Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9TUOV--VEgExsjcey8pZcd4RmvM.cer
File:                     9TUOV--VEgExsjcey8pZcd4RmvM.cer (raw, json)
Hash identifier:          OiJeURXHjIS2fmLEssqJNPOLa3ezCuDkpSxWQ/fXwZs=
Subject key identifier:   F5:35:0E:57:EF:95:12:01:31:B2:37:1E:CB:CA:59:71:DE:11:9A:F3
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       303A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30414/9TUOV--VEgExsjcey8pZcd4RmvM.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30414/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Wed 15 May 2024 01:36:58 +0000
Certificate not after:    Thu 15 May 2025 01:30:03 +0000
Subordinate resources:    IP: 2400:c8a0::/32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 08:22:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12346 (0x303a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: May 15 01:36:58 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=F5350E57EF95120131B2371ECBCA5971DE119AF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ba:31:bd:8c:66:85:59:b3:5b:7b:65:05:33:
                    16:04:e5:6a:3a:29:f2:61:fe:0b:25:dc:4f:42:b2:
                    66:6c:29:53:f5:52:40:b7:5f:10:f4:00:c2:8b:37:
                    7d:41:23:02:e0:fe:79:67:dd:c6:89:f6:5f:95:75:
                    bc:e7:49:71:de:15:3e:18:a6:0d:79:33:ae:7e:ce:
                    72:22:71:81:f5:e9:08:05:a5:04:b0:09:69:31:ea:
                    8f:95:30:ea:de:2e:71:67:91:e0:1f:74:24:a7:55:
                    bd:21:76:28:b2:c2:1e:5f:6e:c6:ac:af:6c:9b:5b:
                    d4:d7:d4:6c:c3:ea:4a:70:e7:11:22:1f:a9:47:00:
                    08:ee:74:5b:c6:26:bb:5d:00:df:ec:df:12:30:10:
                    8f:c4:d8:37:b4:4a:0c:ec:20:67:7d:89:a9:6a:2c:
                    64:b8:b4:b7:bc:19:eb:df:e3:86:b5:eb:cc:31:4d:
                    b0:aa:30:a3:a0:a5:12:e1:1a:25:fd:13:30:6f:af:
                    23:f1:c0:e8:3e:d3:ce:a5:6f:21:3e:e4:bf:8f:3e:
                    61:a3:66:d0:af:ed:62:fd:09:33:d3:2a:d0:00:30:
                    27:a4:12:f2:d4:cc:9d:91:cf:9b:fb:10:6b:20:72:
                    05:39:de:3a:59:00:91:9e:56:65:05:31:c1:cd:a9:
                    d8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:35:0E:57:EF:95:12:01:31:B2:37:1E:CB:CA:59:71:DE:11:9A:F3
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30414/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30414/9TUOV--VEgExsjcey8pZcd4RmvM.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:c8a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:ce:ad:00:61:d9:e3:f9:0a:d2:ef:cf:44:51:ea:2d:cc:b2:
         39:9b:8d:f4:98:ca:b0:a7:1b:5e:d4:23:96:96:c2:23:c5:c9:
         fe:93:a2:0f:62:65:23:20:8a:41:39:74:75:9d:50:1b:b9:1f:
         5f:0d:81:1f:00:b5:c8:61:10:29:a7:e6:60:ed:b5:fa:c8:d8:
         d5:6e:30:6a:71:dd:32:97:1d:a9:a9:d7:69:f3:3e:4f:76:45:
         82:56:ce:a6:4f:53:df:81:37:f5:20:a7:55:3a:53:bb:1d:e2:
         9d:d5:68:85:36:58:24:24:97:8e:65:7e:cd:6b:6e:75:c0:2e:
         9a:4b:3b:a0:d4:8c:fc:1a:23:87:4b:0c:25:f2:79:f3:93:19:
         97:cb:a6:48:8c:f4:aa:a3:14:d9:24:a3:d5:5a:a4:bc:94:84:
         09:62:60:3e:3c:58:a3:9e:d2:04:55:e8:26:ff:ea:8f:c9:85:
         3e:a5:99:8e:59:b3:b5:c4:23:6f:62:3e:fe:36:c6:6f:b6:e3:
         23:9d:fc:46:bd:5f:be:fa:88:d3:25:03:98:9a:33:5c:a8:57:
         5c:46:f5:a0:a4:f3:4d:cb:20:9e:41:7b:bd:d2:65:bf:da:b1:
         0f:eb:d3:76:c2:75:6e:18:f9:5c:c2:48:74:7c:f8:ac:de:ee:
         ba:d3:29:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 12:06:29 2024 by rpki-client on console-fra.rpki-client.org