Certificate
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/OMyYk3zcGieR6m73Oo6X48qQX0c.cer
File: OMyYk3zcGieR6m73Oo6X48qQX0c.cer (raw, json)
Hash identifier: pHZy/o3IcRsvIZgKheyGIO4GjY2ocq93qX0TtbVj9O8=
Subject key identifier: 38:CC:98:93:7C:DC:1A:27:91:EA:6E:F7:3A:8E:97:E3:CA:90:5F:47
Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2
Certificate issuer: /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2
Certificate serial: 0B30
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0/OMyYk3zcGieR6m73Oo6X48qQX0c.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Thu 27 Jun 2024 01:09:43 +0000
Certificate not after: Tue 24 Jun 2025 10:46:45 +0000
Subordinate resources: IP: 157.14.192.0/20
IP: 157.14.224.0 -- 157.14.247.255
IP: 165.100.160.0/20
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2864 (0xb30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2
Validity
Not Before: Jun 27 01:09:43 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=38CC98937CDC1A2791EA6EF73A8E97E3CA905F47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f1:91:3a:a9:cb:38:6f:17:50:84:fb:9c:2f:
bb:7d:e1:fb:db:4b:96:83:2b:ec:d3:51:ec:ff:18:
cd:cf:82:d8:7d:63:2d:96:9f:52:0f:8b:1c:1b:bb:
a0:5c:5e:75:bb:aa:13:74:e0:ca:3c:e5:c6:28:cc:
ef:80:09:df:fb:e8:71:ee:3c:9b:d4:42:d7:4f:b8:
1d:cd:f7:58:1d:21:8a:33:5a:ed:1f:fd:33:3c:ad:
f5:36:07:28:72:3b:f9:55:9e:1a:5d:49:61:29:1f:
65:93:9f:53:47:84:51:a0:e3:37:1d:33:f4:04:ec:
8a:b8:b1:eb:14:b0:df:fb:e7:38:7a:6d:01:12:91:
10:70:89:89:ae:0f:1d:68:5f:42:e4:8d:4d:f5:c6:
61:65:e0:f2:c2:4b:ce:00:95:69:8a:43:f7:3a:53:
93:71:0f:e7:67:5a:e5:75:e2:ab:be:d5:d0:49:67:
b9:4f:e7:63:6c:ca:3e:c0:9a:56:de:4a:10:57:1d:
fb:91:7f:ff:84:8b:24:99:05:b2:c2:36:2b:32:ef:
8e:ff:ea:9d:dc:8f:99:ae:23:e6:15:a8:b2:2d:4f:
d8:c2:8d:03:93:d2:5b:e0:69:63:20:19:fc:19:3b:
e1:ac:18:58:c4:23:d4:21:85:ab:74:dc:b8:cc:e3:
fc:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:CC:98:93:7C:DC:1A:27:91:EA:6E:F7:3A:8E:97:E3:CA:90:5F:47
X509v3 Authority Key Identifier:
keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0/OMyYk3zcGieR6m73Oo6X48qQX0c.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.14.192.0/20
157.14.224.0-157.14.247.255
165.100.160.0/20
Signature Algorithm: sha256WithRSAEncryption
42:ea:39:a3:72:e2:29:19:84:69:78:f7:97:24:39:c1:87:07:
2d:ab:d7:df:82:23:15:27:59:88:b6:09:a8:f4:b1:53:0e:a2:
d1:66:7b:33:70:a3:80:d8:f3:9c:15:c7:7e:d3:8f:ba:31:f8:
b7:94:72:76:c7:b3:46:7c:b2:2b:b4:43:52:2a:20:73:21:38:
bd:0c:4a:ba:bb:31:5b:28:63:c9:f2:2e:55:b4:50:19:07:6f:
f9:5a:2c:76:8a:3b:2e:ac:51:dc:14:63:43:79:73:55:e5:bd:
c3:0b:4c:f2:fc:fa:82:4c:72:0e:22:00:c4:7b:d3:85:3b:64:
7a:9f:d6:10:a6:05:93:c9:19:69:58:cd:97:5b:99:f0:f1:0a:
d5:11:34:58:76:0f:52:5c:90:89:2f:63:8b:51:72:7a:63:c1:
88:5b:df:a9:88:d1:cb:df:4b:75:20:24:4f:e1:67:78:de:f2:
f9:b7:29:b3:00:30:ca:e4:2a:ed:14:e0:6c:7a:53:61:6b:29:
24:0e:e7:7f:d5:30:fd:40:1d:7f:cf:7b:99:9a:bc:60:84:5a:
f7:17:aa:57:f7:1b:19:be:a2:0a:6a:cc:2e:51:01:04:e5:8f:
fb:52:8e:1d:60:12:b5:b8:7c:2f:86:01:37:d9:58:71:04:dd:
84:2b:3f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 18:11:36 2025 by rpki-client