Certificate
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
File: KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer (raw, json)
Hash identifier: g/DkMsGXwwmxwxGgPiMDp2iKbhrcSefM2xFtafYm/rk=
Subject key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 519D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Sun 15 Jun 2025 01:38:03 +0000
Certificate not after: Mon 15 Jun 2026 01:30:02 +0000
Subordinate resources: IP: 27.112.124.0/22
IP: 49.239.64.0/18
IP: 58.138.0.0 -- 58.138.191.255
IP: 61.211.96.0/19
IP: 101.128.128.0/17
IP: 103.2.57.0 -- 103.2.59.255
IP: 113.197.128.0/17
IP: 116.118.192.0/20
IP: 118.151.0.0 -- 118.151.191.255
IP: 119.10.192.0/18
IP: 121.102.0.0/16
IP: 121.200.200.0/21
IP: 124.41.0.0 -- 124.41.191.255
IP: 124.147.64.0/18
IP: 125.30.0.0/16
IP: 133.110.0.0/16
IP: 133.137.0.0/16
IP: 133.142.0.0/16
IP: 133.159.0.0/16
IP: 133.218.0.0/16
IP: 133.236.0.0/16
IP: 133.238.8.0 -- 133.238.255.255
IP: 150.31.0.0/16
IP: 163.49.0.0/16
IP: 163.131.0.0/16
IP: 163.140.0.0/16
IP: 163.218.0.0/16
IP: 202.16.104.0/21
IP: 202.32.0.0/16
IP: 202.48.108.0/23
IP: 202.141.192.0/20
IP: 202.214.0.0/16
IP: 202.221.0.0/16
IP: 202.224.128.0/18
IP: 202.232.0.0/16
IP: 202.238.128.0/17
IP: 202.245.133.0/24
IP: 202.247.136.0/21
IP: 202.247.160.0/19
IP: 202.253.115.0/24
IP: 203.180.0.0/16
IP: 210.128.0.0/16
IP: 210.130.0.0/16
IP: 210.133.192.0/18
IP: 210.138.0.0/16
IP: 210.142.128.0/19
IP: 210.148.0.0/15
IP: 210.173.0.0/19
IP: 211.14.32.0/19
IP: 218.42.160.0/19
IP: 218.228.96.0/19
IP: 219.105.0.0/19
IP: 219.111.0.0/17
IP: 219.119.0.0/16
IP: 219.121.160.0/19
IP: 219.126.128.0/17
IP: 220.100.0.0/16
IP: 220.156.0.0 -- 220.156.159.255
IP: 220.208.192.0/19
IP: 220.210.128.0/18
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Jul 2025 03:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20893 (0x519d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Jun 15 01:38:03 2025 GMT
Not After : Jun 15 01:30:02 2026 GMT
Subject: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d7:87:9f:aa:a3:5a:09:42:a3:66:6a:a3:4d:
40:96:73:80:f2:96:56:78:fc:9f:31:04:7a:71:66:
f3:71:2e:24:a5:f0:35:60:a6:75:f2:e5:5f:73:ba:
88:97:fb:d1:d1:fa:c5:b9:18:cf:2d:68:51:7d:72:
a5:f4:42:11:fe:58:96:54:28:d6:a6:c1:49:2b:28:
05:8d:ff:47:d8:40:da:b2:84:2d:5e:02:bb:40:ab:
8a:35:c1:32:86:21:c2:94:11:53:75:8d:9e:df:ea:
6a:ab:80:3c:4f:a2:39:e1:25:73:1b:9d:20:5a:82:
