Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/RsHMLWUoO-OBBxn16hqHkDA6Ink.cer
File:                     RsHMLWUoO-OBBxn16hqHkDA6Ink.cer (raw, json)
Hash identifier:          zgaDbQBhxqmS2kr6ugV57qmIIvm2aGZgGImd9akG9hQ=
Subject key identifier:   46:C1:CC:2D:65:28:3B:E3:81:07:19:F5:EA:1A:87:90:30:3A:22:79
Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2
Certificate issuer:       /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2
Certificate serial:       0A94
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20252/RsHMLWUoO-OBBxn16hqHkDA6Ink.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20252/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Wed 15 May 2024 01:38:37 +0000
Certificate not after:    Thu 15 May 2025 01:30:03 +0000
Subordinate resources:    IP: 157.15.254.0/23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 02:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2708 (0xa94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2
        Validity
            Not Before: May 15 01:38:37 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=46C1CC2D65283BE3810719F5EA1A8790303A2279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b4:66:05:d5:60:08:60:be:5b:a9:26:b6:89:
                    ef:60:0b:0e:34:af:10:de:a9:e2:78:06:a8:b5:20:
                    79:d3:ad:0d:6e:b0:25:2c:04:80:8c:a8:e4:49:c2:
                    9f:33:e9:b4:57:88:e7:aa:1c:40:1f:1b:18:01:20:
                    6a:a7:f5:e3:eb:a6:af:6d:11:96:b7:4b:9d:a2:ea:
                    6a:85:1c:f8:46:1a:36:79:66:03:bb:80:39:17:92:
                    a2:b3:29:dc:4a:27:29:c2:14:f8:96:3c:0b:97:4f:
                    7c:ab:26:17:dc:e5:bb:ac:35:c5:99:96:e3:a1:71:
                    fe:8b:4b:64:8e:d4:2c:f6:84:d9:73:73:ef:73:3c:
                    57:3c:ed:c2:fc:38:0d:89:13:09:68:ee:7d:e4:94:
                    59:d2:f8:55:76:f7:87:b6:a7:a2:0b:92:8d:11:d1:
                    31:ff:29:4d:bd:f0:0c:93:2c:33:1a:cf:c0:3b:ef:
                    47:23:50:9b:68:14:14:74:89:3f:ba:da:e2:9f:0f:
                    8d:9a:d1:6e:7b:23:09:40:80:26:0a:cc:8b:15:15:
                    a9:e6:b1:e9:91:33:ca:55:14:85:a6:05:c3:2c:fc:
                    61:84:02:32:64:0c:8f:78:9a:53:5a:ce:1e:fc:37:
                    97:d3:4c:ad:a0:4a:d2:43:e6:c5:93:5a:56:14:1f:
                    e0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:C1:CC:2D:65:28:3B:E3:81:07:19:F5:EA:1A:87:90:30:3A:22:79
            X509v3 Authority Key Identifier:
                keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20252/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20252/RsHMLWUoO-OBBxn16hqHkDA6Ink.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:ab:5f:33:39:a4:1d:71:43:a5:18:1b:44:65:5b:40:c0:a9:
         67:cd:e2:27:53:a8:29:6a:2a:a7:8c:5f:cb:e6:af:2f:76:86:
         16:a5:56:7b:80:f0:28:cf:b5:ca:7f:10:d4:79:24:89:ed:f7:
         82:e1:be:6c:ef:47:bb:bd:24:ba:77:27:08:67:fb:1d:c2:df:
         b4:df:2a:c7:5b:07:3e:71:a6:52:bb:00:0e:70:13:6c:f7:76:
         0d:64:1e:e5:7f:c9:9a:ad:0b:82:36:73:6e:05:a8:1c:1f:bf:
         85:03:c2:68:e6:65:cf:92:c4:1a:bf:78:59:6a:84:c8:8a:4c:
         34:3a:51:ed:ba:60:8d:c9:36:71:06:5b:30:68:41:41:2e:41:
         94:df:ee:9e:ef:b8:9f:2e:41:7a:9e:3f:68:53:df:e3:e4:f6:
         ee:73:9b:d8:75:a7:0e:20:32:2b:49:9c:e0:ff:6b:2e:e9:42:
         e9:14:2b:48:e7:87:28:bf:d4:61:8e:76:26:16:df:2c:c3:2f:
         2d:bf:a1:4f:39:b2:cf:30:da:4f:33:06:f8:6d:0a:cc:3f:d0:
         3f:d8:db:7b:34:ce:9a:74:81:37:0a:fc:11:f4:fd:33:1a:c0:
         d5:62:05:ca:3e:bd:04:39:19:17:71:15:31:87:81:2b:bf:53:
         67:f1:bd:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 08:51:51 2024 by rpki-client on console-ams.rpki-client.org