Certificate
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
File: KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer (raw, json)
Hash identifier: RoGB+kc3Ik3khSoFWTQyxdFSZIExLI26VblmxOHM5ZU=
Subject key identifier: 29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4
Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2
Certificate issuer: /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2
Certificate serial: 0DE5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Wed 15 Jan 2025 01:31:30 +0000
Certificate not after: Thu 15 Jan 2026 01:30:03 +0000
Subordinate resources: IP: 157.65.8.0/21
IP: 157.65.176.0/21
IP: 157.65.192.0/21
IP: 157.65.216.0/21
IP: 157.67.0.0/16
IP: 160.13.0.0/16
IP: 172.122.0.0/15
IP: 192.244.32.0/19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3557 (0xde5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2
Validity
Not Before: Jan 15 01:31:30 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=296966DD720C30575F62D8FD4149458A90AACAA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:67:c5:af:04:e3:2e:c0:9a:b4:fc:8c:99:dc:
a4:c5:f2:6e:16:1f:f4:ae:81:26:99:5c:bf:2e:26:
e8:91:a4:fa:e2:50:55:32:40:3a:cf:33:2d:d7:d4:
64:f6:ce:05:a9:ba:a9:f2:ea:04:2d:67:d6:71:90:
b4:ca:8e:c2:e5:81:d6:43:33:72:a7:ea:57:d2:56:
7b:b2:cf:b4:25:d4:7a:80:4c:36:2d:e0:47:6c:c3:
7e:6f:8a:ad:b7:73:f6:9d:63:b5:f6:40:6e:ae:77:
9c:96:6f:f2:99:f9:91:78:f1:48:ac:71:aa:9d:7c:
bd:76:09:33:63:b1:c0:4b:cf:d4:2e:7c:ce:70:8c:
15:0e:c0:1d:10:e9:30:77:40:e7:f1:41:1c:f3:4a:
8b:1f:35:cc:64:8f:f7:50:09:4a:b8:92:d9:45:b2:
0f:01:ac:f1:04:00:20:6e:0c:23:b5:80:c6:26:90:
45:1e:83:4e:8a:62:3f:4c:ca:76:20:08:ce:6d:99:
e9:02:3c:41:e9:dd:8b:fa:f9:e3:65:0e:ea:cc:3a:
a6:24:dc:31:02:7c:f6:d7:ac:70:3c:d9:5e:1d:18:
c8:c8:27:fa:11:35:2b:a1:f5:82:fd:4d:7c:d8:ca:
96:2e:04:59:e6:ac:a3:7f:37:2e:a6:ab:04:b5:db:
fd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4
X509v3 Authority Key Identifier:
keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.65.8.0/21
157.65.176.0/21
157.65.192.0/21
157.65.216.0/21
157.67.0.0/16
160.13.0.0/16
172.122.0.0/15
192.244.32.0/19
Signature Algorithm: sha256WithRSAEncryption
19:97:f4:2b:86:41:8e:22:2b:64:5d:24:71:29:1b:e1:72:c5:
f0:25:a3:17:c8:71:6e:dd:79:75:c1:0b:3c:26:96:1d:3e:c6:
17:7a:7e:5f:dd:d3:c8:aa:7f:d5:36:94:72:a7:2a:b3:20:7a:
8d:92:11:d3:5f:ce:aa:7d:78:2e:7a:82:b9:08:4d:98:4d:de:
45:ba:f9:1b:c8:69:08:0b:71:e3:03:4e:a5:72:ad:2a:0a:ac:
9b:92:1b:37:96:70:24:83:01:ff:96:03:70:b7:8b:08:84:f1:
b6:8a:02:0e:e0:2e:29:32:13:00:99:2c:23:d4:5b:3b:ed:43:
4a:a9:18:a3:4c:1b:28:61:c8:70:20:90:c0:96:74:fa:79:ff:
9c:d4:9c:6a:72:6c:0e:13:8c:95:3b:d6:fe:07:a0:ed:08:48:
85:9e:fc:53:b4:fe:70:19:9e:c5:b8:90:d0:de:22:e6:57:fb:
08:1e:50:27:c8:1a:4d:0e:d7:e4:6e:13:bc:f0:26:77:e2:0d:
be:27:37:94:47:a0:71:6a:83:a8:5d:b2:1c:70:7f:00:54:3f:
97:7e:4d:59:44:ca:49:c0:89:1f:8b:ed:e1:24:87:6c:7b:87:
d6:de:b0:1e:3d:f8:14:2b:08:9a:6a:59:a3:49:7b:99:9f:dd:
13:ae:ec:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:56:52 2025 by rpki-client