Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/5lXIJpEyXsj0QlvApmsaYiMjHXE.cer
File:                     5lXIJpEyXsj0QlvApmsaYiMjHXE.cer (raw, json)
Hash identifier:          lJUEigw4xkECQOAhtfBzBdlRR2oAcFeLV1o310PyQuI=
Subject key identifier:   E6:55:C8:26:91:32:5E:C8:F4:42:5B:C0:A6:6B:1A:62:23:23:1D:71
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       4F53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/961/5lXIJpEyXsj0QlvApmsaYiMjHXE.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/961/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Fri 23 May 2025 09:57:44 +0000
Certificate not after:    Sat 23 May 2026 09:51:00 +0000
Subordinate resources:    IP: 203.76.164.0/22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 05:36:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20307 (0x4f53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: May 23 09:57:44 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=E655C82691325EC8F4425BC0A66B1A6223231D71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2b:62:50:52:c5:6a:2c:d4:7e:0a:a2:36:a4:
                    a0:2d:d7:08:87:7e:4b:73:42:ce:d5:3a:a4:8a:55:
                    61:34:18:7b:62:dc:43:13:b4:53:db:24:f2:78:91:
                    d7:a7:cf:85:cf:5c:40:b5:d6:b2:b9:ca:ef:d6:45:
                    a6:d1:94:cf:3f:f2:4f:7c:2f:7e:7c:c6:dc:a7:9f:
                    ef:5c:5d:d1:5f:f9:a1:80:74:b4:ec:2e:bb:a9:ab:
                    bd:a4:fa:1a:c9:31:76:9e:15:f0:8c:9f:ae:25:b8:
                    3c:2d:f1:ea:e6:07:5f:70:51:16:9d:4b:d3:36:c6:
                    65:eb:3d:00:04:02:bb:ba:2d:83:a0:1a:58:f9:b0:
                    ca:cd:5e:0d:7f:8f:60:72:fa:22:f9:d5:a0:e7:56:
                    b1:d6:d5:0f:74:bd:03:85:37:b2:15:7d:e6:c2:8d:
                    a4:29:07:74:2a:b3:26:04:ea:b2:07:38:12:5a:aa:
                    29:e7:62:e5:84:54:e3:ec:70:c4:34:df:58:00:42:
                    fa:91:cd:fb:69:01:53:69:68:cb:1d:4a:f1:fa:42:
                    e7:f3:ad:b1:a3:c3:c0:b9:56:78:3a:0b:da:63:33:
                    e7:f0:71:e1:f9:a2:f5:70:92:49:c2:2b:c1:e6:09:
                    e6:0d:0c:7b:8c:fc:f2:38:cb:e4:5f:97:5d:b7:1d:
                    cd:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:55:C8:26:91:32:5E:C8:F4:42:5B:C0:A6:6B:1A:62:23:23:1D:71
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/961/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/961/5lXIJpEyXsj0QlvApmsaYiMjHXE.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.76.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:df:2b:ac:87:35:7e:91:cc:36:c3:3a:70:bd:3e:9d:c4:fa:
         a3:40:59:c2:da:35:8b:4d:bb:77:3b:1b:b8:93:2c:34:74:10:
         52:dd:a1:55:f9:e3:25:02:e5:a3:75:f1:c9:9c:ba:d6:d6:8b:
         bf:7c:10:3c:91:dc:5e:32:a4:57:10:33:39:f2:5d:b6:a4:c5:
         07:1b:95:d9:68:31:68:e1:d3:5d:72:fd:19:69:46:72:da:a6:
         f3:f3:da:c7:e1:c7:7f:05:db:1c:86:80:e3:84:f6:e4:a3:e4:
         94:b8:61:ba:24:82:5c:d7:c6:61:1d:9b:71:2e:18:9d:1e:b8:
         af:81:31:d7:96:ef:d7:8b:71:26:23:b1:26:08:66:fa:00:0d:
         cd:5b:ba:96:9a:68:0e:94:a9:85:61:dc:6c:b2:fa:a9:f2:fd:
         2c:a7:cf:94:d3:30:7c:04:51:10:ab:a8:e4:81:1b:75:66:b7:
         b4:12:52:f9:06:6d:b0:36:b5:64:e1:2f:c6:b6:89:f8:c0:e7:
         d1:bc:9f:b2:54:1d:07:72:bb:5c:53:56:13:c2:be:6d:7b:a6:
         73:18:2c:ad:96:3c:00:55:58:42:af:a2:24:f8:b1:54:41:60:
         ea:41:3a:38:ef:9f:53:bf:24:bc:55:02:aa:13:d6:ee:3e:8b:
         24:8f:07:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 07:23:47 2025 by rpki-client