Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/E0OpitJ8sYmBuPP9GKTVc6gu14s.cer
File:                     E0OpitJ8sYmBuPP9GKTVc6gu14s.cer (raw, json)
Hash identifier:          4hdxUfdU1NBHPdrj9XRdQCeLJ8EK5fBCZmjg7dSCPNM=
Subject key identifier:   13:43:A9:8A:D2:7C:B1:89:81:B8:F3:FD:18:A4:D5:73:A8:2E:D7:8B
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       3043
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30408/E0OpitJ8sYmBuPP9GKTVc6gu14s.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30408/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Wed 15 May 2024 01:37:07 +0000
Certificate not after:    Thu 15 May 2025 01:30:03 +0000
Subordinate resources:    IP: 2400:b1a0::/32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 00:07:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12355 (0x3043)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: May 15 01:37:07 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=1343A98AD27CB18981B8F3FD18A4D573A82ED78B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:42:a9:f5:2d:8d:29:b3:34:e3:11:8f:f5:55:
                    bf:d1:2a:b0:7b:08:5f:f7:d9:88:99:32:cf:2b:89:
                    d3:f7:89:65:33:b6:0b:da:cb:e7:d0:d1:25:17:8b:
                    f1:0a:e5:75:f8:6a:f7:75:49:3e:25:0a:e6:74:30:
                    da:62:9c:8a:43:7e:3b:44:34:1a:5c:1b:3c:38:51:
                    eb:05:8e:d4:72:52:0d:2e:4f:e2:46:7b:cb:66:0c:
                    41:20:f2:65:ab:57:94:df:0f:09:7b:60:b2:66:34:
                    4b:22:7d:b5:e8:b7:95:76:af:8e:91:fe:18:f3:3c:
                    3a:d3:ff:1a:e6:0b:4a:19:3b:68:b8:b6:6c:09:a9:
                    e6:66:32:f8:0a:73:5e:97:5f:ac:82:58:19:84:6d:
                    4a:3a:0d:5d:d6:a6:91:4f:1a:a9:47:4d:4e:da:4b:
                    d0:55:78:8d:74:fa:63:47:fa:15:da:3f:1e:40:70:
                    e8:88:74:a2:b2:16:5f:60:b9:c9:b3:a9:b7:4c:a4:
                    cd:cf:d9:24:e6:41:90:a8:ef:38:36:f8:48:0c:7d:
                    fa:63:70:64:ea:a7:fe:7a:52:cd:b3:e1:3b:a6:a3:
                    66:3b:02:e5:d9:7b:70:04:02:45:c0:0a:8c:bc:f7:
                    63:69:34:47:b7:50:ee:39:b6:bc:2a:23:4a:0a:8e:
                    c2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:43:A9:8A:D2:7C:B1:89:81:B8:F3:FD:18:A4:D5:73:A8:2E:D7:8B
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30408/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30408/E0OpitJ8sYmBuPP9GKTVc6gu14s.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:b1a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:01:3a:23:ed:00:b8:dc:55:b4:1b:57:51:b3:0c:c2:25:4b:
         b1:ea:23:a7:b5:b4:c8:ac:5e:bf:a8:4b:54:95:69:bd:1f:8a:
         8f:c8:c3:95:88:4f:d8:b5:38:f0:bf:b9:9c:2c:6f:bf:93:bf:
         f1:e6:c2:64:7f:99:79:28:95:39:3e:9b:c9:ea:78:25:16:3b:
         b3:96:ad:88:4e:01:dc:df:a4:27:4e:18:3b:2c:1b:43:fe:55:
         04:20:5e:e0:84:fd:ed:6b:cf:54:e6:2a:67:1e:ed:07:39:f6:
         e4:5b:78:b6:87:84:ce:43:70:4f:99:8d:d4:d5:eb:f4:a3:11:
         40:36:3c:d4:a1:4d:97:bb:17:cf:d7:50:6c:1d:91:b5:d2:26:
         4c:8e:99:fd:0f:79:12:82:6f:e8:1b:c4:8b:1d:d1:ef:3b:b1:
         19:d1:1a:d5:2d:b3:0c:b8:aa:16:8e:b8:81:47:2b:72:a5:f2:
         5f:3a:83:61:03:4b:d1:c5:3e:1b:f9:d0:f9:72:55:94:2e:47:
         fd:f7:d0:bd:ef:97:6b:d1:fa:de:f4:a1:8d:36:59:fb:8c:ed:
         12:8e:2a:2b:cd:77:cf:3f:20:fc:64:71:81:09:67:12:9d:00:
         23:ef:ee:c9:3a:44:a9:d5:13:1f:46:7d:12:15:ad:90:4f:d3:
         0f:4f:1c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:01:20 2024 by rpki-client on console-ams.rpki-client.org