Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
File:                     CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer (raw, json)
Hash identifier:          sMeMaW4PIfttEHAaDOmgp05NIWpHioIR0KTwXeiToUs=
Subject key identifier:   09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       3ECB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Fri 15 Nov 2024 01:35:09 +0000
Certificate not after:    Sat 15 Nov 2025 01:30:03 +0000
Subordinate resources:    IP: 36.2.0.0/19
                          IP: 36.2.160.0 -- 36.2.223.255
                          IP: 39.110.0.0/15
                          IP: 58.87.128.0/17
                          IP: 59.146.0.0/15
                          IP: 61.120.160.0/19
                          IP: 61.211.0.0/18
                          IP: 103.2.48.0/22
                          IP: 103.241.124.0/22
                          IP: 110.66.0.0/15
                          IP: 110.232.152.0/21
                          IP: 111.216.0.0/15
                          IP: 115.162.0.0/15
                          IP: 116.67.128.0/17
                          IP: 116.82.0.0/16
                          IP: 116.91.32.0/19
                          IP: 116.91.160.0/19
                          IP: 118.236.0.0 -- 118.238.127.255
                          IP: 118.238.192.0/18
                          IP: 118.240.0.0/15
                          IP: 120.74.0.0/15
                          IP: 121.2.0.0/15
                          IP: 121.101.64.0/18
                          IP: 121.103.0.0/16
                          IP: 122.223.224.0/19
                          IP: 123.198.0.0/16
                          IP: 124.219.128.0/17
                          IP: 133.114.0.0/16
                          IP: 133.165.128.0/18
                          IP: 150.147.0.0/16
                          IP: 150.246.0.0/16
                          IP: 150.249.0.0/16
                          IP: 182.168.0.0/14
                          IP: 198.144.160.0/20
                          IP: 202.213.192.0/18
                          IP: 202.223.64.0/18
                          IP: 202.226.20.0/22
                          IP: 202.238.64.0/18
                          IP: 210.132.128.0/17
                          IP: 210.139.128.0/17
                          IP: 210.156.160.0/20
                          IP: 210.174.0.0/18
                          IP: 210.250.64.0/18
                          IP: 211.2.0.0/18
                          IP: 211.10.32.0/19
                          IP: 211.128.32.0/19
                          IP: 218.41.0.0/16
                          IP: 218.110.0.0/16
                          IP: 218.221.0.0/16
                          IP: 219.98.0.0/16
                          IP: 219.104.0.0/16
                          IP: 219.111.128.0/18
                          IP: 220.211.0.0/16
                          IP: 223.132.0.0/14

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16075 (0x3ecb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Nov 15 01:35:09 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b7:e2:28:60:11:7b:3e:9a:45:f4:a5:2b:7a:
                    71:95:9b:ce:0f:67:39:ca:83:42:8e:bf:0e:d7:65:
                    82:b0:77:11:6f:72:b1:44:dd:9a:0b:69:a2:7d:ee:
                    39:38:1a:1e:0e:ee:30:f3:7b:82:fc:ca:01:61:d4:
                    3f:1e:5e:42:e2:cc:fc:d0:12:2f:b0:79:3e:66:1e:
                    4c:fc:71:9b:f8:1b:47:5f:f4:e0:33:ba:dc:09:ce:
                    37:c9:bd:6e:ab:bd:93:1a:cc:d8:c0:fa:2e:3b:43:
