Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
File:                     CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer (raw, json)
Hash identifier:          ggrVEcO87ly8uEGlgmZ3nkAI72JFwYvjnfqv2KyjKak=
Subject key identifier:   09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       475E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Sat 15 Mar 2025 01:34:33 +0000
Certificate not after:    Sun 15 Mar 2026 01:30:03 +0000
Subordinate resources:    IP: 36.2.0.0/19
                          IP: 36.2.160.0 -- 36.2.223.255
                          IP: 39.110.0.0/15
                          IP: 58.87.128.0/17
                          IP: 59.146.0.0/15
                          IP: 61.120.160.0/19
                          IP: 61.211.0.0/18
                          IP: 103.2.48.0/22
                          IP: 103.241.124.0/22
                          IP: 110.66.0.0/15
                          IP: 110.232.152.0/21
                          IP: 111.216.0.0/15
                          IP: 115.162.0.0/15
                          IP: 116.67.128.0/17
                          IP: 116.82.0.0/16
                          IP: 116.91.32.0/19
                          IP: 116.91.160.0/19
                          IP: 118.236.0.0 -- 118.238.127.255
                          IP: 118.238.192.0/18
                          IP: 118.240.0.0/15
                          IP: 120.74.0.0/15
                          IP: 121.2.0.0/15
                          IP: 121.101.64.0/18
                          IP: 121.103.0.0/16
                          IP: 122.223.224.0/19
                          IP: 123.198.0.0/16
                          IP: 124.219.128.0/17
                          IP: 133.114.0.0/16
                          IP: 133.165.128.0/18
                          IP: 150.147.0.0/16
                          IP: 150.246.0.0/16
                          IP: 150.249.0.0/16
                          IP: 182.168.0.0/14
                          IP: 198.144.160.0/20
                          IP: 202.213.192.0/18
                          IP: 202.223.64.0/18
                          IP: 202.226.20.0/22
                          IP: 202.238.64.0/18
                          IP: 210.132.128.0/17
                          IP: 210.139.128.0/17
                          IP: 210.156.160.0/20
                          IP: 210.174.0.0/18
                          IP: 210.250.64.0/18
                          IP: 211.2.0.0/18
                          IP: 211.10.32.0/19
                          IP: 211.128.32.0/19
                          IP: 218.41.0.0/16
                          IP: 218.110.0.0/16
                          IP: 218.221.0.0/16
                          IP: 219.98.0.0/16
                          IP: 219.104.0.0/16
                          IP: 219.111.128.0/18
                          IP: 220.211.0.0/16
                          IP: 223.132.0.0/14
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18270 (0x475e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000
        Validity
            Not Before: Mar 15 01:34:33 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b7:e2:28:60:11:7b:3e:9a:45:f4:a5:2b:7a:
                    71:95:9b:ce:0f:67:39:ca:83:42:8e:bf:0e:d7:65:
                    82:b0:77:11:6f:72:b1:44:dd:9a:0b:69:a2:7d:ee:
                    39:38:1a:1e:0e:ee:30:f3:7b:82:fc:ca:01:61:d4:
                    3f:1e:5e:42:e2:cc:fc:d0:12:2f:b0:79:3e:66:1e:
                    4c:fc:71:9b:f8:1b:47:5f:f4:e0:33:ba:dc:09:ce:
                    37:c9:bd:6e:ab:bd:93:1a:cc:d8:c0:fa:2e:3b:43:
