Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/VXp0Z9hYEzbiejxNUiVseTHchjY.cer
File:                     VXp0Z9hYEzbiejxNUiVseTHchjY.cer (raw, json)
Hash identifier:          z2YGWJKgFshZ4WTBmQokQbLhMln/m+y0esgHOzxSwZk=
Subject key identifier:   55:7A:74:67:D8:58:13:36:E2:7A:3C:4D:52:25:6C:79:31:DC:86:36
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       46E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4664/VXp0Z9hYEzbiejxNUiVseTHchjY.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4664/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Sat 15 Mar 2025 01:32:02 +0000
Certificate not after:    Sun 15 Mar 2026 01:30:03 +0000
Subordinate resources:    IP: 218.100.45.0/24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 05:11:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18144 (0x46e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000
        Validity
            Not Before: Mar 15 01:32:02 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=557A7467D8581336E27A3C4D52256C7931DC8636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:91:66:f9:9f:ec:80:a9:a1:24:ed:d1:28:21:
                    f5:4b:21:c7:2e:10:e6:86:d1:c9:38:30:47:88:b7:
                    91:f4:38:46:6f:b8:9d:ee:65:2b:33:45:49:fc:38:
                    ac:d4:bf:55:4c:74:5c:32:6d:e4:91:18:bd:5a:cb:
                    e4:f9:8f:9f:ec:65:e1:0c:51:5b:4d:77:d6:28:72:
                    ac:17:c4:6d:35:67:cc:a4:36:5c:71:25:b0:3e:09:
                    8a:3c:b9:d6:d3:6e:e2:2b:1a:ee:b8:1b:25:a3:b8:
                    b6:e8:5e:58:83:53:09:f9:aa:70:3c:af:17:e6:3f:
                    25:fc:95:cc:41:60:f9:55:d7:56:6a:0e:91:3a:3b:
                    9c:79:2d:28:d0:a8:52:31:19:d5:7c:2a:69:44:dd:
                    3b:86:ef:1f:51:09:fe:0d:30:ce:ac:33:20:e5:84:
                    74:f1:b9:3f:70:63:11:c6:d6:b9:02:d2:4d:21:7a:
                    3a:73:d6:d0:8a:5c:ea:9c:39:c8:54:8e:7a:9d:79:
                    d1:c9:91:e7:b9:84:e0:e1:75:8a:95:1b:53:39:23:
                    95:85:65:6c:64:99:18:a4:aa:a3:82:33:ae:c6:7e:
                    80:c6:41:56:17:c6:86:35:88:fd:e3:49:a2:2c:ca:
                    f7:d8:1e:5b:d0:71:66:03:f0:ba:66:d6:77:49:d3:
                    b2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:7A:74:67:D8:58:13:36:E2:7A:3C:4D:52:25:6C:79:31:DC:86:36
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4664/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4664/VXp0Z9hYEzbiejxNUiVseTHchjY.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.100.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:21:87:5e:80:b4:80:15:f9:77:4b:4d:d2:a4:78:d0:84:82:
         cf:35:72:58:e1:f9:0f:d8:1e:a0:af:dc:5d:d6:5d:eb:46:19:
         15:a6:b8:9d:33:58:d1:8a:b7:8d:13:79:27:89:88:0e:c9:a4:
         25:e3:9a:cd:e0:36:d6:18:03:ee:c1:5d:8f:20:6c:db:14:7f:
         a2:10:7d:91:26:4f:4f:3e:47:7c:9a:e3:f3:14:42:b5:d3:9f:
         8b:51:40:15:45:75:1f:d8:43:0f:00:3c:da:dd:85:42:b5:53:
         ff:d7:a2:58:fd:07:32:dc:07:cb:c9:06:63:db:27:90:be:14:
         76:6a:b9:53:df:8f:19:2d:8f:fd:4a:5f:bb:5a:8b:80:24:49:
         e4:1d:b7:e6:65:38:f5:5e:83:01:c3:ea:ca:59:e6:f6:f3:41:
         fd:c8:cc:1a:6f:6b:26:a8:dc:09:0a:a5:2e:18:2f:3e:4c:4a:
         a0:bd:8a:e4:d2:6d:a4:a7:ca:cc:e9:ae:09:af:16:43:56:08:
         b1:7c:f1:e5:67:e6:83:fe:61:28:28:9d:ed:28:8a:fc:26:7e:
         b3:db:ea:ea:0e:d8:25:49:21:b7:b5:77:39:ee:68:d4:49:14:
         3c:e6:12:1d:7a:c7:e2:6a:5f:74:2d:7e:da:20:db:14:a5:69:
         a7:a8:64:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:24:32 2025 by rpki-client