Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/n_1hCP46yEH5IOgIwaGkN0qBIO0.cer
File:                     n_1hCP46yEH5IOgIwaGkN0qBIO0.cer (raw, json)
Hash identifier:          vhA1+ihv5aiaRJpGSlXVVj7IfrgpRfkS5kHtdXX/Veg=
Subject key identifier:   9F:FD:61:08:FE:3A:C8:41:F9:20:E8:08:C1:A1:A4:37:4A:81:20:ED
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       471B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30057/n_1hCP46yEH5IOgIwaGkN0qBIO0.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30057/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Sat 15 Mar 2025 01:33:03 +0000
Certificate not after:    Sun 15 Mar 2026 01:30:03 +0000
Subordinate resources:    IP: 2001:f60::/27
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 05:11:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18203 (0x471b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000
        Validity
            Not Before: Mar 15 01:33:03 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=9FFD6108FE3AC841F920E808C1A1A4374A8120ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c4:c9:8e:30:17:fb:e2:1c:68:94:ff:ca:85:
                    86:8a:9e:e8:e5:36:1b:23:42:d0:a6:2d:83:14:d5:
                    5a:66:3d:04:2b:4a:5c:ee:92:8c:75:33:be:b7:e0:
                    24:40:af:aa:45:1f:ab:a5:d6:18:a5:e3:e9:01:51:
                    02:43:ea:9f:08:7b:f9:03:9c:f5:28:51:a9:57:da:
                    39:85:3c:8c:e6:78:3e:fd:7a:dd:53:f3:58:18:67:
                    75:04:f5:4f:bd:a1:8d:4d:36:9c:5f:88:f6:f8:b9:
                    39:3a:84:27:65:74:f2:be:df:5a:94:5d:71:40:5f:
                    1c:cd:b5:06:8e:5e:fa:ad:f2:ac:e6:da:2f:f8:ab:
                    de:7c:17:78:b7:87:b7:2e:c4:dd:4a:d3:32:17:b1:
                    d9:29:46:ae:ae:b4:25:09:da:2a:f1:93:30:ca:93:
                    03:c1:6f:13:3b:36:1c:b8:a9:7d:b0:40:49:5e:0d:
                    21:a6:4b:09:31:fc:f6:11:9e:0d:09:71:9c:c0:3b:
                    f2:24:83:70:1a:55:c0:4d:b2:41:db:f6:f5:4e:ac:
                    fb:d5:63:3a:e0:ad:62:77:77:03:34:52:7f:be:6f:
                    a7:69:14:79:05:12:8a:09:bf:9e:29:e5:44:97:28:
                    e0:4f:8d:56:70:24:07:e8:91:01:8c:bf:6c:47:17:
                    e3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:FD:61:08:FE:3A:C8:41:F9:20:E8:08:C1:A1:A4:37:4A:81:20:ED
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30057/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30057/n_1hCP46yEH5IOgIwaGkN0qBIO0.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:f60::/27

    Signature Algorithm: sha256WithRSAEncryption
         0e:26:10:03:bf:97:f9:60:4b:49:9f:31:15:c3:17:40:da:1d:
         02:36:db:c4:14:0d:c0:e7:15:6f:4c:fb:b6:6a:52:86:ef:f9:
         5a:b5:9d:dd:f3:33:e5:7e:c5:9a:5c:6e:4b:02:43:d2:74:0f:
         0a:e4:bd:11:77:8d:bd:c4:1a:ce:29:ad:84:d3:01:f2:07:06:
         38:ba:a3:8c:4e:2e:fe:09:79:4f:bc:94:b0:29:a6:b9:80:72:
         9e:5e:93:17:22:1b:f5:57:ad:7a:92:51:83:f7:d6:9c:98:14:
         b7:58:98:fb:37:58:5f:c1:37:a8:8a:d8:19:34:43:a2:51:3f:
         f5:02:85:d4:91:c6:57:01:64:6d:a8:9c:20:8f:75:09:e5:0f:
         71:27:4a:8c:5f:ed:40:b2:fc:e7:f2:02:53:26:73:22:33:3c:
         0f:e7:0c:d9:dd:bb:df:df:fd:2d:b7:a5:d9:9d:e8:af:76:97:
         67:74:19:9a:c5:1c:d8:b8:97:8e:55:cb:6a:e2:65:8a:b1:70:
         c1:59:5e:e0:67:02:2a:89:16:fb:1e:27:17:c7:49:a9:98:8b:
         a4:3a:be:37:9c:fa:5f:45:d8:3c:f1:8a:d6:d1:73:6b:43:31:
         af:7e:7e:a1:d7:8f:50:3b:48:ae:b9:b4:62:1a:f0:da:2b:e8:
         06:a0:d1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:19:29 2025 by rpki-client