Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/gTEFNi4DNFZMdTos7rDYV2T9Lmg.cer
File:                     gTEFNi4DNFZMdTos7rDYV2T9Lmg.cer (raw, json)
Hash identifier:          LHP86VHgcCpJ1Anlp+tvGNzhp0F36SEHlk+dZHEwpTA=
Subject key identifier:   81:31:05:36:2E:03:34:56:4C:75:3A:2C:EE:B0:D8:57:64:FD:2E:68
Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2
Certificate issuer:       /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2
Certificate serial:       0F3A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/gTEFNi4DNFZMdTos7rDYV2T9Lmg.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Sat 15 Mar 2025 01:38:07 +0000
Certificate not after:    Sun 15 Mar 2026 01:30:03 +0000
Subordinate resources:    IP: 160.16.0.0/16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 20 Apr 2025 22:44:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3898 (0xf3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2
        Validity
            Not Before: Mar 15 01:38:07 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=813105362E0334564C753A2CEEB0D85764FD2E68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:d1:b7:24:99:98:a5:02:ea:fd:5d:a4:f2:70:
                    e3:d5:16:a4:9b:9f:a1:e7:33:44:23:57:0b:35:7a:
                    ab:69:25:f1:d4:38:26:d3:7c:1f:eb:aa:9e:41:d3:
                    d5:44:00:c0:b0:a5:80:c1:c5:cc:19:dc:af:84:71:
                    39:08:a7:a5:25:e4:7f:ef:4f:67:ea:c5:f0:34:88:
                    c6:33:13:2c:3c:a3:15:40:9f:1b:2f:ee:a2:72:d5:
                    9b:fc:5e:14:00:87:e3:0f:f9:ee:43:86:eb:e1:83:
                    f5:32:cf:91:f3:82:95:27:41:fa:2c:4d:c9:56:35:
                    d8:e2:f1:9a:c0:3b:d8:59:89:81:cf:98:82:cb:4b:
                    d5:8e:a2:a0:12:95:37:f8:36:3c:1c:ea:8a:e9:38:
                    b0:e3:bc:64:f5:d3:4f:83:76:e9:56:fe:53:b0:c0:
                    8b:98:72:fb:54:89:47:63:3a:78:bb:1d:84:e1:fa:
                    ea:a1:86:e6:f5:b5:79:c5:5d:4a:aa:74:2c:8f:3b:
                    3b:11:33:7c:10:d5:f9:0a:95:05:08:e4:4a:f3:ad:
                    60:e1:95:dd:7e:11:b7:ce:38:2b:2d:fb:f1:ef:d6:
                    3d:4b:28:5b:f0:a2:fd:cc:16:86:f2:3f:1e:a1:25:
                    f9:23:f8:e1:d4:23:66:25:e7:45:1f:9e:0e:cf:48:
                    3e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:31:05:36:2E:03:34:56:4C:75:3A:2C:EE:B0:D8:57:64:FD:2E:68
            X509v3 Authority Key Identifier:
                keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/gTEFNi4DNFZMdTos7rDYV2T9Lmg.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.16.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         81:1f:27:9d:23:91:3f:35:56:55:21:d7:30:1a:13:bd:b7:53:
         eb:fb:a1:51:c6:18:2a:32:96:fc:0c:ae:e1:29:d9:fe:6e:8c:
         88:b1:4d:5a:33:6a:98:79:d6:2d:f3:02:c0:b3:f6:1b:a9:91:
         64:62:ba:b5:7b:a9:30:da:e2:50:2c:d4:91:d3:25:7a:98:ee:
         fb:e7:dd:16:c7:8f:43:01:98:2f:4b:5e:a9:08:80:15:f4:b5:
         79:dc:1f:14:21:b5:25:5f:2a:cb:59:cf:2c:9a:c8:5a:36:a6:
         6d:61:52:77:02:da:6c:b8:a2:86:cb:4a:27:8d:8c:fe:aa:15:
         c5:c3:b6:86:65:de:13:c5:20:9f:ed:94:6b:c9:29:33:61:93:
         f7:49:d6:29:4d:18:d4:76:d0:a6:1f:b1:a4:70:12:b0:8c:90:
         aa:fd:63:88:de:b4:f1:c5:f8:cd:37:c1:1c:09:3e:b1:c7:e7:
         65:12:6b:18:07:30:c3:de:a3:70:35:4c:e6:36:fe:b0:ff:19:
         0e:a6:7a:f9:f1:c1:8d:4a:78:f5:5a:5d:78:9c:41:1e:bb:0f:
         75:e6:f6:70:b1:6b:fa:f8:3f:25:50:71:95:e7:58:22:59:bf:
         e7:b2:db:1f:e5:05:40:68:ab:85:9f:b8:69:a1:4e:66:bb:5d:
         b2:f3:ae:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 22:35:48 2025 by rpki-client