
Certificate
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/H9qnkqX-AhO8SsZO3yHfLqxA6w4.cer
File: H9qnkqX-AhO8SsZO3yHfLqxA6w4.cer (raw, json)
Hash identifier: VcXvVoM7F69wl44HjkKxf6hVhwoLkGTFBwdiC2/DfbY=
Subject key identifier: 1F:DA:A7:92:A5:FE:02:13:BC:4A:C6:4E:DF:21:DF:2E:AC:40:EB:0E
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 4206
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30380/H9qnkqX-AhO8SsZO3yHfLqxA6w4.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30380/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Wed 15 Jan 2025 01:34:13 +0000
Certificate not after: Thu 15 Jan 2026 01:30:03 +0000
Subordinate resources: IP: 2407:a6c0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16902 (0x4206)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Jan 15 01:34:13 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=1FDAA792A5FE0213BC4AC64EDF21DF2EAC40EB0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:00:1f:b8:e0:6e:b0:a1:a5:08:97:76:95:b6:
57:a5:43:d6:37:2e:2c:13:3c:30:68:03:2e:81:15:
01:8d:63:71:53:45:7e:6e:43:fa:f1:1f:d7:5b:79:
f5:81:e3:aa:a5:3c:6a:60:a3:24:24:9e:d9:03:62:
c4:4d:93:46:d4:15:24:bf:24:43:6b:62:58:b0:db:
dd:11:ea:16:fa:c3:a4:7c:fe:cd:b3:26:f2:05:92:
f5:fc:78:b4:e9:5b:09:30:64:3f:cc:e8:bb:dc:49:
45:53:04:18:fe:72:bc:38:96:fb:66:e4:81:ba:cd:
60:7a:88:c5:19:de:9f:2c:48:e4:43:9f:4b:5e:a5:
76:80:ae:30:ee:81:24:1d:d5:ad:0d:b8:06:60:cf:
44:18:df:55:c7:38:f8:90:6b:3d:28:ae:ca:5f:b3:
ca:e3:a8:ad:c1:4d:90:b8:e6:94:82:53:de:51:99:
a1:f5:84:f2:97:a0:7d:39:5b:f2:6d:47:69:37:4f:
25:ed:20:6a:4e:c6:b1:54:fc:85:6e:15:40:18:4b:
19:7a:1d:05:6e:85:13:a9:7f:d3:65:1f:e5:ed:6d:
d3:70:02:44:0a:55:92:04:b7:0c:dd:5a:5e:d6:4b:
c6:0b:1e:6c:b7:26:21:ce:fe:6e:92:9b:18:7a:ba:
4f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:DA:A7:92:A5:FE:02:13:BC:4A:C6:4E:DF:21:DF:2E:AC:40:EB:0E
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30380/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30380/H9qnkqX-AhO8SsZO3yHfLqxA6w4.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:a6c0::/32
Signature Algorithm: sha256WithRSAEncryption
07:cf:6a:89:4a:d2:90:f6:db:f6:f4:30:06:ca:c9:32:5e:96:
89:8e:b3:42:19:ba:da:ed:c3:1e:00:86:bb:42:fa:e2:1d:73:
1b:fb:1b:2a:09:a2:2a:06:5b:91:93:9b:8d:86:a2:24:de:83:
9b:ac:1a:4b:d8:64:9e:68:d4:d5:77:21:15:8b:db:67:59:ce:
9e:e3:a3:f6:49:10:b2:54:04:31:cb:f1:8f:10:46:9c:d8:50:
bd:54:28:0c:94:a4:f8:5f:a3:90:4c:2d:65:58:66:f0:3d:3b:
bd:f7:de:f6:3e:5e:f3:91:ab:1d:f9:db:d1:a3:71:51:14:65:
bf:03:a9:96:55:ce:4f:51:66:c9:9f:93:59:fc:f2:7e:1c:f8:
be:eb:08:ba:7a:a0:8f:df:2f:73:ce:1b:f6:17:f9:f7:83:36:
e0:17:41:72:cc:07:54:f3:c0:17:15:3b:5f:89:07:6a:ac:9c:
ee:cc:a6:4a:45:be:a9:38:0b:29:74:48:d3:94:05:89:12:b6:
c2:7f:b0:9d:47:87:2b:60:e3:0a:01:2a:ae:c1:27:3f:74:55:
37:b8:6d:b1:a6:1c:0e:36:c1:06:0a:d4:28:37:82:40:e9:a7:
1f:ee:5d:0b:cc:6d:45:03:b2:35:0b:58:51:c6:c1:aa:78:43:
c3:ca:7c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:54:54 2025 by rpki-client