Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/r9gkd6CRsXzaYcVWO8KSDNzXqqU.cer
File:                     r9gkd6CRsXzaYcVWO8KSDNzXqqU.cer (raw, json)
Hash identifier:          Fgi3KafRsAZjrjmhCyZFubHNKSzeCagUSWQ4edvJciA=
Subject key identifier:   AF:D8:24:77:A0:91:B1:7C:DA:61:C5:56:3B:C2:92:0C:DC:D7:AA:A5
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       5415
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/r9gkd6CRsXzaYcVWO8KSDNzXqqU.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Tue 15 Jul 2025 01:43:48 +0000
Certificate not after:    Wed 15 Jul 2026 01:30:01 +0000
Subordinate resources:    IP: 103.144.122.0/23
                          IP: 133.32.192.0/21
                          IP: 133.226.176.0/21
                          IP: 202.233.72.0/22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 01 Aug 2025 20:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21525 (0x5415)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Jul 15 01:43:48 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=AFD82477A091B17CDA61C5563BC2920CDCD7AAA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e0:28:97:f3:a5:31:74:98:62:e4:0d:0a:0f:
                    27:80:fc:f7:84:ec:3a:61:41:d3:55:cc:3a:1a:b2:
                    2e:6d:3f:c7:39:f1:57:83:62:fc:e6:ab:4c:98:c9:
                    55:0d:f1:5a:1b:22:1d:04:27:5e:30:aa:85:68:54:
                    d7:b3:14:3e:75:ec:41:f9:f0:d7:b0:ec:fd:84:97:
                    5d:82:4c:83:7e:ce:80:da:d1:58:6f:e0:86:73:73:
                    a1:44:ba:63:dd:e3:04:d9:85:2b:8d:42:96:d7:00:
                    d0:6f:e4:c3:8b:31:f9:f5:ba:5f:ea:88:85:52:c5:
                    cf:3d:82:1e:f8:a8:06:36:90:d7:84:86:89:d5:a2:
                    bd:36:10:c9:94:74:bf:c0:77:68:e9:51:b4:52:ab:
                    c0:cb:bb:24:76:f1:f3:cd:2d:0b:ad:46:71:8a:2d:
                    a7:cd:19:58:f4:00:a3:ea:89:f7:46:cc:6f:b8:47:
                    64:56:1d:9c:34:74:c0:d3:15:8c:6e:43:4b:49:92:
                    3c:93:7f:35:5c:82:cc:56:6d:9c:8c:6b:71:b6:83:
                    5a:fb:e7:86:c4:85:a2:0c:2b:3a:c5:da:0d:5f:b3:
                    72:6e:cf:53:86:6b:6d:dd:c5:2d:15:11:68:52:be:
                    c4:44:32:28:09:1c:db:de:f3:8f:3e:7f:0d:76:ee:
                    03:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:D8:24:77:A0:91:B1:7C:DA:61:C5:56:3B:C2:92:0C:DC:D7:AA:A5
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/r9gkd6CRsXzaYcVWO8KSDNzXqqU.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.122.0/23
                  133.32.192.0/21
                  133.226.176.0/21
                  202.233.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:31:38:41:ba:d4:0a:cd:32:90:b3:e6:ac:08:e6:97:32:76:
         a1:bf:c9:da:db:04:e7:8c:db:f5:e7:3e:5b:8d:55:b2:14:11:
         b6:f6:f9:5d:3a:d1:ae:05:c4:aa:70:b5:54:e4:ea:b6:39:dd:
         9a:57:0f:7f:5b:6e:d6:88:97:14:da:94:44:ee:b1:e3:f5:81:
         16:4b:3b:30:3e:59:66:3f:1e:7c:be:99:0d:74:4f:61:bd:f4:
         9c:dd:06:70:0f:a4:76:7a:75:16:4c:23:2e:b7:51:16:c1:b4:
         4c:13:07:51:25:3f:dc:4d:14:10:41:16:af:25:d8:f8:e8:2a:
         59:fb:1f:4b:94:e8:df:43:99:56:e8:1c:da:6c:cc:ab:6f:b5:
         27:0a:0e:c7:a3:9e:d7:92:cd:74:84:f5:39:2e:d4:cd:62:d3:
         2b:60:d1:1b:fa:be:c3:f1:b7:15:9d:65:66:1b:8d:33:67:4d:
         cd:6e:13:cb:30:2d:fc:a8:dc:ec:43:4a:77:d7:7b:92:e2:c5:
         ff:93:cb:c5:b2:1b:24:7e:bb:e9:ed:a7:4f:a9:0d:24:04:13:
         69:0b:bd:20:5c:06:ca:fd:1e:21:d8:82:4b:df:b4:eb:d7:a5:
         0d:52:c2:09:87:ab:6d:76:a8:2f:38:90:40:91:70:66:d4:29:
         70:63:a9:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 22:05:39 2025 by rpki-client