Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer
File:                     qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer (raw, json)
Hash identifier:          3nOKSP4M7+Q1CgxRoZUOtxjSKcqs17RvnYBdtnP/3Tg=
Subject key identifier:   A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       3EAC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Fri 15 Nov 2024 01:34:28 +0000
Certificate not after:    Sat 15 Nov 2025 01:30:03 +0000
Subordinate resources:    IP: 61.122.16.0/22
                          IP: 103.210.108.0/22
                          IP: 133.112.0.0/16
                          IP: 150.41.0.0/16
                          IP: 202.1.208.0/20
                          IP: 202.13.62.0 -- 202.13.79.255
                          IP: 202.210.56.0/22
                          IP: 202.243.188.0/22
                          IP: 203.178.8.0/24
                          IP: 203.178.17.0/24
                          IP: 203.179.64.0/20
                          IP: 210.134.208.0/20
                          IP: 211.1.0.0/19
                          IP: 211.120.240.0/21
                          IP: 218.231.16.0/20
                          IP: 219.101.112.0/20
                          IP: 220.213.240.0/20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16044 (0x3eac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Nov 15 01:34:28 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=A935D5AD33DC630C4611987140F5E468B7081D11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fc:d5:8d:5f:ee:b9:c8:c1:73:da:a3:53:aa:
                    ec:75:d4:7b:f8:71:36:3e:48:e3:19:ed:3e:8a:e3:
                    2c:c7:62:08:2d:03:dc:91:89:ce:9e:8e:89:84:13:
                    d0:e0:6d:88:53:bd:35:3a:8b:16:5a:5e:80:c9:d1:
                    fd:76:23:f6:a0:7c:d2:a9:6b:12:29:c7:0d:b2:f7:
                    6b:80:56:41:fb:7a:52:63:e2:ba:a8:0a:0e:b5:60:
                    1c:31:7b:da:66:29:03:89:09:66:78:e0:38:b6:61:
                    dd:b5:cd:a9:28:7b:c2:76:9e:2b:9a:55:0f:cd:db:
                    82:0f:c0:2f:d1:e5:0d:4d:e7:23:bd:f2:11:50:cb:
                    bb:3c:23:d6:7a:91:e3:38:e4:21:3f:ec:e7:76:ac:
                    f4:b8:2e:0f:7b:5c:1e:63:7d:1b:ce:1e:95:49:6a:
                    31:2f:eb:7e:7f:6b:72:7a:e8:da:b5:b6:52:54:07:
                    69:ad:89:f4:b9:8a:67:9a:a1:f2:68:bd:74:84:3d:
                    d5:5f:13:21:32:12:dc:cd:6b:3a:c4:cb:6d:4c:d8:
                    e8:2f:71:dd:b6:01:04:9c:9f:53:e3:4a:af:b4:61:
                    e5:93:ee:4e:91:b3:8b:6b:43:5a:f0:b1:bf:fd:b3:
                    6f:b1:79:b2:ac:2c:b5:63:be:0c:16:13:de:bb:80:
                    6f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.122.16.0/22
                  103.210.108.0/22
                  133.112.0.0/16
                  150.41.0.0/16
                  202.1.208.0/20
                  202.13.62.0-202.13.79.255
                  202.210.56.0/22
                  202.243.188.0/22
                  203.178.8.0/24
                  203.178.17.0/24
                  203.179.64.0/20
                  210.134.208.0/20
                  211.1.0.0/19
