Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/en0gblETwnKF_aqFNitPb5vY1w0.cer
File:                     en0gblETwnKF_aqFNitPb5vY1w0.cer (raw, json)
Hash identifier:          C/FdRHIJzLLWL/E9F/fDTMV6ZIS17Urcpf1maM/9HdE=
Subject key identifier:   7A:7D:20:6E:51:13:C2:72:85:FD:AA:85:36:2B:4F:6F:9B:D8:D7:0D
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       53CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/208/en0gblETwnKF_aqFNitPb5vY1w0.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/208/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Tue 15 Jul 2025 01:41:54 +0000
Certificate not after:    Wed 15 Jul 2026 01:30:01 +0000
Subordinate resources:    IP: 110.50.88.0/21
                          IP: 202.89.112.0/22
                          IP: 210.191.192.0/19
                          IP: 210.229.160.0/19
                          IP: 211.128.64.0/19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Jul 2025 02:42:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21455 (0x53cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Jul 15 01:41:54 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=7A7D206E5113C27285FDAA85362B4F6F9BD8D70D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:67:fd:2d:a4:57:7b:fe:81:1a:4f:7e:bb:a0:
                    1b:9f:e0:a6:d4:f1:82:08:96:4f:b8:50:0f:ed:00:
                    11:ab:ba:0a:38:32:25:c2:50:26:1c:46:d9:4d:b4:
                    c5:57:7e:1b:bc:f9:2c:62:93:b8:5f:3a:47:59:9b:
                    cd:0b:93:d0:55:f1:ac:52:3e:2d:9d:28:a6:e1:41:
                    ca:2e:d2:7b:6d:9b:32:13:61:75:94:32:29:b2:7b:
                    95:ab:1d:02:ec:2c:27:3e:66:c6:f0:ba:7d:79:89:
                    60:9f:cc:48:d8:7a:3e:fd:5a:d3:0e:24:94:bc:b3:
                    2d:31:2c:c3:8e:e6:8c:70:ea:c9:ed:7b:59:08:b8:
                    35:68:e2:44:b6:98:d7:93:bb:ae:5e:5e:47:ee:6b:
                    f2:ba:40:e3:cf:e3:14:67:2c:34:3e:54:e0:01:4e:
                    f1:16:06:56:d2:1e:8f:aa:56:33:ac:9d:d4:c4:c5:
                    0a:5f:bf:49:3e:d2:0a:8c:4d:b6:d5:b7:07:15:6a:
                    a4:30:38:39:f5:4d:44:76:35:d5:40:8f:85:ec:70:
                    6a:c6:51:16:1b:51:22:8c:18:57:8b:4d:11:39:b9:
                    10:64:95:d0:b5:9e:79:d6:71:8a:47:19:56:d6:55:
                    60:9b:ba:c3:5e:e9:a6:be:1e:78:e0:dd:4a:67:1e:
                    91:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:7D:20:6E:51:13:C2:72:85:FD:AA:85:36:2B:4F:6F:9B:D8:D7:0D
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/208/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/208/en0gblETwnKF_aqFNitPb5vY1w0.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.50.88.0/21
                  202.89.112.0/22
                  210.191.192.0/19
                  210.229.160.0/19
                  211.128.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         00:48:4f:8a:b5:48:62:d3:8a:15:2e:a2:dc:1d:53:e1:30:6e:
         d2:6a:d9:38:a8:a1:7b:3c:95:43:be:2b:55:6d:b4:6c:40:a8:
         1f:04:54:1e:05:2f:d4:dc:85:ec:84:37:83:d2:37:44:cc:f3:
         f7:9f:1b:06:30:6c:3b:97:a0:28:31:03:2c:3a:2b:54:22:57:
         a8:39:44:92:e9:27:c2:3e:d4:cb:04:ba:fb:4e:37:b6:f2:ea:
         f5:60:ad:8d:4b:43:cb:72:84:82:8e:56:c1:bf:da:93:a9:9b:
         90:af:10:5f:18:33:ba:32:de:d6:39:b8:a8:b2:ae:7f:50:17:
         1f:f3:af:28:5a:6e:31:39:de:b3:93:36:a6:4f:ff:2e:0f:10:
         5a:7e:58:a1:a1:97:2c:71:22:84:1e:a3:fb:fe:c1:e7:86:4f:
         59:23:07:59:4e:2d:1f:c3:ef:4a:cd:b3:41:7c:0b:9e:31:41:
         f0:1d:05:a7:e9:a2:6c:2a:3d:75:83:50:f4:ff:28:c2:e8:c6:
         a6:34:75:93:d4:af:79:e9:8e:df:34:35:8b:49:3a:50:15:c0:
         28:86:78:92:e4:ab:be:ab:b1:be:e3:0c:22:21:ae:f3:2d:cf:
         55:b7:db:9e:6d:f7:5d:cb:44:97:fd:ba:7c:aa:5f:76:75:10:
         6e:b1:2f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 04:20:36 2025 by rpki-client