Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/GPI4czp2zpLtOGDyzLaI2K0r34w.cer
File:                     GPI4czp2zpLtOGDyzLaI2K0r34w.cer (raw, json)
Hash identifier:          OqoeOOFsad5wT3f43uHz8Dt7e5SgpD5mc9tD9ZKK2K8=
Subject key identifier:   18:F2:38:73:3A:76:CE:92:ED:38:60:F2:CC:B6:88:D8:AD:2B:DF:8C
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       2FB7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20157/GPI4czp2zpLtOGDyzLaI2K0r34w.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20157/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Wed 15 May 2024 01:34:18 +0000
Certificate not after:    Thu 15 May 2025 01:30:03 +0000
Subordinate resources:    IP: 103.169.144.0/23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 00:07:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12215 (0x2fb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: May 15 01:34:18 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=18F238733A76CE92ED3860F2CCB688D8AD2BDF8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c1:5f:cc:64:28:19:9d:25:6a:00:6a:14:3a:
                    c1:04:2b:7d:94:65:ee:01:e4:de:39:cf:d3:59:ff:
                    54:98:a8:51:e7:14:b2:e6:7a:4a:cf:1a:28:a7:6d:
                    eb:de:8a:ba:0a:55:21:ac:94:19:7a:91:c8:c4:68:
                    51:12:c6:66:de:33:53:d1:02:d9:19:10:ca:7a:11:
                    72:6a:8c:54:ec:61:97:33:d4:7c:be:c6:95:fd:92:
                    1b:0d:34:71:36:eb:2e:bf:c2:65:0c:fe:87:41:a2:
                    a5:16:e9:6b:bf:0d:e9:b0:c3:97:86:bd:c2:0d:22:
                    41:42:3f:f9:0a:03:33:f1:96:4c:86:a3:d8:8e:ea:
                    b9:68:b6:fc:11:fe:c5:5e:91:65:c0:81:20:dc:12:
                    03:e9:09:fa:54:c1:37:e7:7c:fa:02:b7:31:19:aa:
                    d0:43:c3:5b:32:56:d6:a5:32:c5:e3:01:6b:09:58:
                    06:6f:ef:b1:f1:6f:28:00:1c:de:dc:c6:9e:21:87:
                    5e:59:d7:c9:12:fe:ab:91:79:76:6c:c2:37:d5:c3:
                    a1:61:1a:c2:02:45:fe:22:54:a1:41:bf:2a:24:67:
                    19:27:76:c3:09:12:39:f5:59:b9:8f:a4:18:1b:ab:
                    fd:3b:73:43:eb:17:42:72:68:14:48:eb:23:47:95:
                    83:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F2:38:73:3A:76:CE:92:ED:38:60:F2:CC:B6:88:D8:AD:2B:DF:8C
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20157/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20157/GPI4czp2zpLtOGDyzLaI2K0r34w.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:6c:d9:5e:ef:1c:d0:98:69:e5:fa:03:fb:30:34:9d:c6:24:
         66:8b:69:f2:2e:89:77:ee:cc:de:6f:19:ac:15:c2:5a:81:66:
         86:a7:7e:8b:d6:ae:bb:3a:ea:1e:62:96:53:8c:78:d3:c7:f7:
         94:62:ed:a3:33:d4:be:e7:14:7c:a4:40:f8:6a:44:4c:85:2a:
         a2:32:6c:cf:74:c9:1b:49:e2:45:e5:a4:73:c8:be:2c:45:2c:
         01:6c:e5:36:9e:9b:80:dc:d1:74:3e:c4:0c:ab:f9:43:39:45:
         ee:2a:b2:0e:d6:6a:13:19:8c:4b:9e:63:cb:0c:f6:72:da:4c:
         68:57:41:24:65:fc:a2:5d:32:ed:73:85:59:ca:91:71:71:22:
         ba:8a:d4:e6:bf:48:75:0e:cc:d0:15:c4:77:f8:62:26:3d:19:
         89:5d:ca:28:df:14:4b:eb:f0:19:73:c9:26:62:f2:ce:45:a7:
         96:e6:b6:6a:e2:4d:da:20:9e:21:ec:4c:43:e3:7f:2b:8b:d2:
         33:37:03:ce:62:c6:09:d0:be:a7:db:33:87:15:24:5e:30:b1:
         fa:1f:0c:02:8d:b3:a6:57:8b:83:3b:87:14:3a:e4:89:e5:b2:
         aa:ca:b3:56:3d:6e:5b:20:dd:53:59:78:48:64:3b:79:82:1e:
         83:f7:d1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:01:20 2024 by rpki-client on console-ams.rpki-client.org