bf:1e:0d:ed:0c:7a:88:c4:b0:fc:bd:1f:80:4a:a0:
e4:2f:a2:fe:60:84:f2:b9:94:b8:8e:e5:b9:70:0c:
ec:7e:41:64:2f:e8:6a:93:ec:ae:37:3f:58:19:5e:
48:a4:b5:95:9b:a8:e9:32:91:70:e7:60:61:32:c7:
d2:6e:62:60:11:5e:54:6d:3d:ce:5b:7d:f1:d1:05:
61:e2:80:8d:e3:eb:5d:c4:b2:76:e8:e7:fd:20:e0:
15:fa:6c:9d:ae:06:3f:32:83:fc:c0:ce:24:32:e1:
8e:9f:97:d7:a9:ee:b5:83:d6:ad:5b:1a:eb:30:ec:
07:12:9f:81:ec:16:fb:cc:a0:5d:67:ce:cc:9a:9a:
52:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.112.124.0/22
49.239.64.0/18
58.138.0.0-58.138.191.255
61.211.96.0/19
101.128.128.0/17
103.2.57.0-103.2.59.255
113.197.128.0/17
116.118.192.0/20
118.151.0.0-118.151.191.255
119.10.192.0/18
121.102.0.0/16
121.200.200.0/21
124.41.0.0-124.41.191.255
124.147.64.0/18
125.30.0.0/16
133.110.0.0/16
133.137.0.0/16
133.142.0.0/16
133.159.0.0/16
133.218.0.0/16
133.236.0.0/16
133.238.8.0-133.238.255.255
150.31.0.0/16
163.49.0.0/16
163.131.0.0/16
163.140.0.0/16
163.218.0.0/16
202.16.104.0/21
202.32.0.0/16
202.48.108.0/23
202.141.192.0/20
202.214.0.0/16
202.221.0.0/16
202.224.128.0/18
202.232.0.0/16
202.238.128.0/17
202.245.133.0/24
202.247.136.0/21
202.247.160.0/19
202.253.115.0/24
203.180.0.0/16
210.128.0.0/16
210.130.0.0/16
210.133.192.0/18
210.138.0.0/16
210.142.128.0/19
210.148.0.0/15
210.173.0.0/19
211.14.32.0/19
218.42.160.0/19
218.228.96.0/19
219.105.0.0/19
219.111.0.0/17
219.119.0.0/16
219.121.160.0/19
219.126.128.0/17
220.100.0.0/16
220.156.0.0-220.156.159.255
220.208.192.0/19
220.210.128.0/18
Signature Algorithm: sha256WithRSAEncryption
03:f7:3e:7a:c7:2f:77:05:43:5b:27:aa:a9:5c:5a:77:ce:cf:
5f:dd:c9:91:a1:f5:27:2d:53:64:8f:dd:47:a0:e5:2f:19:c1:
a7:9d:37:37:81:94:62:d9:fc:9b:b5:86:b3:15:82:62:13:22:
f1:78:0a:c4:6a:6a:bc:43:79:48:88:d5:8c:04:fa:84:c3:2a:
63:60:7b:2b:d6:1d:3d:2e:7b:a4:a2:93:c7:d2:56:56:88:22:
d6:f7:fa:c9:ac:f5:71:cd:31:bb:fa:f6:21:d5:f6:66:7f:14:
f4:6f:f3:bc:69:98:22:94:ad:d3:df:c2:c9:e7:c9:d0:c3:49:
86:84:99:7e:24:69:e2:20:52:22:e2:ea:0f:49:b1:e6:7f:6c:
0c:c4:46:67:3c:92:32:8d:89:ab:7e:b7:c2:94:dc:ff:7a:ae:
f0:71:0e:81:6e:ed:ec:59:02:8c:22:d2:32:95:71:b7:a5:0e:
50:b9:46:dc:8f:d0:0e:04:36:66:98:ba:d4:62:86:1b:39:f2:
53:05:80:a0:0f:d1:29:74:9b:fa:21:6c:b5:50:86:06:4f:45:
8a:ad:4d:c9:a4:85:6c:2d:e6:1c:c7:2c:b8:07:c0:f7:1c:47:
b7:ec:98:90:b4:ef:b2:ad:d3:98:00:fe:8d:df:e1:36:d0:0d:
49:22:0a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 12:37:56 2025 by rpki-client