Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer
File:                     BQQBx4i1abPUQAQXMOKKmR9AGNI.cer (raw, json)
Hash identifier:          1qOpSCNCJP1BSb1ywpcGlCxn98SL2iFeXKnYyee87ig=
Subject key identifier:   05:04:01:C7:88:B5:69:B3:D4:40:04:17:30:E2:8A:99:1F:40:18:D2
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       4710
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Sat 15 Mar 2025 01:32:53 +0000
Certificate not after:    Sun 15 Mar 2026 01:30:03 +0000
Subordinate resources:    IP: 103.211.72.0/22
                          IP: 124.240.224.0/19
                          IP: 180.94.240.0/20
                          IP: 202.163.160.0/19
                          IP: 202.226.104.0/23
                          IP: 202.238.0.0/20
                          IP: 210.79.192.0/20
                          IP: 220.208.128.0/18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 20 Apr 2025 22:44:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18192 (0x4710)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Mar 15 01:32:53 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=050401C788B569B3D440041730E28A991F4018D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c9:51:d2:86:3a:b3:a0:ae:d6:5b:31:a2:fd:
                    0b:c8:25:4e:5c:73:1c:e3:ce:17:1e:aa:11:33:54:
                    dc:02:47:99:e0:73:d9:69:9c:d3:06:73:47:c4:40:
                    12:94:b7:1f:21:66:92:1d:e4:dc:fc:37:c2:aa:d8:
                    11:09:fd:71:4d:b2:22:b9:08:a7:77:a9:6e:70:37:
                    eb:3d:94:83:39:09:06:75:13:1c:0c:76:31:c6:71:
                    9e:ea:28:0a:a0:29:86:8c:eb:cc:9b:85:dc:90:d6:
                    39:9c:33:0c:bd:95:de:d4:7d:ff:f8:a6:e8:56:51:
                    7a:7e:94:d9:95:9d:85:c7:f1:0c:10:e7:20:46:34:
                    8b:ff:20:ee:5d:20:88:e6:55:25:48:97:af:95:ef:
                    a2:5b:3a:6d:1b:e4:6f:c2:38:83:cf:d1:47:4a:5f:
                    cc:09:c5:37:9a:de:fd:5e:0b:45:c9:81:31:44:a7:
                    3b:86:e7:bf:ae:6b:d6:c8:d1:08:c3:30:c4:03:c0:
                    5e:8e:c5:ee:fa:a7:08:8a:f2:a2:04:23:e5:d6:04:
                    23:78:2c:fb:8e:e9:2f:d3:48:10:f1:e7:dd:ab:32:
                    57:82:dd:6c:68:11:a7:0f:fe:b3:2d:e5:06:c8:35:
                    24:66:49:c0:fa:19:39:0c:ac:62:d3:82:bf:30:94:
                    38:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:04:01:C7:88:B5:69:B3:D4:40:04:17:30:E2:8A:99:1F:40:18:D2
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.211.72.0/22
                  124.240.224.0/19
                  180.94.240.0/20
                  202.163.160.0/19
                  202.226.104.0/23
                  202.238.0.0/20
                  210.79.192.0/20
                  220.208.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         60:28:05:b9:1a:48:1a:0b:a3:47:b7:29:28:da:37:e1:21:70:
         f9:cb:8d:50:e1:a1:52:61:07:20:6f:c9:3b:de:e3:d6:d1:0b:
         a0:c0:38:1f:e3:54:76:2d:b8:e5:63:5a:4d:0e:31:97:f5:f2:
         5c:46:61:04:c6:1a:12:96:5b:c6:02:8b:ca:16:aa:bb:0a:c2:
         8f:e6:60:85:90:63:8e:88:8d:8e:51:17:cb:a3:06:dd:34:02:
         1b:b7:c0:35:a2:63:28:ec:81:23:11:2f:1d:2d:c1:01:83:4d:
         0d:f4:b4:08:12:20:a9:ba:00:fb:79:97:14:3a:0e:01:c4:26:
         d8:25:64:b8:62:28:f4:99:80:6f:54:59:c1:f3:07:94:06:5e:
         2a:51:37:7b:6f:56:7c:75:92:af:49:08:af:59:02:08:d4:67:
         2c:d8:f5:74:4f:28:60:1b:97:e6:1d:e7:08:de:7e:ab:55:9e:
         fd:4e:88:cf:74:c2:8c:18:ec:86:de:b9:c9:a3:7e:2d:21:ef:
         f4:fc:c0:f0:96:1d:83:d3:fd:a6:e1:46:46:4b:5a:42:25:5a:
         fd:b2:05:04:06:45:8f:ec:2b:f7:cc:7d:ed:ec:90:da:0e:25:
         d1:16:13:36:87:7e:51:ce:9d:0d:f6:f0:a5:4a:a5:da:ed:ad:
         f5:eb:c3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 00:01:18 2025 by rpki-client