Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer
File:                     14hnjmTSkYTCPaqttZS_2briQFw.cer (raw, json)
Hash identifier:          FZGpB5kopwm5n1x1AZaTKJuJXM/X+cn+vUVf0jEpazE=
Subject key identifier:   D7:88:67:8E:64:D2:91:84:C2:3D:AA:AD:B5:94:BF:D9:BA:E2:40:5C
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       2FA5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Wed 15 May 2024 01:33:58 +0000
Certificate not after:    Thu 15 May 2025 01:30:03 +0000
Subordinate resources:    IP: 61.125.160.0/20
                          IP: 61.213.240.0/20
                          IP: 202.25.192.0/20
                          IP: 210.166.32.0/19
                          IP: 210.236.0.0/19
                          IP: 210.253.32.0/19
                          IP: 211.1.128.0/19
                          IP: 211.12.224.0/19
                          IP: 219.118.32.0/20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 00:07:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12197 (0x2fa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: May 15 01:33:58 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=D788678E64D29184C23DAAADB594BFD9BAE2405C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bf:9f:cc:05:e8:d8:2b:c8:f3:4e:10:4e:cf:
                    89:f5:de:33:63:04:53:85:64:a8:0a:77:bf:12:f6:
                    de:b1:5f:a8:f5:bc:07:07:22:f9:f3:48:cb:ad:98:
                    b6:ec:82:df:f9:90:27:22:da:c0:90:44:f3:d1:a5:
                    e7:98:d5:87:19:aa:ab:d4:5d:cd:04:f9:f9:49:50:
                    3e:bf:0d:73:9d:b6:ac:c8:79:81:e8:23:a4:19:b4:
                    5b:be:70:c0:70:a3:fd:1a:37:aa:3d:31:7b:48:3b:
                    ef:6e:d6:83:68:0d:30:66:b1:a1:56:57:55:ed:e2:
                    a1:b9:a5:b6:fa:3c:4e:ea:be:fe:e4:9c:45:89:31:
                    ad:16:59:3f:9a:98:34:3e:d2:07:45:ab:e0:09:10:
                    8e:c3:e4:08:59:8a:01:8e:dc:1a:2f:39:85:87:7e:
                    ed:20:7c:27:1f:5a:4d:8c:ca:e5:28:13:90:99:82:
                    8f:43:cd:dc:f8:82:32:6d:2f:82:0d:c7:56:e7:c6:
                    35:a5:f4:1e:46:e5:db:b5:f4:9f:53:fe:6f:c6:4e:
                    bc:d9:40:d0:6b:92:c0:27:70:89:2f:9f:7a:03:fa:
                    5e:73:79:4f:95:fe:b8:af:74:13:93:bf:89:b5:2f:
                    63:8c:bd:1d:be:31:73:38:f2:7d:1b:01:d1:0e:33:
                    b7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:88:67:8E:64:D2:91:84:C2:3D:AA:AD:B5:94:BF:D9:BA:E2:40:5C
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.125.160.0/20
                  61.213.240.0/20
                  202.25.192.0/20
                  210.166.32.0/19
                  210.236.0.0/19
                  210.253.32.0/19
                  211.1.128.0/19
                  211.12.224.0/19
                  219.118.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9f:46:40:dd:64:1a:66:58:c2:2c:77:41:ef:d3:a8:9b:b9:ce:
         fc:ae:2c:d6:e2:ea:97:7f:71:6f:b0:b0:72:77:8d:8d:d5:61:
         ec:6f:71:16:87:a7:80:1d:b3:94:a7:68:f7:1c:08:7f:dc:4c:
         c2:86:f9:69:7f:0c:b3:06:58:a6:1d:c7:ea:29:29:2d:cf:f3:
         4f:50:9e:0b:65:06:df:e4:9d:27:3b:56:b6:0e:32:58:cf:86:
         19:a0:5c:70:08:18:74:47:48:53:e7:fa:aa:70:1d:7c:fc:44:
         04:fb:0d:a0:af:34:59:c4:6e:35:f9:98:6b:de:c1:93:10:c6:
         a9:43:e0:49:ff:4f:8d:6e:67:5b:2a:3d:95:2a:a1:50:2b:c5:
         53:ce:1e:9b:fd:b4:0c:f0:69:d6:ad:cf:a2:d9:bc:8b:08:ef:
         30:f9:ef:66:c0:e7:69:a9:a1:ab:0f:b3:a6:6b:74:c5:d7:82:
         51:b0:e6:ad:a6:27:46:3d:3c:90:9d:d4:02:40:6c:90:4b:68:
         50:d3:45:df:73:a7:76:fb:74:90:75:95:f4:67:88:2d:d3:16:
         da:ae:23:66:3c:d3:b4:dd:44:67:ad:2d:f4:c0:7e:a5:59:68:
         6b:00:5e:f8:8f:06:12:27:9a:ac:d0:29:f4:10:95:1a:75:f8:
         1d:46:1f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:01:03 2024 by rpki-client on console-ams.rpki-client.org