27:af:
25:36:25:9f:78:7e:95:f8:aa:b2:ce:ca:18:b8:90:41:bb:9a:
fe:0c:c8:28:e7:e3:5b:29:26:04:47:4f:31:36:c3:4e:9a:1b:
0a:a2:6f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:49:19 2025 by rpki-client