Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/qBXXbVkmtkXxmTmx3-n2KtOcHhU.cer
File:                     qBXXbVkmtkXxmTmx3-n2KtOcHhU.cer (raw, json)
Hash identifier:          qwMeKsWaQUN2gFoMJ0pcnehcZAXWQO1VFL9eY3CIozQ=
Subject key identifier:   A8:15:D7:6D:59:26:B6:45:F1:99:39:B1:DF:E9:F6:2A:D3:9C:1E:15
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       43BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30420/qBXXbVkmtkXxmTmx3-n2KtOcHhU.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30420/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Thu 06 Feb 2025 03:09:18 +0000
Certificate not after:    Fri 06 Feb 2026 03:05:32 +0000
Subordinate resources:    IP: 2400:f7a0::/32
Validation:               Failed, certificate revoked on Fri 07 Feb 2025 03:08:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17338 (0x43ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000
        Validity
            Not Before: Feb  6 03:09:18 2025 GMT
            Not After : Feb  6 03:05:32 2026 GMT
        Subject: CN=A815D76D5926B645F19939B1DFE9F62AD39C1E15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:54:ca:7a:90:0f:63:1c:cd:39:60:a8:42:bd:
                    7d:bc:05:2d:45:67:79:c0:94:ac:f6:11:8d:17:fd:
                    91:95:07:d3:59:c8:f9:a5:8d:34:6f:f0:f0:e9:7c:
                    6c:37:07:5f:8e:ff:50:e8:a4:8d:ef:45:7d:3d:77:
                    cd:c3:60:c5:41:e2:ac:a9:06:af:f3:95:81:1f:c4:
                    4d:d2:8d:6e:9b:aa:67:07:aa:82:10:f3:5a:0c:79:
                    be:b9:ea:4b:0a:07:90:e2:4b:ed:e8:b1:22:f8:4f:
                    b8:8f:d9:d2:70:8e:cf:76:80:6a:f5:a2:b8:24:e4:
                    c4:b3:42:47:00:6f:73:62:4c:4a:b7:3d:2f:b9:8a:
                    99:c8:0a:7b:09:30:2d:69:75:ba:8b:ad:ea:c8:c7:
                    ef:2c:e7:68:a6:23:a4:a4:25:8b:8c:88:23:f2:da:
                    7d:fc:6f:cc:6c:ff:38:df:24:a5:e2:90:e7:de:95:
                    ab:96:78:83:9c:9d:b8:e1:e7:db:c4:bd:1b:2c:97:
                    27:9c:2b:77:d5:1a:c1:ec:40:47:e9:a9:5e:d8:34:
                    4b:77:79:f4:10:55:33:0c:0a:cb:6a:d8:e0:a6:f2:
                    52:12:39:11:9e:81:ea:3c:53:67:88:2d:29:4e:d0:
                    0c:06:ab:08:2b:32:73:de:11:75:de:f1:34:9e:71:
                    e6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:15:D7:6D:59:26:B6:45:F1:99:39:B1:DF:E9:F6:2A:D3:9C:1E:15
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30420/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30420/qBXXbVkmtkXxmTmx3-n2KtOcHhU.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:f7a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:18:69:af:93:32:a5:7a:9e:d1:5f:0d:4f:78:e1:09:ce:36:
         25:c4:19:aa:3e:f5:5d:79:ad:9e:b6:fe:69:5e:ee:ce:44:09:
         c3:b2:f9:57:67:68:c6:ea:70:92:8b:44:2c:8d:d0:92:1b:46:
         3a:da:ad:71:ec:03:da:f6:72:cb:ad:ca:9c:b0:d0:46:15:de:
         e9:a2:51:74:94:bc:d2:ed:29:5c:3a:94:21:ad:ef:a8:12:c4:
         d6:d3:84:fd:84:8d:b5:8e:fb:7c:70:9a:05:ef:f1:db:68:2e:
         6c:fa:83:4b:e9:9d:cc:87:b3:3b:e6:38:b6:aa:e8:f6:2a:ec:
         df:24:1d:88:f3:a4:d0:ef:61:70:37:6e:93:d0:cc:46:76:13:
         e7:9f:13:dd:e7:cf:9d:87:42:c9:fd:b4:5e:a2:a4:fd:c7:28:
         ba:d5:36:ba:19:4b:c5:7f:92:e4:1b:ee:f8:02:f9:e7:e8:d2:
         43:01:40:be:5b:5b:59:f4:31:98:fd:73:99:45:30:f3:ce:12:
         3c:09:bd:b8:92:36:99:ae:3e:2c:32:55:44:28:9a:3c:54:b4:
         8c:38:ff:d3:35:ef:f0:52:c8:2b:94:8d:8c:87:53:96:0c:13:
         41:39:59:30:a5:b5:96:06:a2:44:96:cf:8d:91:a7:cc:98:28:
         e1:af:5c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:22:40 2025 by rpki-client