Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/ARpVb_xLo565Clkko2r9o36YGbY.cer
File:                     ARpVb_xLo565Clkko2r9o36YGbY.cer (raw, json)
Hash identifier:          cPdov3dPOsv9fsSteZjeiKmkLDyzijGHFu9s9NQR9YQ=
Subject key identifier:   01:1A:55:6F:FC:4B:A3:9E:B9:0A:59:24:A3:6A:FD:A3:7E:98:19:B6
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       4712
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1453/ARpVb_xLo565Clkko2r9o36YGbY.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1453/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Sat 15 Mar 2025 01:32:54 +0000
Certificate not after:    Sun 15 Mar 2026 01:30:03 +0000
Subordinate resources:    IP: 202.255.100.0/22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 05:11:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18194 (0x4712)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000
        Validity
            Not Before: Mar 15 01:32:54 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=011A556FFC4BA39EB90A5924A36AFDA37E9819B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c3:be:6c:9e:58:78:e2:09:bc:14:c5:01:53:
                    9f:ae:15:94:e2:9e:d5:b8:4f:e4:50:30:e5:3a:c2:
                    61:ae:32:7f:3f:ba:7c:f6:6d:b4:30:9b:55:33:c0:
                    f8:8e:df:5a:85:46:09:48:ad:c7:1f:26:bd:c5:15:
                    dc:4d:5e:53:aa:f0:9f:fa:32:e5:2e:14:de:5d:db:
                    55:4b:12:8e:ed:6a:fc:7a:3c:39:9b:8f:d9:9d:1e:
                    e9:b3:57:3f:0c:ea:9f:b8:5a:05:69:94:c5:d4:97:
                    84:7a:ab:b7:d3:ea:01:29:11:9e:5c:40:df:f2:ad:
                    eb:35:91:a0:2d:e2:00:e4:c4:92:ac:52:85:ae:e7:
                    d1:33:38:35:4f:be:0d:83:19:62:a7:c2:ee:54:83:
                    d0:86:da:58:6e:93:91:2d:a8:94:cf:f2:48:36:f8:
                    c2:76:57:12:4f:df:46:47:9c:8e:2b:c5:88:3e:e9:
                    1c:7e:ad:1f:5a:16:16:8f:a8:98:73:9b:c5:5b:7b:
                    6c:fe:1c:31:5f:b7:6e:14:23:14:32:7b:bf:9a:64:
                    dd:16:dc:a0:ef:58:69:1b:75:24:eb:07:41:94:54:
                    ce:37:cf:c2:78:06:49:ec:47:a8:85:f5:2c:3d:e7:
                    a1:c7:8e:71:2f:15:f3:1e:9a:9b:47:4b:e1:9b:87:
                    33:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:1A:55:6F:FC:4B:A3:9E:B9:0A:59:24:A3:6A:FD:A3:7E:98:19:B6
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1453/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1453/ARpVb_xLo565Clkko2r9o36YGbY.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.255.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:3f:8f:51:65:13:27:78:85:a2:51:f2:73:39:4c:fc:64:91:
         90:43:ac:82:ca:5c:7c:51:e1:55:14:c6:94:8e:cf:21:2b:db:
         49:56:da:ab:1b:a1:e7:80:d6:76:24:c9:4c:37:7c:6d:90:58:
         97:3c:cf:25:d1:ff:af:2c:e5:67:e1:df:c4:b2:1e:7e:fd:4a:
         b3:db:d0:b7:72:cb:31:b0:e2:c3:8b:be:e8:50:3f:ba:8c:93:
         e2:d7:76:2f:5d:95:75:f4:5b:f5:8e:1d:dc:7d:1c:d5:c6:ac:
         bd:7f:65:4e:e2:a9:1f:83:b0:61:71:ca:3d:d2:40:5a:91:ae:
         c3:87:71:b8:47:73:e1:a5:48:35:34:d5:fc:4a:25:44:2a:48:
         f7:43:d0:66:d1:9c:64:48:f5:ed:8f:99:64:8a:7b:57:0b:69:
         dc:40:46:3e:66:2b:c3:7b:da:53:b9:2d:3d:66:2e:62:02:56:
         1a:d3:4a:f4:73:dd:be:af:04:e1:03:30:ea:8f:75:4f:ee:81:
         40:3e:e2:fa:26:b7:39:6f:90:70:9c:db:4a:5c:ef:c0:d7:ab:
         a2:ad:c4:4b:e8:93:3d:5e:36:02:c6:6c:30:a0:90:c7:bc:16:
         10:4b:95:94:1d:ae:e5:46:f7:77:12:eb:18:18:71:91:f3:0d:
         1e:96:3a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:22:46 2025 by rpki-client