Certificate
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer
File: ic9cKvpbV2V3NRxBmQGNRM3C1to.cer (raw, json)
Hash identifier: 3R233RjxQBU1pEsArxvtlH+KcyW+LZt3Qw/Gh1VCLEw=
Subject key identifier: 89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 56CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Fri 15 Aug 2025 01:35:23 +0000
Certificate not after: Sat 15 Aug 2026 01:30:02 +0000
Subordinate resources: IP: 119.63.112.0/20
IP: 153.125.0.0/17
IP: 182.255.64.0/20
IP: 202.53.112.0/20
IP: 202.129.176.0/21
IP: 202.216.128.0/19
IP: 202.224.112.0/20
IP: 203.141.112.0/20
IP: 210.1.144.0/20
IP: 219.101.96.0/20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Aug 2025 05:10:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22220 (0x56cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Aug 15 01:35:23 2025 GMT
Not After : Aug 15 01:30:02 2026 GMT
Subject: CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:83:50:d1:dc:ec:2e:37:aa:77:67:a6:1c:49:
f2:59:3b:e5:2e:47:23:18:d4:ad:75:85:6f:31:2c:
4a:88:e4:88:21:a2:4e:d1:95:8c:6c:70:3c:7d:8d:
3b:2c:44:40:28:56:59:59:84:82:d8:fb:54:a0:2c:
10:00:b9:ee:5e:07:d6:98:5b:de:85:5e:49:8c:cb:
ea:eb:b8:b9:7a:ad:6c:0a:1e:bc:4b:eb:fc:f8:4e:
21:d9:65:08:be:13:73:3b:35:71:90:bf:0d:3b:d2:
51:e7:73:fc:2c:80:08:66:a5:6d:f1:11:99:57:a7:
83:87:06:d0:89:16:e7:f1:29:13:20:0c:6f:ef:9d:
1c:36:be:7a:33:1b:b2:19:43:c7:03:f0:9a:23:79:
e0:20:76:b5:bb:9e:23:47:39:f1:72:43:2d:50:2e:
d3:5c:d7:a2:10:23:e5:eb:57:83:db:35:6e:e2:79:
4c:bf:56:cc:ae:f9:1f:51:bf:47:5d:a1:fa:ee:fc:
c6:36:aa:0b:20:52:56:ea:59:1c:93:b3:23:76:b1:
d9:93:a0:eb:1d:17:f1:98:7b:58:95:ac:54:a9:db:
3d:f6:cd:3e:af:14:48:0c:81:44:43:5a:26:ac:1d:
c2:50:da:1e:a1:7f:82:97:ae:57:eb:1a:a5:31:4c:
86:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
119.63.112.0/20
153.125.0.0/17
182.255.64.0/20
202.53.112.0/20
202.129.176.0/21
202.216.128.0/19
202.224.112.0/20
203.141.112.0/20
210.1.144.0/20
219.101.96.0/20
Signature Algorithm: sha256WithRSAEncryption
28:fe:96:db:1f:87:4f:a5:56:f8:10:83:9a:a6:29:18:9b:b1:
b2:16:2a:0a:42:f4:92:d3:6b:91:9c:e8:86:e8:d3:21:26:c2:
f8:26:36:16:43:a6:07:24:08:98:51:50:b1:d5:eb:3f:8e:ca:
b9:0f:61:30:71:d8:03:d7:ac:83:7e:26:15:f7:1d:b2:97:04:
76:d2:b7:c3:2b:38:a8:4a:3a:1d:bc:c6:f1:c3:86:cd:63:bd:
e4:5e:b6:94:4c:8d:b1:fb:e6:5c:93:6b:64:d0:79:84:d7:97:
eb:bb:65:35:09:a6:03:a0:45:fd:30:4a:44:2c:31:44:c4:25:
ff:6e:16:29:de:11:f3:1d:22:82:16:0a:79:25:f6:56:2d:a1:
98:0f:7a:a3:54:8e:93:e7:78:37:16:46:00:9e:b7:20:5c:fb:
75:c4:48:01:26:e8:ae:4c:b7:cd:17:47:b0:2a:37:4f:99:2c:
37:f0:ac:50:09:67:e3:8f:ac:2b:0e:55:f8:18:f5:e4:34:82:
a1:a1:05:3c:6c:12:65:76:91:b3:ad:6d:e2:31:39:42:96:52:
ea:e0:0b:2f:9e:de:15:63:1e:fa:7e:61:2d:2e:c9:05:58:13:
5e:1f:52:59:c0:66:3b:6c:bf:43:88:2f:b3:14:4b:12:6c:69:
41:97:6a:7a
-----BEGIN CERTIFICATE-----
MIIFtzCCBJ+gAwIBAgICVswwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC
NTIwREFBQzdEQThGMB4XDTI1MDgxNTAxMzUyM1oXDTI2MDgxNTAxMzAwMlowMzEx
MC8GA1UEAxMoODlDRjVDMkFGQTVCNTc2NTc3MzUxQzQxOTkwMThENDRDREMyRDZE
QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALiDUNHc7C43qndnphxJ
8lk75S5HIxjUrXWFbzEsSojkiCGiTtGVjGxwPH2NOyxEQChWWVmEgtj7VKAsEAC5
7l4H1phb3oVeSYzL6uu4uXqtbAoevEvr/PhOIdllCL4Tczs1cZC/DTvSUedz/CyA
CGalbfERmVeng4cG0IkW5/EpEyAMb++dHDa+ejMbshlDxwPwmiN54CB2tbueI0c5
8XJDLVAu01zXohAj5etXg9s1buJ5TL9WzK75H1G/R12h+u78xjaqCyBSVupZHJOz
I3ax2ZOg6x0X8Zh7WJWsVKnbPfbNPq8USAyBRENaJqwdwlDaHqF/gpeuV+sapTFM
hlMCAwEAAaOCArwwggK4MB0GA1UdDgQWBBSJz1wq+ltXZXc1HEGZAY1EzcLW2jAf
BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0
b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa
dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j
Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0
NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G
A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB
7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw
L2FwL0E5MUE3MzgxMDAwMC8zNzMvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt
cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzM3My9pYzljS3Zw
YlYyVjNOUnhCbVFHTlJNM0MxdG8ubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw
a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s
MFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQEdz9wAwQHmX0AAwQEtv9AAwQE
yjVwAwQDyoGwAwQFytiAAwQEyuBwAwQEy41wAwQE0gGQAwQE22VgMA0GCSqGSIb3
DQEBCwUAA4IBAQAo/pbbH4dPpVb4EIOapikYm7GyFioKQvSS02uRnOiG6NMhJsL4
JjYWQ6YHJAiYUVCx1es/jsq5D2EwcdgD16yDfiYV9x2ylwR20rfDKzioSjodvMbx
w4bNY73kXraUTI2x++Zck2tk0HmE15fru2U1CaYDoEX9MEpELDFExCX/bhYp3hHz
HSKCFgp5JfZWLaGYD3qjVI6T53g3FkYAnrcgXPt1xEgBJuiuTLfNF0ewKjdPmSw3
8KxQCWfjj6wrDlX4GPXkNIKhoQU8bBJldpGzrW3iMTlCllLq4Asvnt4VYx76fmEt
LskFWBNeH1JZwGY7bL9DiC+zFEsSbGlBl2p6
-----END CERTIFICATE-----
Generated at Sat Aug 23 07:34:51 2025 by rpki-client