Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/u6c_64jhyYfVPdLDsttCdUXro3Q.cer
File:                     u6c_64jhyYfVPdLDsttCdUXro3Q.cer (raw, json)
Hash identifier:          8NhsI+FQUtIGDEJ9dFlmtgUZRqsjENCqJ1D7x7YReq4=
Subject key identifier:   BB:A7:3F:EB:88:E1:C9:87:D5:3D:D2:C3:B2:DB:42:75:45:EB:A3:74
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       3E07
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/536/u6c_64jhyYfVPdLDsttCdUXro3Q.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/536/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Fri 15 Nov 2024 01:31:07 +0000
Certificate not after:    Sat 15 Nov 2025 01:30:03 +0000
Subordinate resources:    IP: 103.5.140.0/22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15879 (0x3e07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Nov 15 01:31:07 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=BBA73FEB88E1C987D53DD2C3B2DB427545EBA374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:60:9f:ce:ce:df:29:5c:18:fb:63:88:80:ca:
                    f7:68:d4:b3:c3:62:7c:7f:47:f7:38:b8:e0:ef:b0:
                    26:8a:79:48:7b:d1:d2:6d:8f:c2:03:db:f9:ed:23:
                    e1:da:9b:ba:28:16:bd:0d:37:8f:bf:c9:47:95:1a:
                    45:12:1b:b1:7e:67:a3:77:1c:35:eb:ca:d6:a0:6b:
                    14:e7:04:87:e8:59:65:5c:d0:a4:44:cb:0d:b9:5b:
                    d4:be:03:92:bf:8f:97:0d:2e:e6:dd:0d:73:dd:33:
                    7d:18:eb:06:97:f8:c7:d6:a8:f5:a8:64:ca:85:4c:
                    2f:68:4e:0f:63:a9:fa:bf:49:fa:18:f0:d7:36:03:
                    45:94:a5:30:33:ae:2e:3e:04:10:c7:4c:de:a2:79:
                    4e:c0:76:f4:09:f8:76:f3:24:f7:10:c5:86:08:1f:
                    9e:bb:be:aa:06:57:c3:3c:13:87:83:43:49:70:b3:
                    83:fe:33:62:52:d3:aa:c0:86:2c:0b:6c:0b:ee:07:
                    ad:b9:4a:a2:20:be:0c:be:e0:cb:a5:8b:e7:0f:74:
                    16:93:7d:cd:66:bc:14:57:96:9c:cd:39:19:c7:74:
                    fc:62:70:27:a8:f8:42:c4:43:fc:e1:3b:a3:2b:78:
                    69:82:8a:22:27:c9:06:39:47:a2:ac:5f:84:81:aa:
                    36:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:A7:3F:EB:88:E1:C9:87:D5:3D:D2:C3:B2:DB:42:75:45:EB:A3:74
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/536/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/536/u6c_64jhyYfVPdLDsttCdUXro3Q.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:e4:2e:2f:ab:78:63:1c:51:db:02:34:0d:8b:d4:d1:4e:80:
         66:56:d4:76:8d:96:e4:56:ff:7a:13:aa:1f:08:19:52:6c:d4:
         14:69:ad:83:99:6a:8b:94:ce:7e:a1:4f:da:f5:09:02:6b:ec:
         68:a6:11:ab:a5:e8:c9:5b:76:2c:98:56:15:0b:9a:d4:32:dd:
         55:28:f3:eb:77:97:5d:b8:4a:ad:97:ad:72:8e:d4:53:20:12:
         45:e5:73:62:5d:05:83:63:a8:90:6d:b1:d9:14:0d:89:ef:6f:
         54:c2:12:98:c4:1e:f4:67:8b:cc:ad:6c:fb:e7:1b:c6:0e:a9:
         21:d3:d4:40:2c:86:00:6f:11:70:75:2e:7f:3f:47:93:00:87:
         ff:8f:c5:ef:02:7b:d6:6e:f1:26:af:da:8e:e3:27:cb:92:c2:
         f2:02:1e:c6:93:31:ca:c1:da:41:d6:8f:62:11:1f:10:67:a7:
         9e:40:36:33:f3:11:35:f8:f7:c4:04:81:c3:69:ba:95:d3:b3:
         70:d4:d2:c7:50:c0:48:e4:54:ed:6e:1d:e1:2a:ae:98:f9:7b:
         b4:25:0b:f7:72:62:47:20:0b:a0:56:80:bd:5c:51:85:98:d1:
         dd:74:d0:dd:9e:4f:b3:2c:36:53:10:34:84:b6:24:30:df:94:
         60:2c:35:de
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgICPgcwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC
NTIwREFBQzdEQThGMB4XDTI0MTExNTAxMzEwN1oXDTI1MTExNTAxMzAwM1owMzEx
MC8GA1UEAxMoQkJBNzNGRUI4OEUxQzk4N0Q1M0REMkMzQjJEQjQyNzU0NUVCQTM3
NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALVgn87O3ylcGPtjiIDK
92jUs8NifH9H9zi44O+wJop5SHvR0m2PwgPb+e0j4dqbuigWvQ03j7/JR5UaRRIb
sX5no3ccNevK1qBrFOcEh+hZZVzQpETLDblb1L4Dkr+Plw0u5t0Nc90zfRjrBpf4
x9ao9ahkyoVML2hOD2Op+r9J+hjw1zYDRZSlMDOuLj4EEMdM3qJ5TsB29An4dvMk
9xDFhggfnru+qgZXwzwTh4NDSXCzg/4zYlLTqsCGLAtsC+4HrblKoiC+DL7gy6WL
5w90FpN9zWa8FFeWnM05Gcd0/GJwJ6j4QsRD/OE7oyt4aYKKIifJBjlHoqxfhIGq
NocCAwEAAaOCAoYwggKCMB0GA1UdDgQWBBS7pz/riOHJh9U90sOy20J1ReujdDAf
BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0
b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa
dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j
Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0
NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G
A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB
7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw
L2FwL0E5MUE3MzgxMDAwMC81MzYvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt
cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzUzNi91NmNfNjRq
aHlZZlZQZExEc3R0Q2RVWHJvM1EubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw
a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZwWMMA0GCSqGSIb3DQEBCwUA
A4IBAQA95C4vq3hjHFHbAjQNi9TRToBmVtR2jZbkVv96E6ofCBlSbNQUaa2DmWqL
lM5+oU/a9QkCa+xophGrpejJW3YsmFYVC5rUMt1VKPPrd5dduEqtl61yjtRTIBJF
5XNiXQWDY6iQbbHZFA2J729UwhKYxB70Z4vMrWz75xvGDqkh09RALIYAbxFwdS5/
P0eTAIf/j8XvAnvWbvEmr9qO4yfLksLyAh7GkzHKwdpB1o9iER8QZ6eeQDYz8xE1
+PfEBIHDabqV07Nw1NLHUMBI5FTtbh3hKq6Y+Xu0JQv3cmJHIAugVoC9XFGFmNHd
dNDdnk+zLDZTEDSEtiQw35RgLDXe
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:41:09 2024 by rpki-client on console-ams.rpki-client.org