Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/ivQg8ZIA4Rvkro2RTroqy0KRe24.cer
File:                     ivQg8ZIA4Rvkro2RTroqy0KRe24.cer (raw, json)
Hash identifier:          Wwsx3YvhMEBPPsrzvhIx/zCyCFbm9BcChbLkWAbTOl0=
Subject key identifier:   8A:F4:20:F1:92:00:E1:1B:E4:AE:8D:91:4E:BA:2A:CB:42:91:7B:6E
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       4822
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/884/ivQg8ZIA4Rvkro2RTroqy0KRe24.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/884/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Sat 15 Mar 2025 01:38:34 +0000
Certificate not after:    Sun 15 Mar 2026 01:30:03 +0000
Subordinate resources:    IP: 103.40.128.0/22
                          IP: 202.140.192.0/19
                          IP: 219.100.132.0/22
                          IP: 220.152.96.0/20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 05:11:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18466 (0x4822)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000
        Validity
            Not Before: Mar 15 01:38:34 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=8AF420F19200E11BE4AE8D914EBA2ACB42917B6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9a:3f:61:7a:77:16:e2:83:a2:e3:0f:a1:09:
                    92:4c:52:9a:b5:de:72:f7:fe:c0:db:b9:39:d4:fb:
                    cf:33:db:f5:b3:7d:8a:24:71:f1:7f:fa:fc:7e:b7:
                    19:52:f3:82:0f:83:cc:9a:ec:91:6d:9b:b4:ae:b1:
                    1e:84:a0:a9:95:8f:7e:aa:01:31:59:91:97:46:4d:
                    1e:9e:ba:f0:94:ee:dd:a6:74:37:47:21:41:11:fe:
                    8b:86:84:f6:ec:fe:c7:df:88:71:2d:b6:fa:67:3e:
                    37:57:c7:85:dc:a4:e9:81:3f:d4:5d:d6:22:02:b2:
                    77:ab:99:5c:c1:ab:fa:8d:50:f3:05:04:60:86:03:
                    81:5e:af:f4:dc:2b:4b:8f:a4:f4:d7:a0:e2:01:cc:
                    1e:99:d3:80:10:f1:77:40:2a:3d:70:05:a3:5e:c8:
                    e5:11:88:55:54:67:fb:37:4d:cc:a4:e1:4b:4b:f3:
                    c8:56:4b:c9:4d:44:83:9a:03:fc:7e:2e:b1:4e:8d:
                    d6:4c:9b:c1:3e:52:d1:aa:c5:b2:ff:28:7a:24:f8:
                    f3:bb:b5:4f:a1:7f:35:c0:a7:63:e9:ef:9a:23:50:
                    2c:28:f4:3d:80:2c:ab:33:e9:ca:92:e2:df:d7:c9:
                    e9:40:d5:96:6c:40:7d:3b:c8:04:ca:d3:98:56:4f:
                    e7:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:F4:20:F1:92:00:E1:1B:E4:AE:8D:91:4E:BA:2A:CB:42:91:7B:6E
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/884/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/884/ivQg8ZIA4Rvkro2RTroqy0KRe24.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.40.128.0/22
                  202.140.192.0/19
                  219.100.132.0/22
                  220.152.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         71:b0:bb:3e:22:20:ad:98:81:2a:f7:af:b4:16:f4:d9:27:dd:
         bd:e4:b6:89:82:b9:56:0b:d0:81:c6:6e:46:c6:ec:5c:14:33:
         df:0b:15:5a:8c:b7:2d:5c:1f:ea:a6:44:f4:24:0d:71:30:e5:
         89:70:e0:ab:3f:69:dd:39:06:ac:ec:c5:cc:9d:88:26:28:64:
         3b:ad:56:8f:2f:9e:ca:3b:cf:fd:2e:a0:ae:9d:16:b2:b4:2a:
         49:7e:91:30:38:e5:b7:91:1d:54:17:91:7c:63:4e:06:b3:ad:
         c4:6c:e9:e9:ba:97:7e:b5:21:aa:f5:10:1f:a6:b5:e4:05:c2:
         c3:6a:7d:40:46:79:2e:36:8d:d7:3e:87:91:d3:88:b3:8c:dd:
         61:c5:78:6a:13:9a:fc:26:1b:1c:ea:c3:91:94:fb:90:40:dd:
         fe:3a:18:4b:b9:22:40:a1:9b:40:49:4d:82:e8:3a:cc:8f:d5:
         80:33:59:d0:5c:8f:e5:d1:8e:58:00:b6:0b:4e:5b:3c:2d:38:
         de:b9:6e:66:0f:07:13:21:fd:c9:fc:45:70:a6:35:d6:38:56:
         82:94:0e:bf:c4:05:9f:8d:5d:27:58:4a:bd:a6:96:74:23:76:
         06:21:6c:32:6b:be:2b:3d:44:3b:e7:59:27:68:ba:fc:3a:46:
         89:53:dd:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:22:08 2025 by rpki-client