                  211.120.240.0/21
                  218.231.16.0/20
                  219.101.112.0/20
                  220.213.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6f:20:07:94:32:04:52:a0:81:a8:a3:17:da:75:e9:5b:a5:24:
         f7:ab:dc:ed:fd:cc:f8:cb:86:bb:0c:d9:b9:b9:23:78:c8:db:
         dd:4d:39:c9:04:bf:25:cb:15:eb:26:40:15:8b:67:73:27:99:
         57:b2:98:42:49:f8:b0:e5:76:af:11:4a:4d:7f:c2:b9:d6:57:
         65:c4:05:41:f5:6e:7d:70:0a:9a:46:a4:4e:b4:ee:6f:d7:9f:
         5d:c4:4b:ca:6a:de:0e:1a:75:68:4f:7b:7b:70:1f:fc:b5:96:
         19:3e:c6:1a:aa:43:98:14:31:5d:46:d9:4c:8b:bf:da:a7:4c:
         82:65:e7:cf:3a:e6:c1:34:a5:86:da:a7:e3:8d:97:9f:f3:af:
         fe:6c:d3:7f:e3:c1:bb:b0:39:0f:08:e4:ec:d8:9d:ec:b3:58:
         97:4e:e0:2c:fe:2a:21:2c:53:d9:24:47:35:8d:39:01:3c:f8:
         e6:d5:7a:6c:44:84:d0:50:c3:d9:7e:53:41:8f:f7:9a:71:d6:
         34:1b:47:60:bf:be:cf:e9:bf:80:9f:68:8f:15:ae:f4:96:02:
         f1:50:82:99:7b:51:21:c6:6f:df:6f:c4:9e:03:16:9e:97:a5:
         ee:c7:10:b9:a0:37:7d:0f:2f:37:3c:64:f5:4c:7e:1a:9d:cd:
         c6:57:c4:d8
-----BEGIN CERTIFICATE-----
MIIF6zCCBNOgAwIBAgICPqwwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC
NTIwREFBQzdEQThGMB4XDTI0MTExNTAxMzQyOFoXDTI1MTExNTAxMzAwM1owMzEx
MC8GA1UEAxMoQTkzNUQ1QUQzM0RDNjMwQzQ2MTE5ODcxNDBGNUU0NjhCNzA4MUQx
MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMr81Y1f7rnIwXPao1Oq
7HXUe/hxNj5I4xntPorjLMdiCC0D3JGJzp6OiYQT0OBtiFO9NTqLFlpegMnR/XYj
9qB80qlrEinHDbL3a4BWQft6UmPiuqgKDrVgHDF72mYpA4kJZnjgOLZh3bXNqSh7
wnaeK5pVD83bgg/AL9HlDU3nI73yEVDLuzwj1nqR4zjkIT/s53as9LguD3tcHmN9
G84elUlqMS/rfn9rcnro2rW2UlQHaa2J9LmKZ5qh8mi9dIQ91V8TITIS3M1rOsTL
bUzY6C9x3bYBBJyfU+NKr7Rh5ZPuTpGzi2tDWvCxv/2zb7F5sqwstWO+DBYT3ruA
b9cCAwEAAaOCAvAwggLsMB0GA1UdDgQWBBSpNdWtM9xjDEYRmHFA9eRotwgdETAf
BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0
b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa
dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j
Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0
NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G
A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAQYIKwYBBQUHAQsEgfQw
gfEwQwYIKwYBBQUHMAWGN3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9hcC9BOTFBNzM4MTAwMDAvOTk5Ny8wYgYIKwYBBQUHMAqGVnJzeW5jOi8vcnBr
aS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvOTk5Ny9xVFhW
clRQY1l3eEdFWmh4UVBYa2FMY0lIUkUubWZ0MEYGCCsGAQUFBzANhjpodHRwczov
L3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24u
eG1sMIGFBggrBgEFBQcBBwEB/wR2MHQwcgQCAAEwbAMEAj16EAMEAmfSbAMDAIVw
AwMAlikDBATKAdAwDAMEAcoNPgMEBMoNQAMEAsrSOAMEAsrzvAMEAMuyCAMEAMuy
EQMEBMuzQAMEBNKG0AMEBdMBAAMEA9N48AMEBNrnEAMEBNtlcAMEBNzV8DANBgkq
hkiG9w0BAQsFAAOCAQEAbyAHlDIEUqCBqKMX2nXpW6Uk96vc7f3M+MuGuwzZubkj
eMjb3U05yQS/JcsV6yZAFYtncyeZV7KYQkn4sOV2rxFKTX/CudZXZcQFQfVufXAK
mkakTrTub9efXcRLymreDhp1aE97e3Af/LWWGT7GGqpDmBQxXUbZTIu/2qdMgmXn
zzrmwTSlhtqn442Xn/Ov/mzTf+PBu7A5Dwjk7Nid7LNYl07gLP4qISxT2SRHNY05
ATz45tV6bESE0FDD2X5TQY/3mnHWNBtHYL++z+m/gJ9ojxWu9JYC8VCCmXtRIcZv
32/EngMWnpel7scQuaA3fQ8vNzxk9Ux+Gp3NxlfE2A==
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:37 2024 by rpki-client on console-fra.rpki-client.org