Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer
File:                     mQTsvNhfIqLorn4fmR6DRdBqmBY.cer (raw, json)
Hash identifier:          lREnaT4FPsKl9jbChulEmMl5T17LHnuacI7U01rQkco=
Subject key identifier:   99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       2F69
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/mQTsvNhfIqLorn4fmR6DRdBqmBY.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Wed 15 May 2024 01:32:31 +0000
Certificate not after:    Thu 15 May 2025 01:30:03 +0000
Subordinate resources:    IP: 43.223.0.0/16
                          IP: 103.2.28.0/24
                          IP: 103.2.30.0/23
                          IP: 119.235.224.0/24
                          IP: 119.235.232.0/24
                          IP: 119.235.235.0 -- 119.235.237.255
                          IP: 203.104.128.0 -- 203.104.158.255

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 00:07:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12137 (0x2f69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: May 15 01:32:31 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b1:23:dd:37:fd:93:24:74:d4:86:13:d3:80:
                    95:ea:91:eb:73:8e:ec:a4:a8:85:4c:95:8f:37:8a:
                    89:45:40:7f:55:49:23:ac:35:ed:2a:54:fd:de:08:
                    ae:22:0f:46:38:8b:76:b1:d8:a2:d8:47:8c:ad:e0:
                    07:c4:a9:1c:9e:06:47:f7:1f:92:1e:ab:4c:bf:4b:
                    d7:12:64:d8:26:99:e9:74:e4:19:f9:00:3c:56:53:
                    26:48:ec:a4:ae:68:f4:b3:22:cb:ee:6a:bc:41:cc:
                    81:66:6a:3a:0d:80:e8:b9:71:68:06:a0:98:4f:ce:
                    31:20:d4:36:7b:a5:85:c0:d0:b6:a2:ad:1b:dd:45:
                    d8:f8:cf:c8:91:bd:32:d4:b4:c0:1f:ec:c8:fa:a8:
                    7e:b1:e0:65:64:f6:85:84:4d:08:65:de:66:cd:57:
                    fe:41:45:2f:d7:a0:f8:bc:70:cd:62:58:aa:f8:c8:
                    42:6b:16:1f:04:2f:f1:01:64:5f:3e:75:11:78:03:
                    44:d3:35:c2:f0:74:b3:12:76:f5:d3:59:fd:4b:1a:
                    24:bc:a6:f4:65:6a:77:e1:27:90:ef:7a:e4:7e:e1:
                    65:45:13:5b:fe:3c:b9:e7:c0:c5:ad:a6:85:d7:7b:
                    56:7c:10:f3:07:ab:62:ba:9b:57:51:00:36:c9:4d:
                    82:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/mQTsvNhfIqLorn4fmR6DRdBqmBY.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.223.0.0/16
                  103.2.28.0/24
                  103.2.30.0/23
                  119.235.224.0/24
                  119.235.232.0/24
                  119.235.235.0-119.235.237.255
                  203.104.128.0-203.104.158.255

    Signature Algorithm: sha256WithRSAEncryption
         70:70:c6:d5:1e:b4:1d:e4:7d:c0:86:e2:d9:e0:c0:83:51:d4:
         1d:cc:fc:0f:07:70:56:f6:3d:26:85:b7:88:73:1d:d1:23:b9:
         b9:51:7d:8e:39:51:5d:e2:3b:f6:6e:34:b1:ae:96:a7:47:7f:
         a8:7a:c4:8a:04:2e:e6:6e:47:06:46:82:dd:b6:34:cd:36:a3:
         5a:36:75:d2:47:86:a9:c0:10:e1:b0:0c:cf:a0:bf:f3:b6:01:
         49:58:40:57:42:f1:da:10:a0:ba:07:38:bf:2c:e5:5b:29:76:
         94:4e:09:f0:46:fc:2b:c8:99:0a:85:ab:30:9b:a7:a5:53:70:
         b7:e5:5e:bd:d3:ff:b3:0a:c8:55:64:da:5b:8b:b6:89:9b:85:
         ad:af:14:90:e4:05:43:5b:22:e7:52:2d:96:e5:aa:d7:09:92:
         94:97:91:d5:41:bf:b5:9b:74:28:0b:d2:f5:be:06:2c:70:23:
         cc:bf:57:bd:94:1d:e8:12:ba:9a:ae:26:a6:54:f5:ab:0c:c5:
         ea:a3:4e:c7:be:a6:f7:2e:e3:c7:9f:9d:b6:df:94:96:5a:66:
         2a:36:46:84:e0:0c:e8:ff:a4:2c:9b:15:b1:eb:0a:60:32:8d:
         28:3e:45:1c:e4:f3:ff:23:b1:e9:0e:24:31:86:f0:91:21:7b:
         66:04:c6:5d
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgICL2kwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC
NTIwREFBQzdEQThGMB4XDTI0MDUxNTAxMzIzMVoXDTI1MDUxNTAxMzAwM1owMzEx
MC8GA1UEAxMoOTkwNEVDQkNEODVGMjJBMkU4QUU3RTFGOTkxRTgzNDVEMDZBOTgx
NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMmxI903/ZMkdNSGE9OA
leqR63OO7KSohUyVjzeKiUVAf1VJI6w17SpU/d4IriIPRjiLdrHYothHjK3gB8Sp
HJ4GR/cfkh6rTL9L1xJk2CaZ6XTkGfkAPFZTJkjspK5o9LMiy+5qvEHMgWZqOg2A
6LlxaAagmE/OMSDUNnulhcDQtqKtG91F2PjPyJG9MtS0wB/syPqofrHgZWT2hYRN
CGXeZs1X/kFFL9eg+LxwzWJYqvjIQmsWHwQv8QFkXz51EXgDRNM1wvB0sxJ29dNZ
/UsaJLym9GVqd+EnkO965H7hZUUTW/48uefAxa2mhdd7VnwQ8werYrqbV1EANslN
gscCAwEAAaOCArkwggK1MB0GA1UdDgQWBBSZBOy82F8iouiufh+ZHoNF0GqYFjAf
BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0
b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa
dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j
Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0
NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G
A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB
7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw
L2FwL0E5MUE3MzgxMDAwMC85NTgvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt
cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzk1OC9tUVRzdk5o
ZklxTG9ybjRmbVI2RFJkQnFtQlkubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw
a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s
MFIGCCsGAQUFBwEHAQH/BEMwQTA/BAIAATA5AwMAK98DBABnAhwDBAFnAh4DBAB3
6+ADBAB36+gwDAMEAHfr6wMEAXfr7DAMAwQHy2iAAwQAy2ieMA0GCSqGSIb3DQEB
CwUAA4IBAQBwcMbVHrQd5H3AhuLZ4MCDUdQdzPwPB3BW9j0mhbeIcx3RI7m5UX2O
OVFd4jv2bjSxrpanR3+oesSKBC7mbkcGRoLdtjTNNqNaNnXSR4apwBDhsAzPoL/z
tgFJWEBXQvHaEKC6Bzi/LOVbKXaUTgnwRvwryJkKhaswm6elU3C35V690/+zCshV
ZNpbi7aJm4WtrxSQ5AVDWyLnUi2W5arXCZKUl5HVQb+1m3QoC9L1vgYscCPMv1e9
lB3oErqariamVPWrDMXqo07Hvqb3LuPHn52235SWWmYqNkaE4Azo/6QsmxWx6wpg
Mo0oPkUc5PP/I7HpDiQxhvCRIXtmBMZd
-----END CERTIFICATE-----
Generated at Fri May 17 01:01:20 2024 by rpki-client on console-ams.rpki-client.org