Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/rMiIcI0Zo4-zsY_RtJKXTV2AlvY.cer
File:                     rMiIcI0Zo4-zsY_RtJKXTV2AlvY.cer (raw, json)
Hash identifier:          P+HUvfkQXhR1HU4+YubeSYEyo5fvlsoV3dUvmQmMoSE=
Subject key identifier:   AC:C8:88:70:8D:19:A3:8F:B3:B1:8F:D1:B4:92:97:4D:5D:80:96:F6
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       5434
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/552/rMiIcI0Zo4-zsY_RtJKXTV2AlvY.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/552/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Tue 15 Jul 2025 01:46:59 +0000
Certificate not after:    Wed 15 Jul 2026 01:30:01 +0000
Subordinate resources:    IP: 103.13.168.0/22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 16:47:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21556 (0x5434)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Jul 15 01:46:59 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=ACC888708D19A38FB3B18FD1B492974D5D8096F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:53:c2:f0:e1:4e:9d:74:ac:36:4f:fc:67:a6:
                    4f:2e:b3:6e:df:6b:d7:f5:28:2d:82:43:ed:83:37:
                    cb:99:1c:42:86:63:e6:5c:c5:bf:73:f2:e2:4f:8b:
                    51:60:bc:8d:86:6a:6d:85:30:00:02:c8:ee:f0:2f:
                    54:a6:75:76:e4:f8:98:bb:7f:13:e9:c2:1c:fb:74:
                    a2:9a:13:0b:20:e5:d6:2b:36:bb:e3:23:bb:81:dc:
                    d9:b1:03:3b:04:d6:d0:f3:59:a4:3d:d9:fa:f6:3d:
                    45:3b:2e:41:f3:71:be:a4:ff:61:45:5a:37:65:b9:
                    de:00:73:d9:8a:8b:8a:c8:b5:12:72:1a:29:ac:d6:
                    7c:c1:ca:15:6c:b1:c3:9a:5a:df:fa:55:d3:74:96:
                    35:e1:70:d2:ae:1c:71:1e:68:d3:3c:12:5c:72:36:
                    0a:c4:b8:90:e5:9f:3b:0d:ab:ea:ab:0f:98:b5:ae:
                    b5:e3:66:ba:54:84:87:41:c9:73:fb:6d:43:33:d0:
                    b2:a5:9c:01:22:fa:35:34:da:e4:96:d0:3f:8c:51:
                    16:72:b0:22:5a:b1:d1:d2:f7:7d:57:64:d2:25:1c:
                    04:cd:df:a7:44:dc:6f:db:f0:47:32:9b:f9:3d:3e:
                    13:29:30:7d:58:9c:c0:6e:5b:30:bd:78:3b:67:8d:
                    57:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C8:88:70:8D:19:A3:8F:B3:B1:8F:D1:B4:92:97:4D:5D:80:96:F6
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/552/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/552/rMiIcI0Zo4-zsY_RtJKXTV2AlvY.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:99:ab:dd:1f:b0:4c:1c:30:3b:83:57:d5:1f:ec:4a:cf:2f:
         63:f0:05:dd:f4:43:20:8c:83:c0:4f:dd:87:ef:2b:8d:8f:01:
         31:0d:dc:07:64:00:92:77:53:68:2d:d9:ff:94:09:4c:68:f5:
         0e:b4:45:df:0e:45:c5:08:89:d3:ed:b2:4f:5a:56:c5:1d:db:
         8e:7a:8e:6a:8e:d3:b5:c9:88:b4:07:1e:1d:e4:0d:d6:68:ac:
         84:1d:d0:32:78:90:b8:2c:14:81:fd:68:b4:1a:7b:f3:42:77:
         b7:a4:15:f2:41:33:ab:39:ff:56:ea:08:ab:1c:f6:2f:0b:58:
         14:80:ca:40:db:88:69:9c:68:3c:a6:07:82:0e:95:83:ef:86:
         45:4f:75:00:98:e1:cf:3f:b2:08:99:73:c5:f2:2e:08:5d:17:
         98:b0:7a:9a:58:a7:55:11:b9:c9:c5:c2:fb:04:ed:57:94:b6:
         93:a9:a6:5c:5f:8b:8b:a3:f0:94:1a:38:c1:02:a8:50:7c:2a:
         b1:36:d6:05:f3:0e:d2:d2:94:87:50:7d:66:de:57:51:67:98:
         c3:74:f8:30:cb:62:31:61:9c:69:ee:f9:60:38:0b:95:fa:46:
         67:3b:b8:26:6c:74:cc:04:b2:64:07:2c:bf:75:08:52:a3:4b:
         eb:5f:19:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:52:31 2025 by rpki-client