Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
File:                     CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer (raw, json)
Hash identifier:          u0v1n8alKHPG/kegIXRV/P4o8f4TB8R+XEPwx2RN4/8=
Subject key identifier:   09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       2F8F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Wed 15 May 2024 01:33:28 +0000
Certificate not after:    Thu 15 May 2025 01:30:03 +0000
Subordinate resources:    IP: 36.2.0.0/19
                          IP: 36.2.160.0 -- 36.2.223.255
                          IP: 39.110.0.0/15
                          IP: 58.87.128.0/17
                          IP: 59.146.0.0/15
                          IP: 61.120.160.0/19
                          IP: 61.211.0.0/18
                          IP: 103.2.48.0/22
                          IP: 103.241.124.0/22
                          IP: 110.66.0.0/15
                          IP: 110.232.152.0/21
                          IP: 111.216.0.0/15
                          IP: 115.162.0.0/15
                          IP: 116.67.128.0/17
                          IP: 116.82.0.0/16
                          IP: 116.91.32.0/19
                          IP: 116.91.160.0/19
                          IP: 118.236.0.0 -- 118.238.127.255
                          IP: 118.238.192.0/18
                          IP: 118.240.0.0/15
                          IP: 120.74.0.0/15
                          IP: 121.2.0.0/15
                          IP: 121.101.64.0/18
                          IP: 121.103.0.0/16
                          IP: 122.223.224.0/19
                          IP: 123.198.0.0/16
                          IP: 124.219.128.0/17
                          IP: 133.114.0.0/16
                          IP: 133.165.128.0/18
                          IP: 150.147.0.0/16
                          IP: 150.246.0.0/16
                          IP: 150.249.0.0/16
                          IP: 182.168.0.0/14
                          IP: 198.144.160.0/20
                          IP: 202.213.192.0/18
                          IP: 202.223.64.0/18
                          IP: 202.226.20.0/22
                          IP: 202.238.64.0/18
                          IP: 210.132.128.0/17
                          IP: 210.139.128.0/17
                          IP: 210.156.160.0/20
                          IP: 210.174.0.0/18
                          IP: 210.250.64.0/18
                          IP: 211.2.0.0/18
                          IP: 211.10.32.0/19
                          IP: 211.128.32.0/19
                          IP: 218.41.0.0/16
                          IP: 218.110.0.0/16
                          IP: 218.221.0.0/16
                          IP: 219.98.0.0/16
                          IP: 219.104.0.0/16
                          IP: 219.111.128.0/18
                          IP: 220.211.0.0/16
                          IP: 223.132.0.0/14

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 00:07:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12175 (0x2f8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: May 15 01:33:28 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b7:e2:28:60:11:7b:3e:9a:45:f4:a5:2b:7a:
                    71:95:9b:ce:0f:67:39:ca:83:42:8e:bf:0e:d7:65:
                    82:b0:77:11:6f:72:b1:44:dd:9a:0b:69:a2:7d:ee:
                    39:38:1a:1e:0e:ee:30:f3:7b:82:fc:ca:01:61:d4:
                    3f:1e:5e:42:e2:cc:fc:d0:12:2f:b0:79:3e:66:1e:
                    4c:fc:71:9b:f8:1b:47:5f:f4:e0:33:ba:dc:09:ce:
                    37:c9:bd:6e:ab:bd:93:1a:cc:d8:c0:fa:2e:3b:43:
