Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/_Vaf1ml8D76zznTsVqYGH7v8zrE.cer
File:                     _Vaf1ml8D76zznTsVqYGH7v8zrE.cer (raw, json)
Hash identifier:          NRdnM7/bZ4bgdh9nWkHOMl5oGT4h79ABwcytaFPVm/c=
Subject key identifier:   FD:56:9F:D6:69:7C:0F:BE:B3:CE:74:EC:56:A6:06:1F:BB:FC:CE:B1
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       3E7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1562/_Vaf1ml8D76zznTsVqYGH7v8zrE.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1562/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Fri 15 Nov 2024 01:33:34 +0000
Certificate not after:    Sat 15 Nov 2025 01:30:03 +0000
Subordinate resources:    IP: 150.26.0.0/16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15999 (0x3e7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Nov 15 01:33:34 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=FD569FD6697C0FBEB3CE74EC56A6061FBBFCCEB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bd:7d:cf:b9:c8:8a:5b:15:d5:d9:24:27:5b:
                    5c:5e:50:af:2b:73:a4:07:04:9f:87:d5:0f:d5:c2:
                    d5:f6:2c:93:6c:c0:3a:95:a9:66:d7:9b:93:b7:2b:
                    61:1c:ed:f8:bc:b1:4a:9a:94:93:a7:2c:2c:a7:bb:
                    6d:b0:f3:26:3f:96:70:d1:21:10:80:bb:ad:17:e6:
                    48:f8:97:62:19:a4:1e:44:b8:11:8a:00:68:5b:c6:
                    08:2b:2d:c3:26:8e:31:f5:18:f4:b5:5a:00:4f:1b:
                    eb:5f:63:68:5d:f2:82:6e:27:95:4b:64:b9:df:49:
                    da:9a:4d:f6:e8:f4:3a:8a:64:4d:e5:40:b7:d9:85:
                    86:be:16:b1:04:3b:d7:52:9e:5b:61:51:ae:ce:5b:
                    69:7b:08:db:cb:79:d0:29:ae:6b:34:41:1b:54:ac:
                    21:05:27:d1:8c:2b:43:9c:3f:cc:2e:3e:7e:8d:fa:
                    c8:41:d2:b5:8c:4c:22:22:2b:25:79:47:10:d6:09:
                    cf:c0:48:0e:78:67:12:5d:86:a3:fe:7a:d3:91:df:
                    fd:75:65:b7:1b:11:6a:9f:35:1a:79:b6:c3:3f:9b:
                    64:e1:c4:a2:f9:a4:83:80:f0:93:3d:02:c8:88:31:
                    0f:69:74:5a:e9:7c:96:35:46:bd:31:1e:04:32:fb:
                    92:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:56:9F:D6:69:7C:0F:BE:B3:CE:74:EC:56:A6:06:1F:BB:FC:CE:B1
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1562/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1562/_Vaf1ml8D76zznTsVqYGH7v8zrE.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.26.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         79:bd:59:f8:59:10:1f:26:57:fe:13:61:6c:bb:f6:06:64:1c:
         52:b8:2c:31:ec:83:b1:57:25:fd:fd:05:4f:02:24:78:9e:80:
         2c:06:73:8a:b2:db:83:76:3d:77:6f:91:57:27:4e:bc:c8:4f:
         08:ba:2c:16:19:1d:84:61:21:09:f5:b4:3b:5c:21:8d:23:56:
         85:37:6b:2c:aa:f0:dc:d8:1a:c6:94:fb:fc:07:cb:0e:f2:1b:
         73:e9:a2:90:cc:c8:a0:57:a9:07:4b:60:9a:c1:5c:d8:9e:9c:
         d5:b6:a6:24:e6:a0:04:ef:76:90:20:d3:1a:4b:ac:67:cc:e6:
         a7:46:93:4f:09:5c:c6:79:39:12:6f:0a:24:b0:0d:7f:0c:f2:
         cb:06:8a:0f:36:e9:e1:f6:4e:a1:d4:2a:cd:9c:16:7e:60:6d:
         40:91:25:7a:23:3d:ae:3c:17:48:32:b4:f6:63:3e:23:d3:8d:
         9a:b5:1f:23:e8:9a:24:b5:6c:ba:11:fc:6c:af:e1:69:01:9b:
         0b:55:89:88:88:78:7b:1b:86:8a:e4:ea:97:26:b5:89:3f:7d:
         04:bf:99:25:e6:93:8d:6e:d9:c7:15:7f:c9:6e:57:4e:4f:b7:
         9c:3e:f4:9e:b9:35:fe:8b:b5:69:c9:d5:4a:e9:b2:04:61:15:
         fc:b5:2e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:36 2024 by rpki-client on console-fra.rpki-client.org