Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/rMiIcI0Zo4-zsY_RtJKXTV2AlvY.cer
File:                     rMiIcI0Zo4-zsY_RtJKXTV2AlvY.cer (raw, json)
Hash identifier:          Q+djRkfG5Swln/dYIENnFAcPeRXmnPE0iTbBLGEeVC4=
Subject key identifier:   AC:C8:88:70:8D:19:A3:8F:B3:B1:8F:D1:B4:92:97:4D:5D:80:96:F6
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       47D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/552/rMiIcI0Zo4-zsY_RtJKXTV2AlvY.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/552/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Sat 15 Mar 2025 01:36:57 +0000
Certificate not after:    Sun 15 Mar 2026 01:30:03 +0000
Subordinate resources:    IP: 103.13.168.0/22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 05:11:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18390 (0x47d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000
        Validity
            Not Before: Mar 15 01:36:57 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=ACC888708D19A38FB3B18FD1B492974D5D8096F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:53:c2:f0:e1:4e:9d:74:ac:36:4f:fc:67:a6:
                    4f:2e:b3:6e:df:6b:d7:f5:28:2d:82:43:ed:83:37:
                    cb:99:1c:42:86:63:e6:5c:c5:bf:73:f2:e2:4f:8b:
                    51:60:bc:8d:86:6a:6d:85:30:00:02:c8:ee:f0:2f:
                    54:a6:75:76:e4:f8:98:bb:7f:13:e9:c2:1c:fb:74:
                    a2:9a:13:0b:20:e5:d6:2b:36:bb:e3:23:bb:81:dc:
                    d9:b1:03:3b:04:d6:d0:f3:59:a4:3d:d9:fa:f6:3d:
                    45:3b:2e:41:f3:71:be:a4:ff:61:45:5a:37:65:b9:
                    de:00:73:d9:8a:8b:8a:c8:b5:12:72:1a:29:ac:d6:
                    7c:c1:ca:15:6c:b1:c3:9a:5a:df:fa:55:d3:74:96:
                    35:e1:70:d2:ae:1c:71:1e:68:d3:3c:12:5c:72:36:
                    0a:c4:b8:90:e5:9f:3b:0d:ab:ea:ab:0f:98:b5:ae:
                    b5:e3:66:ba:54:84:87:41:c9:73:fb:6d:43:33:d0:
                    b2:a5:9c:01:22:fa:35:34:da:e4:96:d0:3f:8c:51:
                    16:72:b0:22:5a:b1:d1:d2:f7:7d:57:64:d2:25:1c:
                    04:cd:df:a7:44:dc:6f:db:f0:47:32:9b:f9:3d:3e:
                    13:29:30:7d:58:9c:c0:6e:5b:30:bd:78:3b:67:8d:
                    57:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C8:88:70:8D:19:A3:8F:B3:B1:8F:D1:B4:92:97:4D:5D:80:96:F6
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/552/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/552/rMiIcI0Zo4-zsY_RtJKXTV2AlvY.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:6c:cc:12:87:d3:81:57:6a:62:b6:3d:6f:a0:dc:d4:cc:7b:
         10:b1:71:2e:70:16:b4:b4:1f:8f:a4:29:6b:e3:7b:e6:8d:78:
         1a:01:e3:ef:7f:91:03:2f:d5:4c:91:f9:71:b8:a8:ab:98:6e:
         2e:0b:d6:db:bb:2c:96:d0:39:5a:c2:53:5d:78:4b:40:8f:16:
         d4:da:8a:9a:55:62:8f:26:29:83:e4:7c:c7:7f:8c:b9:94:d4:
         97:cb:b1:86:41:4d:01:b3:7e:66:63:8e:12:8c:53:75:07:15:
         4e:21:6c:52:be:10:b6:97:34:35:27:fa:ff:76:66:14:1c:cf:
         96:90:32:55:f3:25:a2:83:e0:74:06:76:01:45:74:9e:ae:70:
         92:64:cf:99:48:9e:2d:f2:66:d1:e3:38:ce:9c:0a:e8:9c:86:
         be:de:d8:26:43:b7:f1:b8:6f:e7:0f:1d:ad:55:68:df:59:bd:
         fb:9a:dc:e8:00:05:b4:f9:94:39:57:ad:89:a2:e2:a1:f7:98:
         61:9a:07:6c:da:3f:62:7b:36:5c:55:45:df:1a:b4:1a:5a:b7:
         86:c3:75:9f:b9:3c:25:07:49:5e:46:04:1e:60:1f:88:d2:19:
         81:72:13:00:34:d4:49:4a:0d:7d:50:99:f5:6f:1a:5f:fb:c2:
         61:37:78:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:22:22 2025 by rpki-client