                    d1:30:c8:29:a3:c4:ec:70:27:39:75:62:08:6a:bb:
                    7b:a7:2c:64:4f:15:43:bd:be:84:d3:d1:ce:26:f5:
                    9c:58:13:38:74:26:e1:22:83:df:c7:8c:18:cb:7a:
                    a8:e7:3e:6d:20:b8:36:2d:91:3d:75:d3:50:a5:cc:
                    ca:56:ca:d8:b4:0d:d5:88:22:94:84:ec:c9:d2:ef:
                    e7:ca:c2:7b:df:fb:74:cc:42:5a:f6:9b:a9:5f:6b:
                    21:2f:67:90:97:c6:df:97:8c:9f:50:c3:e0:40:88:
                    a6:97:a1:9d:53:8a:0b:f0:78:77:20:1e:c2:62:55:
                    14:3d:83:21:f1:eb:97:95:59:6d:c4:13:e1:32:2b:
                    5e:26:c2:90:2f:03:6d:cf:94:75:28:d9:ea:14:43:
                    5e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.2.0.0/19
                  36.2.160.0-36.2.223.255
                  39.110.0.0/15
                  58.87.128.0/17
                  59.146.0.0/15
                  61.120.160.0/19
                  61.211.0.0/18
                  103.2.48.0/22
                  103.241.124.0/22
                  110.66.0.0/15
                  110.232.152.0/21
                  111.216.0.0/15
                  115.162.0.0/15
                  116.67.128.0/17
                  116.82.0.0/16
                  116.91.32.0/19
                  116.91.160.0/19
                  118.236.0.0-118.238.127.255
                  118.238.192.0/18
                  118.240.0.0/15
                  120.74.0.0/15
                  121.2.0.0/15
                  121.101.64.0/18
                  121.103.0.0/16
                  122.223.224.0/19
                  123.198.0.0/16
                  124.219.128.0/17
                  133.114.0.0/16
                  133.165.128.0/18
                  150.147.0.0/16
                  150.246.0.0/16
                  150.249.0.0/16
                  182.168.0.0/14
                  198.144.160.0/20
                  202.213.192.0/18
                  202.223.64.0/18
                  202.226.20.0/22
                  202.238.64.0/18
                  210.132.128.0/17
                  210.139.128.0/17
                  210.156.160.0/20
                  210.174.0.0/18
                  210.250.64.0/18
                  211.2.0.0/18
                  211.10.32.0/19
                  211.128.32.0/19
                  218.41.0.0/16
                  218.110.0.0/16
                  218.221.0.0/16
                  219.98.0.0/16
                  219.104.0.0/16
                  219.111.128.0/18
                  220.211.0.0/16
                  223.132.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         8c:b2:38:97:ee:e9:f6:d3:f8:1a:32:23:67:fc:cf:0b:36:a9:
         95:f5:53:8d:76:5b:d0:21:98:69:c8:fb:07:69:56:f9:90:8c:
         52:b2:34:1a:12:b8:c7:dc:6b:4a:04:7f:6d:ee:8f:ff:b1:06:
         c5:27:ee:52:10:a8:73:79:5e:7b:85:9f:4e:f5:c2:2f:d0:5a:
         35:6b:67:44:35:00:e8:58:75:ba:51:02:0f:91:37:ed:9d:45:
         92:3f:50:99:3c:04:c9:77:c0:46:fe:23:19:3f:17:9e:69:3f:
         eb:3f:c3:0f:0b:02:fe:46:72:32:9c:e5:5a:1a:97:aa:22:0d:
         41:2a:38:21:2f:73:bb:92:85:74:d2:f7:f8:38:3f:5e:2d:e2:
         71:bd:3b:50:ab:50:de:6f:b7:91:42:9a:5b:02:04:f6:fa:07:
         94:c4:e7:b9:d3:61:f7:9c:9c:73:96:bf:67:4e:27:b1:a0:46:
         a8:e7:4a:5b:2c:db:09:e1:2d:a3:4a:75:37:3b:95:04:51:38:
         a7:11:b5:19:d3:6e:44:86:da:aa:a0:d8:7c:47:cd:b9:33:0c:
         69:32:81:c6:85:59:d0:0d:f8:ba:db:d6:ec:37:ed:7d:f4:8b:
         2b:66:38:28:bc:57:fe:33:f4:c4:12:8d:ea:4a:53:8d:6b:63:
         25:6e:7f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:41:08 2024 by rpki-client on console-ams.rpki-client.org