Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
File: 0ZV-xYwI81uqa_535FqXQLpHH54.cer (raw, json)
Hash identifier: OvPDSXIwneQHWOJFTXZgRnQw3cQAqslRuzppn5hXRLE=
Subject key identifier: D1:95:7E:C5:8C:08:F3:5B:AA:6B:FE:77:E4:5A:97:40:BA:47:1F:9E
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 4C46
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Wed 02 Jul 2025 02:03:17 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 80.208.192.0/20
IP: 81.23.208.0/20
IP: 85.131.192.0/18
IP: 87.101.96.0/20
IP: 90.149.0.0/16
IP: 92.202.0.0/15
IP: 109.236.0.0/20
IP: 185.164.244.0/22
IP: 193.82.64.0/19
IP: 193.114.0.0/19
IP: 193.115.32.0/19
IP: 193.115.128.0/18
IP: 193.116.0.0/18
IP: 193.117.64.0/19
IP: 194.91.0.0/16
IP: 195.181.224.0/20
IP: 212.237.152.0/21
IP: 213.18.0.0/17
IP: 217.178.0.0/16
IP: 2001:7fa:0:3::/64
IP: 2001:7fa:7::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Jul 2025 03:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19526 (0x4c46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Jul 2 02:03:17 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A91A73810000, serialNumber=D1957EC58C08F35BAA6BFE77E45A9740BA471F9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:80:98:d3:ae:75:22:44:38:67:fb:a8:2d:08:
a6:fe:7c:78:5d:43:d0:9d:7d:00:d3:2a:e8:de:1b:
1d:ad:2b:7a:e7:7a:07:6b:6f:73:cb:78:7b:cc:c7:
16:23:b6:03:65:d6:0a:c8:91:cd:54:ce:bc:28:68:
75:64:6c:50:6b:4b:1e:b7:87:7d:6b:50:cf:5b:09:
09:b1:a0:0d:41:36:b2:b1:97:30:ea:6e:cc:50:25:
f0:34:ce:c6:62:22:b4:3d:7e:d4:02:4e:93:83:a0:
29:be:1b:d9:0f:3f:51:1b:80:6d:6a:b8:68:a3:d9:
97:08:9a:d7:22:ee:e6:db:0c:39:88:01:99:96:ec:
db:fc:66:e0:b0:16:6b:18:f3:50:ba:eb:9f:b8:79:
3f:62:99:27:00:2d:53:5b:f0:e1:30:10:84:ba:48:
ce:04:ce:fe:5c:41:32:42:97:5c:d5:31:d3:05:73:
89:0b:56:bb:19:ec:2c:f1:7e:d9:60:6f:d6:c9:92:
d6:22:3c:bf:c0:0b:93:04:82:32:91:a9:d8:d2:1a:
de:96:a4:4c:c0:40:30:02:2f:3f:26:43:c6:4d:4b:
f5:2b:47:6e:65:31:65:3c:dc:27:e7:24:6f:09:49:
c7:f7:16:23:0d:bd:67:7a:a0:93:2e:7a:6d:1b:23:
5b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:95:7E:C5:8C:08:F3:5B:AA:6B:FE:77:E4:5A:97:40:BA:47:1F:9E
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
80.208.192.0/20
81.23.208.0/20
85.131.192.0/18
87.101.96.0/20
90.149.0.0/16
92.202.0.0/15
109.236.0.0/20
185.164.244.0/22
193.82.64.0/19
193.114.0.0/19
193.115.32.0/19
193.115.128.0/18
193.116.0.0/18
193.117.64.0/19
194.91.0.0/16
195.181.224.0/20
212.237.152.0/21
213.18.0.0/17
217.178.0.0/16
IPv6:
2001:7fa:0:3::/64
2001:7fa:7::/48
Signature Algorithm: sha256WithRSAEncryption
65:b8:5f:bc:b7:ff:bb:f7:f4:79:b1:15:31:36:b3:7c:29:3f:
c9:e6:06:ad:f0:97:65:0c:fb:d2:59:86:7e:e9:79:9d:d8:e6:
d3:60:d6:f0:15:c2:5d:8c:bc:56:bb:c3:0b:53:37:52:11:6b:
a1:c7:68:ee:5d:92:7e:2b:42:26:95:a6:ce:92:80:71:73:14:
8a:6b:ca:e5:2e:a1:37:44:61:82:78:d9:b5:d2:a2:eb:a3:4e:
04:8e:a5:63:cf:6e:9f:ab:4a:11:c8:2a:56:63:79:5b:14:f6:
28:ec:3a:b0:58:59:c6:6a:ae:cf:f9:31:7d:af:f0:28:1a:40:
93:5d:f7:0a:8c:c5:be:60:6e:ba:cd:ee:ca:21:8d:a2:7d:86:
8b:56:ca:26:1b:04:eb:a7:01:47:b3:b0:fb:70:9c:c1:e3:ef:
f0:26:ea:0b:27:8c:77:a9:d0:d7:39:d9:6d:3a:dd:c8:af:b3:
d2:38:c4:aa:a7:41:0f:3a:0c:bf:eb:5f:f7:f3:3f:85:ac:4a:
af:55:87:c0:23:31:58:b6:14:82:64:05:41:bb:69:4a:16:97:
f1:b2:14:95:70:00:26:1b:6b:84:aa:b9:1d:78:50:58:2e:ef:
38:16:3a:74:94:b3:5b:c9:c6:bc:47:f2:f0:db:ea:49:aa:75:
3d:ab:c5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 17:55:06 2025 by rpki-client