Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/81FgyjwwgXAnTC5rYPIeW0szfWo.cer
File:                     81FgyjwwgXAnTC5rYPIeW0szfWo.cer (raw, json)
Hash identifier:          eFLpeWQFJuFWPVrTuQWQIwD3zFVg5mdnekWmvFwEhU4=
Subject key identifier:   F3:51:60:CA:3C:30:81:70:27:4C:2E:6B:60:F2:1E:5B:4B:33:7D:6A
Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2
Certificate issuer:       /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2
Certificate serial:       10A0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1655/81FgyjwwgXAnTC5rYPIeW0szfWo.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1655/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Fri 23 May 2025 09:52:52 +0000
Certificate not after:    Sat 23 May 2026 09:51:00 +0000
Subordinate resources:    IP: 157.110.0.0/16
                          IP: 192.156.141.0/24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4256 (0x10a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2
        Validity
            Not Before: May 23 09:52:52 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=F35160CA3C308170274C2E6B60F21E5B4B337D6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0e:32:54:5e:51:f5:22:e9:b8:6e:69:cd:d7:
                    c4:9e:3a:9a:43:dd:d1:4f:f2:0a:1a:0e:7c:27:ca:
                    9d:b7:a4:e7:d5:31:b4:2a:6d:a5:36:1a:8a:bc:db:
                    b5:2b:ee:34:f3:a8:ed:78:92:a0:3d:aa:ca:8f:3d:
                    bd:dc:88:47:34:7d:92:8c:7c:05:d9:63:82:ac:44:
                    bb:e5:2d:39:cc:cf:42:c3:3c:ff:f3:95:62:eb:df:
                    d2:35:94:3e:7d:fd:a3:7b:de:cd:02:25:56:70:81:
                    a8:f3:37:4d:d4:4e:b6:13:3d:61:b7:a9:7e:05:2a:
                    6f:d6:c6:46:7a:51:18:ef:8d:30:d8:9f:49:07:05:
                    16:10:39:b3:11:e9:e3:30:ac:85:a4:ca:ca:bf:78:
                    26:48:f6:8d:59:bb:fa:7f:cd:a2:af:14:30:7f:23:
                    7d:a7:ef:bb:2d:2c:0f:eb:1a:92:01:1a:c4:f4:d4:
                    99:af:4a:5b:7f:dd:0a:4a:fa:16:09:2b:ef:6f:fe:
                    a6:94:23:19:a6:94:4c:22:6b:a1:9c:05:97:2f:aa:
                    25:f1:e4:f7:22:43:51:7e:22:17:e5:79:19:92:a5:
                    7b:d4:7d:15:05:db:98:b2:c0:1b:5e:8f:ec:dc:99:
                    5b:4c:18:9c:3a:1c:7c:83:69:a8:75:7c:94:f4:eb:
                    09:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:51:60:CA:3C:30:81:70:27:4C:2E:6B:60:F2:1E:5B:4B:33:7D:6A
            X509v3 Authority Key Identifier:
                keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1655/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1655/81FgyjwwgXAnTC5rYPIeW0szfWo.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.110.0.0/16
                  192.156.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:cc:40:d0:da:84:bb:f2:7e:db:44:37:97:f5:36:1a:72:9d:
         70:b9:5a:6a:a1:92:d9:5f:68:a5:b7:0a:ee:c2:7c:ed:ea:23:
         84:7b:56:19:35:24:d4:2a:83:ba:2b:56:8a:59:6f:4a:26:1d:
         c2:0d:e6:05:17:0e:00:49:7d:a2:df:d9:cb:8d:ff:18:15:c3:
         03:45:28:46:14:ec:83:06:c8:d0:fd:31:ea:87:8b:8c:fb:14:
         5e:38:80:04:fd:4b:d6:e8:14:aa:ad:18:91:55:23:71:c9:aa:
         ed:34:49:a6:14:65:bc:7f:78:4a:fd:d7:60:14:15:9f:2c:c9:
         88:50:71:42:61:a1:c2:5b:00:e9:75:ef:09:8b:1a:8a:49:2b:
         e9:b4:bb:a3:17:50:11:47:50:1e:39:fa:57:2a:58:35:81:71:
         81:5d:0d:f2:6d:96:5d:15:1a:06:26:a5:e0:1b:7a:b2:f4:95:
         ef:94:c0:9b:fb:b3:62:27:a9:4c:06:b8:b7:ff:1d:bb:77:7f:
         f1:48:76:12:3b:ef:fa:a5:d8:ac:12:7c:c9:d9:5c:97:c7:e0:
         cd:4a:20:b5:f4:8e:09:a4:51:59:33:37:52:e4:72:b4:ec:3b:
         1e:44:4c:77:84:7c:8e:35:d0:3f:26:1c:31:c2:3d:0f:60:f4:
         8f:35:03:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 07:17:00 2025 by rpki-client