Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/txaEo-Vf6S0LJq--GPU2pAkYSCQ.cer
File:                     txaEo-Vf6S0LJq--GPU2pAkYSCQ.cer (raw, json)
Hash identifier:          us4f/TAAJr3wGtGiZ3BnoZS3LU2ZHpTi30o+HzuQFPk=
Subject key identifier:   B7:16:84:A3:E5:5F:E9:2D:0B:26:AF:BE:18:F5:36:A4:09:18:48:24
Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2
Certificate issuer:       /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2
Certificate serial:       0F9B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/523/txaEo-Vf6S0LJq--GPU2pAkYSCQ.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/523/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Tue 15 Apr 2025 01:38:12 +0000
Certificate not after:    Wed 15 Apr 2026 01:30:03 +0000
Subordinate resources:    IP: 76.77.48.0/20
                          IP: 157.112.192.0/18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3995 (0xf9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2
        Validity
            Not Before: Apr 15 01:38:12 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=B71684A3E55FE92D0B26AFBE18F536A409184824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:91:c3:6d:6a:91:2c:06:6c:41:3b:31:37:a9:
                    08:ff:cb:00:64:80:e8:a8:f3:12:f8:06:5d:27:24:
                    fe:e8:e4:4d:37:1a:e0:2f:ba:e9:f2:6f:54:3f:df:
                    20:14:82:b3:d6:9f:17:4b:0d:84:9e:55:d5:7d:3c:
                    6d:44:03:a5:32:0e:43:98:d6:6b:65:b9:90:3a:3f:
                    d7:d5:c5:1e:54:2c:f6:f4:ad:c6:2e:39:78:3c:66:
                    d8:97:82:7d:7a:00:dc:c0:5b:36:71:b2:8e:e3:da:
                    bd:73:de:db:d0:76:30:ed:a5:d8:6f:ca:99:29:b2:
                    c6:bb:d1:f6:d2:1a:ff:4d:2b:cf:e3:ad:d1:13:76:
                    8a:59:ea:cf:13:4b:41:29:6e:f4:de:87:9c:b9:cf:
                    6e:a8:c5:3f:16:6e:25:37:5a:04:ad:de:25:50:ba:
                    bc:dc:b3:46:9a:6b:53:bb:cc:2a:99:4b:db:a0:ad:
                    04:8c:57:37:85:89:37:82:0c:4c:f4:46:47:90:0c:
                    95:54:ba:6d:b9:a5:b3:12:8b:64:1e:7f:3d:05:45:
                    a0:28:31:fe:61:91:e0:16:97:d1:90:c9:d5:f8:c0:
                    44:03:b0:55:16:2d:27:a7:d2:75:2f:de:20:c0:cb:
                    ad:3c:0b:7c:61:02:aa:ab:35:a3:dd:8f:b5:58:28:
                    db:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:16:84:A3:E5:5F:E9:2D:0B:26:AF:BE:18:F5:36:A4:09:18:48:24
            X509v3 Authority Key Identifier:
                keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/523/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/523/txaEo-Vf6S0LJq--GPU2pAkYSCQ.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.77.48.0/20
                  157.112.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         36:1a:5b:b5:f7:44:f6:ee:18:2f:00:d0:51:ef:1a:14:68:fa:
         f7:ec:b2:82:9e:69:22:74:b7:a8:b5:05:48:5d:04:80:ac:b0:
         28:f0:f1:ba:d7:46:a2:da:9e:2f:4f:fd:97:16:07:06:49:36:
         06:8b:5b:ec:57:03:4b:25:92:d8:9a:f9:98:32:b3:e1:3c:61:
         ce:09:cf:07:d6:77:a4:71:00:e0:6b:93:53:96:0b:26:92:78:
         d8:20:74:5f:da:d1:32:ef:71:3b:f0:49:37:9a:9f:b9:4e:b3:
         57:0b:fa:fe:50:dd:4a:c7:04:0e:23:24:64:07:59:ea:32:4e:
         c6:87:c5:fb:d2:fc:44:31:9e:c1:6b:16:00:6f:a1:ad:05:c3:
         d5:82:df:ef:1b:64:11:88:15:14:c6:fd:8d:97:d8:0c:cc:48:
         ee:42:2f:3d:94:39:94:a0:50:63:e6:1d:0d:8c:8c:9c:ae:a9:
         60:09:ae:12:26:14:84:77:8c:1b:af:2d:38:5e:08:24:5d:80:
         65:d3:9f:ac:a5:f7:50:d2:6b:b9:61:b2:8b:f9:d6:96:46:b3:
         e5:78:4f:1e:01:ec:2f:da:5c:bd:c8:60:ec:0c:9d:30:3a:be:
         62:de:80:9f:9a:7d:ff:b6:5f:9b:36:b1:29:89:6b:f4:e7:73:
         f1:1e:15:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:53:06 2025 by rpki-client on console.sobornost.net