Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer
File:                     mQTsvNhfIqLorn4fmR6DRdBqmBY.cer (raw, json)
Hash identifier:          MYZ8uFmP9oVb7bl+6mFdN8iAA5X+1IopeZD1RDifvFM=
Subject key identifier:   99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       32F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/mQTsvNhfIqLorn4fmR6DRdBqmBY.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Mon 24 Jun 2024 10:50:32 +0000
Certificate not after:    Tue 24 Jun 2025 10:46:45 +0000
Subordinate resources:    IP: 43.223.0.0/16
                          IP: 103.2.28.0/24
                          IP: 103.2.30.0/23
                          IP: 119.235.224.0/24
                          IP: 119.235.232.0/24
                          IP: 119.235.235.0 -- 119.235.237.255
                          IP: 203.104.128.0 -- 203.104.158.255

Validation:               Failed, certificate revoked on Wed 26 Jun 2024 07:06:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13042 (0x32f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Jun 24 10:50:32 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b1:23:dd:37:fd:93:24:74:d4:86:13:d3:80:
                    95:ea:91:eb:73:8e:ec:a4:a8:85:4c:95:8f:37:8a:
                    89:45:40:7f:55:49:23:ac:35:ed:2a:54:fd:de:08:
                    ae:22:0f:46:38:8b:76:b1:d8:a2:d8:47:8c:ad:e0:
                    07:c4:a9:1c:9e:06:47:f7:1f:92:1e:ab:4c:bf:4b:
                    d7:12:64:d8:26:99:e9:74:e4:19:f9:00:3c:56:53:
                    26:48:ec:a4:ae:68:f4:b3:22:cb:ee:6a:bc:41:cc:
                    81:66:6a:3a:0d:80:e8:b9:71:68:06:a0:98:4f:ce:
                    31:20:d4:36:7b:a5:85:c0:d0:b6:a2:ad:1b:dd:45:
                    d8:f8:cf:c8:91:bd:32:d4:b4:c0:1f:ec:c8:fa:a8:
                    7e:b1:e0:65:64:f6:85:84:4d:08:65:de:66:cd:57:
                    fe:41:45:2f:d7:a0:f8:bc:70:cd:62:58:aa:f8:c8:
                    42:6b:16:1f:04:2f:f1:01:64:5f:3e:75:11:78:03:
                    44:d3:35:c2:f0:74:b3:12:76:f5:d3:59:fd:4b:1a:
                    24:bc:a6:f4:65:6a:77:e1:27:90:ef:7a:e4:7e:e1:
                    65:45:13:5b:fe:3c:b9:e7:c0:c5:ad:a6:85:d7:7b:
                    56:7c:10:f3:07:ab:62:ba:9b:57:51:00:36:c9:4d:
                    82:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/mQTsvNhfIqLorn4fmR6DRdBqmBY.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.223.0.0/16
                  103.2.28.0/24
                  103.2.30.0/23
                  119.235.224.0/24
                  119.235.232.0/24
                  119.235.235.0-119.235.237.255
                  203.104.128.0-203.104.158.255

    Signature Algorithm: sha256WithRSAEncryption
         72:81:a6:78:04:27:11:a6:6c:57:23:8e:10:03:b6:00:02:30:
         d7:8b:1f:f5:4d:03:fa:b8:b5:93:af:51:06:a4:b5:f5:a3:31:
         1d:88:bf:10:e9:ed:a5:9c:ff:e0:13:b0:92:0b:ba:b0:73:c3:
         e1:c7:13:33:75:31:23:b7:24:d1:c1:de:27:de:18:d1:e5:71:
         2d:79:c3:47:ca:af:f6:26:63:71:54:41:7e:14:be:b2:c6:8e:
         87:3a:c2:90:ed:df:32:c8:1b:5e:1f:25:19:17:f5:33:fd:1e:
         3f:08:1e:70:ef:49:0e:f3:26:3b:75:e8:b3:a1:0e:99:6d:50:
         32:3b:b7:e6:78:05:09:51:ec:7a:92:3e:ad:5b:12:ec:96:b5:
         20:e3:02:9e:62:33:e6:03:a6:2d:13:0c:87:73:a9:65:52:00:
         6a:64:34:d0:60:79:35:17:4f:79:bf:92:81:9f:a8:32:4c:71:
         d7:62:81:99:a1:93:20:ef:9a:80:41:bd:93:1e:6d:2c:c4:86:
         4d:2a:70:a3:dc:da:97:22:9d:74:83:f3:3f:69:69:6a:9b:83:
         03:24:e3:f3:ba:65:1d:ee:f7:fe:5a:1a:ec:72:b1:a3:a8:47:
         83:ff:b5:b5:74:3b:03:89:17:9b:7f:40:00:24:ff:63:e8:03:
         a0:c4:48:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 10:20:59 2024 by rpki-client on console-ams.rpki-client.org