Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/Jvd1usdI6Vgqxoo2r1dUT9dNhSU.cer
File:                     Jvd1usdI6Vgqxoo2r1dUT9dNhSU.cer (raw, json)
Hash identifier:          J+61LJkMPSThmytBt6mYXTmZufci9tVvVS1A2JidJn8=
Subject key identifier:   26:F7:75:BA:C7:48:E9:58:2A:C6:8A:36:AF:57:54:4F:D7:4D:85:25
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       3E62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/Jvd1usdI6Vgqxoo2r1dUT9dNhSU.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Fri 15 Nov 2024 01:32:44 +0000
Certificate not after:    Sat 15 Nov 2025 01:30:03 +0000
Subordinate resources:    IP: 103.99.80.0/22
                          IP: 219.100.188.0/22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15970 (0x3e62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Nov 15 01:32:44 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=26F775BAC748E9582AC68A36AF57544FD74D8525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d2:96:b1:bd:25:03:e2:8c:58:5f:9b:34:c6:
                    9f:ca:de:03:bd:c1:07:39:dc:c1:71:4f:e8:8d:b0:
                    62:e3:64:13:a6:07:a3:7f:ed:fc:71:d0:f2:39:42:
                    96:2c:81:3d:65:65:35:a9:74:f9:3c:de:8c:d4:db:
                    80:34:80:46:06:af:9a:99:69:d1:1a:c0:89:1f:6c:
                    ff:68:88:4b:1e:6b:41:ab:4a:df:ef:5e:cb:64:9a:
                    3c:f9:2d:25:1a:c5:3c:1a:38:8f:66:55:0f:4d:4d:
                    a6:52:5e:fb:7e:b5:d5:30:e8:1f:67:f1:71:83:be:
                    0b:04:5a:ef:35:91:d2:0f:62:36:2f:3d:a0:bf:26:
                    21:a4:1c:04:3c:04:80:da:d2:0d:06:26:02:4a:83:
                    8f:0e:80:a0:23:58:fc:55:85:23:e1:c2:76:8e:25:
                    1b:69:b5:77:07:5e:f2:7a:e9:7e:b5:c4:c3:e8:fe:
                    a5:65:de:3e:80:5d:0f:57:41:d5:51:77:98:9f:3a:
                    31:71:b2:c8:e3:96:cc:31:17:cd:6d:ea:af:64:02:
                    fe:03:75:9c:1c:7c:f6:4d:7d:27:5d:d7:28:80:20:
                    1b:2d:54:be:c1:f5:a7:89:54:fc:1c:df:6c:fb:ab:
                    25:bf:90:e4:27:eb:64:53:c1:c4:94:ba:f6:57:9a:
                    74:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F7:75:BA:C7:48:E9:58:2A:C6:8A:36:AF:57:54:4F:D7:4D:85:25
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/Jvd1usdI6Vgqxoo2r1dUT9dNhSU.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.99.80.0/22
                  219.100.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:52:e3:07:2c:9a:39:d1:1a:e9:8a:f8:32:20:78:ea:53:30:
         e4:16:5d:ba:b3:82:22:23:80:77:2f:8b:65:80:0c:a9:bb:35:
         a7:78:ca:fc:78:aa:00:13:be:11:36:9b:bf:05:32:00:5b:80:
         4a:70:69:d1:2d:a9:23:71:7b:1f:8e:9d:0f:86:c2:b7:ee:84:
         24:df:46:38:24:16:41:6f:81:17:6d:91:a6:86:3a:5d:ba:b4:
         cf:69:13:04:d0:ae:ee:aa:0c:cd:f7:5f:70:c0:58:18:3c:1b:
         4d:bd:04:cf:e2:01:33:b2:0b:fd:20:af:81:06:55:fc:89:e4:
         fb:17:2c:93:47:1a:a9:9e:22:e4:ee:5c:80:9f:cc:ae:19:7d:
         af:8c:ea:f4:fa:89:04:c9:69:0c:ba:aa:d6:26:ff:3e:73:02:
         1d:dc:00:0d:95:29:af:cc:a5:4c:34:32:62:c5:51:0e:cf:c0:
         64:6d:10:c8:aa:d3:e4:9c:63:43:91:10:69:a9:93:20:45:8c:
         4f:e4:d6:c5:d6:7a:b7:6b:b0:a0:88:6d:48:1a:bd:c5:5e:9a:
         b0:73:75:9b:fe:85:7c:5e:3a:42:f6:80:4b:e0:60:4e:22:a2:
         43:b5:6a:61:6d:e2:cc:ce:22:e9:bc:6c:f1:c4:e1:ef:75:56:
         c8:56:7d:f2
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgICPmIwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC
NTIwREFBQzdEQThGMB4XDTI0MTExNTAxMzI0NFoXDTI1MTExNTAxMzAwM1owMzEx
MC8GA1UEAxMoMjZGNzc1QkFDNzQ4RTk1ODJBQzY4QTM2QUY1NzU0NEZENzREODUy
NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMfSlrG9JQPijFhfmzTG
n8reA73BBzncwXFP6I2wYuNkE6YHo3/t/HHQ8jlCliyBPWVlNal0+TzejNTbgDSA
Rgavmplp0RrAiR9s/2iISx5rQatK3+9ey2SaPPktJRrFPBo4j2ZVD01NplJe+361
1TDoH2fxcYO+CwRa7zWR0g9iNi89oL8mIaQcBDwEgNrSDQYmAkqDjw6AoCNY/FWF
I+HCdo4lG2m1dwde8nrpfrXEw+j+pWXePoBdD1dB1VF3mJ86MXGyyOOWzDEXzW3q
r2QC/gN1nBx89k19J13XKIAgGy1UvsH1p4lU/BzfbPurJb+Q5CfrZFPBxJS69lea
dMUCAwEAAaOCApEwggKNMB0GA1UdDgQWBBQm93W6x0jpWCrGijavV1RP102FJTAf
BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0
b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa
dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j
Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0
NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G
A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw
gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9hcC9BOTFBNzM4MTAwMDAvMjAwNDQvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw
a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMDQ0L0p2
ZDF1c2RJNlZncXhvbzJyMWRVVDlkTmhTVS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz
Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv
bi54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAJnY1ADBALbZLwwDQYJ
KoZIhvcNAQELBQADggEBAElS4wcsmjnRGumK+DIgeOpTMOQWXbqzgiIjgHcvi2WA
DKm7Nad4yvx4qgATvhE2m78FMgBbgEpwadEtqSNxex+OnQ+GwrfuhCTfRjgkFkFv
gRdtkaaGOl26tM9pEwTQru6qDM33X3DAWBg8G029BM/iATOyC/0gr4EGVfyJ5PsX
LJNHGqmeIuTuXICfzK4Zfa+M6vT6iQTJaQy6qtYm/z5zAh3cAA2VKa/MpUw0MmLF
UQ7PwGRtEMiq0+ScY0OREGmpkyBFjE/k1sXWerdrsKCIbUgavcVemrBzdZv+hXxe
OkL2gEvgYE4iokO1amFt4szOIum8bPHE4e91VshWffI=
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:36 2024 by rpki-client on console-fra.rpki-client.org