                    d1:30:c8:29:a3:c4:ec:70:27:39:75:62:08:6a:bb:
                    7b:a7:2c:64:4f:15:43:bd:be:84:d3:d1:ce:26:f5:
                    9c:58:13:38:74:26:e1:22:83:df:c7:8c:18:cb:7a:
                    a8:e7:3e:6d:20:b8:36:2d:91:3d:75:d3:50:a5:cc:
                    ca:56:ca:d8:b4:0d:d5:88:22:94:84:ec:c9:d2:ef:
                    e7:ca:c2:7b:df:fb:74:cc:42:5a:f6:9b:a9:5f:6b:
                    21:2f:67:90:97:c6:df:97:8c:9f:50:c3:e0:40:88:
                    a6:97:a1:9d:53:8a:0b:f0:78:77:20:1e:c2:62:55:
                    14:3d:83:21:f1:eb:97:95:59:6d:c4:13:e1:32:2b:
                    5e:26:c2:90:2f:03:6d:cf:94:75:28:d9:ea:14:43:
                    5e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.2.0.0/19
                  36.2.160.0-36.2.223.255
                  39.110.0.0/15
                  58.87.128.0/17
                  59.146.0.0/15
                  61.120.160.0/19
                  61.211.0.0/18
                  103.2.48.0/22
                  103.241.124.0/22
                  110.66.0.0/15
                  110.232.152.0/21
                  111.216.0.0/15
                  115.162.0.0/15
                  116.67.128.0/17
                  116.82.0.0/16
                  116.91.32.0/19
                  116.91.160.0/19
                  118.236.0.0-118.238.127.255
                  118.238.192.0/18
                  118.240.0.0/15
                  120.74.0.0/15
                  121.2.0.0/15
                  121.101.64.0/18
                  121.103.0.0/16
                  122.223.224.0/19
                  123.198.0.0/16
                  124.219.128.0/17
                  133.114.0.0/16
                  133.165.128.0/18
                  150.147.0.0/16
                  150.246.0.0/16
                  150.249.0.0/16
                  182.168.0.0/14
                  198.144.160.0/20
                  202.213.192.0/18
                  202.223.64.0/18
                  202.226.20.0/22
                  202.238.64.0/18
                  210.132.128.0/17
                  210.139.128.0/17
                  210.156.160.0/20
                  210.174.0.0/18
                  210.250.64.0/18
                  211.2.0.0/18
                  211.10.32.0/19
                  211.128.32.0/19
                  218.41.0.0/16
                  218.110.0.0/16
                  218.221.0.0/16
                  219.98.0.0/16
                  219.104.0.0/16
                  219.111.128.0/18
                  220.211.0.0/16
                  223.132.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         18:3c:da:e3:51:98:f2:77:71:44:89:83:59:44:31:50:c1:68:
         1b:83:28:82:33:c7:78:58:90:c6:27:f8:bc:6c:3b:80:64:e7:
         88:62:28:15:d5:21:04:17:14:8f:79:16:fc:2f:bc:82:15:6c:
         79:1f:df:84:06:ca:e0:45:ae:c1:d6:79:37:52:a9:6d:15:f1:
         8b:65:96:de:8b:9f:d0:b0:72:ce:f9:47:ab:e1:28:bb:d4:ed:
         90:21:8e:0f:2e:a5:1d:d7:f9:6e:a4:aa:b8:3b:23:56:3f:01:
         33:49:c8:e6:67:c5:46:49:e0:32:aa:a8:da:92:e2:83:d5:ea:
         6e:ee:39:50:dd:ed:21:4a:1d:a8:63:a5:98:aa:ee:fd:32:ae:
         2f:65:94:66:f3:ea:d0:df:3c:ec:fb:85:39:13:e7:42:45:ed:
         6e:5b:56:75:76:02:fe:91:40:42:d0:46:70:59:24:b1:46:ad:
         1c:4b:02:40:fc:ab:c2:30:ca:27:89:28:83:08:b2:6a:c8:a0:
         6a:8c:8d:bd:2a:78:8c:62:f5:48:58:87:d5:95:e8:03:d3:e0:
         5f:e8:12:84:82:87:f5:dd:0e:b4:ca:8c:fd:ce:4f:76:8a:91:
         b1:e2:d7:37:46:31:b8:6c:bd:50:08:78:91:a3:74:65:2d:ba:
         89:1c:95:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:06:27 2024 by rpki-client on console-fra.rpki-client.org