                    d1:30:c8:29:a3:c4:ec:70:27:39:75:62:08:6a:bb:
                    7b:a7:2c:64:4f:15:43:bd:be:84:d3:d1:ce:26:f5:
                    9c:58:13:38:74:26:e1:22:83:df:c7:8c:18:cb:7a:
                    a8:e7:3e:6d:20:b8:36:2d:91:3d:75:d3:50:a5:cc:
                    ca:56:ca:d8:b4:0d:d5:88:22:94:84:ec:c9:d2:ef:
                    e7:ca:c2:7b:df:fb:74:cc:42:5a:f6:9b:a9:5f:6b:
                    21:2f:67:90:97:c6:df:97:8c:9f:50:c3:e0:40:88:
                    a6:97:a1:9d:53:8a:0b:f0:78:77:20:1e:c2:62:55:
                    14:3d:83:21:f1:eb:97:95:59:6d:c4:13:e1:32:2b:
                    5e:26:c2:90:2f:03:6d:cf:94:75:28:d9:ea:14:43:
                    5e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.2.0.0/19
                  36.2.160.0-36.2.223.255
                  39.110.0.0/15
                  58.87.128.0/17
                  59.146.0.0/15
                  61.120.160.0/19
                  61.211.0.0/18
                  103.2.48.0/22
                  103.241.124.0/22
                  110.66.0.0/15
                  110.232.152.0/21
                  111.216.0.0/15
                  115.162.0.0/15
                  116.67.128.0/17
                  116.82.0.0/16
                  116.91.32.0/19
                  116.91.160.0/19
                  118.236.0.0-118.238.127.255
                  118.238.192.0/18
                  118.240.0.0/15
                  120.74.0.0/15
                  121.2.0.0/15
                  121.101.64.0/18
                  121.103.0.0/16
                  122.223.224.0/19
                  123.198.0.0/16
                  124.219.128.0/17
                  133.114.0.0/16
                  133.165.128.0/18
                  150.147.0.0/16
                  150.246.0.0/16
                  150.249.0.0/16
                  182.168.0.0/14
                  198.144.160.0/20
                  202.213.192.0/18
                  202.223.64.0/18
                  202.226.20.0/22
                  202.238.64.0/18
                  210.132.128.0/17
                  210.139.128.0/17
                  210.156.160.0/20
                  210.174.0.0/18
                  210.250.64.0/18
                  211.2.0.0/18
                  211.10.32.0/19
                  211.128.32.0/19
                  218.41.0.0/16
                  218.110.0.0/16
                  218.221.0.0/16
                  219.98.0.0/16
                  219.104.0.0/16
                  219.111.128.0/18
                  220.211.0.0/16
                  223.132.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         5a:ef:b1:66:9b:2c:0b:7f:77:4a:99:c1:d1:1f:c9:43:82:9e:
         de:69:71:93:fa:6b:dd:db:6b:fb:28:1b:84:c1:a6:56:89:c2:
         4a:0a:a9:c4:44:c6:b7:55:66:2b:50:5b:e3:1d:d7:81:56:66:
         ac:ec:21:e5:77:93:5f:d1:c6:db:93:fc:c4:5e:24:ec:04:bc:
         11:fc:84:7c:b5:cc:42:e0:2c:52:85:c4:de:f4:5a:50:c1:fd:
         49:70:f2:40:2c:58:f1:d2:4a:32:62:c0:ee:05:d2:b7:21:cf:
         5a:a1:4b:25:60:e7:1f:3d:ba:28:20:12:1c:a4:f5:35:a7:9f:
         43:cf:ad:32:35:cf:47:a1:58:7f:da:9b:5d:8a:6c:4e:2f:f8:
         b5:72:7a:29:3b:ab:69:2e:59:38:6a:03:a4:40:30:3d:96:59:
         59:34:fe:7a:f5:d8:fe:aa:d5:50:f6:68:20:66:c8:2a:96:8f:
         f2:f9:17:c9:67:27:65:15:35:eb:93:35:0d:7c:d3:82:2d:00:
         19:a1:fd:4c:80:35:49:23:99:da:de:1a:fe:9f:69:86:d6:38:
         64:05:3d:6f:e2:d7:ab:2c:ad:2a:64:61:e2:10:98:d9:53:46:
         52:aa:6b:a3:60:c3:26:01:e0:c2:4b:18:4a:72:19:50:3b:8f:
         2e:ea:33:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:22:13 2025 by rpki-client