Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/ffVKoQDp9LZlNekg64ni4UvKzbA.cer
File:                     ffVKoQDp9LZlNekg64ni4UvKzbA.cer (raw, json)
Hash identifier:          H760NLFDtJDSV+YJ+T9YMuf18cP+baXofyaJXnbBOpk=
Subject key identifier:   7D:F5:4A:A1:00:E9:F4:B6:65:35:E9:20:EB:89:E2:E1:4B:CA:CD:B0
Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2
Certificate issuer:       /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2
Certificate serial:       0AA2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/ffVKoQDp9LZlNekg64ni4UvKzbA.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Sat 15 Jun 2024 01:31:00 +0000
Certificate not after:    Sun 15 Jun 2025 01:30:03 +0000
Subordinate resources:    IP: 147.92.128.0/17

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 11:52:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2722 (0xaa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2
        Validity
            Not Before: Jun 15 01:31:00 2024 GMT
            Not After : Jun 15 01:30:03 2025 GMT
        Subject: CN=7DF54AA100E9F4B66535E920EB89E2E14BCACDB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:64:a6:c8:a4:df:99:d0:1d:87:cb:a5:08:d5:
                    93:92:59:92:ab:71:24:e6:30:55:ce:ba:2b:0b:2a:
                    e0:9c:18:75:ab:d0:48:4f:06:89:58:29:58:e2:86:
                    ab:d8:0a:bc:2a:5e:d9:79:0a:cd:85:32:6b:ae:4e:
                    de:78:36:d0:5f:1c:8a:d7:99:85:19:53:e6:b5:15:
                    0b:c3:50:3a:0e:3b:6f:00:c3:1d:e4:9d:52:1f:e9:
                    a9:9f:94:f1:ee:09:bd:d6:a1:c9:ba:5a:64:fc:59:
                    79:2e:4f:73:e8:df:42:58:14:7d:26:fd:78:19:a0:
                    f1:e7:03:76:01:4c:32:ad:58:1c:4f:e0:56:8f:57:
                    73:e0:68:6c:1e:d3:f0:48:6a:de:4b:da:d2:6b:20:
                    0e:f9:6a:99:c2:fc:ba:f7:3f:62:7b:81:32:2c:ab:
                    7c:b0:d4:68:2e:72:9e:e3:fe:7c:13:e5:ca:16:3d:
                    96:a3:62:22:42:52:7b:f5:67:da:46:f1:69:2b:4a:
                    af:92:e2:00:a6:ad:fa:38:c6:c6:b0:4f:9f:17:de:
                    db:c9:5e:29:23:64:0e:b3:bb:73:a5:9d:74:72:84:
                    97:36:de:1d:a5:ec:68:b3:02:f6:2c:20:59:f5:0d:
                    fc:ea:7c:da:9f:01:ab:09:76:cb:2a:81:3d:5f:65:
                    60:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:F5:4A:A1:00:E9:F4:B6:65:35:E9:20:EB:89:E2:E1:4B:CA:CD:B0
            X509v3 Authority Key Identifier:
                keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/ffVKoQDp9LZlNekg64ni4UvKzbA.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.92.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         8c:8d:a2:50:5f:46:92:13:ed:2c:b3:8e:70:e1:c9:07:3a:16:
         d6:1d:6f:63:71:6f:38:ae:95:d6:00:0b:f1:bc:de:ce:b0:8c:
         5d:8e:6a:18:01:4f:76:0b:49:70:81:ed:f7:b3:90:10:79:f0:
         e3:67:31:55:95:0b:a6:a7:bb:0d:26:0b:cd:92:8f:e5:68:f3:
         4c:50:17:dd:a2:27:45:18:cc:89:c1:51:f0:a9:b7:13:07:32:
         68:69:99:f6:db:f7:19:ac:e2:12:e5:8d:32:90:83:09:60:0f:
         e1:13:f8:ec:29:56:53:8d:0e:15:39:8f:9c:4b:0e:e7:71:88:
         27:6e:8c:f3:70:a6:46:76:73:2c:41:81:5d:d1:a7:3a:fe:60:
         31:f6:7c:7b:f4:da:61:01:48:aa:0f:c5:fd:39:f3:e9:60:fb:
         90:22:3c:ca:a1:b5:e9:23:14:05:b6:b6:48:7f:f7:fb:72:ea:
         2f:12:00:78:36:ca:56:a0:63:14:be:7a:98:f8:8b:b6:9c:2c:
         a7:a6:ac:e2:85:80:6c:2b:a9:9e:82:dc:bb:d9:6c:91:28:7f:
         3e:99:b0:7a:71:fc:f2:3c:53:24:90:4e:c0:7c:07:5c:8b:ca:
         30:9d:d3:e2:6c:ff:be:d7:45:9d:33:6b:8b:61:57:ac:17:57:
         59:c4:b6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 14:32:03 2024 by rpki-client on console-ams.rpki-client.org