Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/Ab5k6lGElpjv90IvaTdI0tKCnPY.cer
File:                     Ab5k6lGElpjv90IvaTdI0tKCnPY.cer (raw, json)
Hash identifier:          Z8FDUOP8NrjYTkmXvcozvj6w6EuQExTzHNMtL4tPUL0=
Subject key identifier:   01:BE:64:EA:51:84:96:98:EF:F7:42:2F:69:37:48:D2:D2:82:9C:F6
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       4F59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/491/Ab5k6lGElpjv90IvaTdI0tKCnPY.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/491/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Fri 23 May 2025 09:57:53 +0000
Certificate not after:    Sat 23 May 2026 09:51:00 +0000
Subordinate resources:    IP: 61.122.224.0/20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 05:36:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20313 (0x4f59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: May 23 09:57:53 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=01BE64EA51849698EFF7422F693748D2D2829CF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9e:87:cd:ed:ca:27:13:9e:9f:5a:5f:96:22:
                    f8:15:01:26:72:80:2d:47:1b:5d:a8:fb:b0:d3:10:
                    c4:33:5f:65:5f:e2:05:71:f3:74:01:7e:ff:e0:cc:
                    11:2f:06:4a:ea:ae:47:8b:1d:4a:63:4f:3c:9f:0b:
                    cc:28:71:b5:12:1c:d7:02:84:37:47:64:96:d2:8b:
                    2a:49:73:cb:04:ab:41:57:5d:ba:a5:68:68:f0:69:
                    5a:47:27:a5:9b:3d:bd:bc:98:74:df:0e:99:2a:c5:
                    f9:ec:16:1c:f0:8b:01:6b:7c:45:eb:ba:b0:a2:0b:
                    01:0b:b2:62:73:09:62:1d:c0:55:a7:5e:4e:f1:90:
                    a0:86:ef:79:1c:cd:3d:e6:9b:19:64:86:0d:60:74:
                    86:81:78:c8:da:e0:ef:52:15:e1:67:e2:a0:06:af:
                    69:93:c1:78:80:78:5d:a4:a5:80:af:db:c0:5b:1c:
                    7b:4a:62:73:2f:fc:fe:34:0b:55:bd:e8:2d:20:97:
                    0d:13:2a:90:05:54:09:44:7d:8d:10:11:0e:de:50:
                    d0:6a:74:a6:88:c4:cf:68:b5:72:82:31:fb:f3:fd:
                    5d:7e:74:ba:96:3e:d4:77:00:d5:76:cb:f1:0b:1c:
                    04:a4:94:13:64:e3:15:1f:26:ed:cd:ff:70:08:a9:
                    a8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:BE:64:EA:51:84:96:98:EF:F7:42:2F:69:37:48:D2:D2:82:9C:F6
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/491/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/491/Ab5k6lGElpjv90IvaTdI0tKCnPY.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.122.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         22:a2:48:a0:ff:3a:d0:28:11:34:44:e6:79:f1:68:ce:c3:09:
         33:2d:37:a9:32:62:47:21:65:1f:84:bf:da:4d:75:2f:07:5f:
         04:12:d7:78:67:4a:77:47:7d:a7:16:5d:af:8f:d1:06:ab:11:
         9e:f6:68:73:35:77:fc:45:25:2c:3f:71:10:e3:58:31:e2:b7:
         37:2e:bb:ef:ab:a8:43:8b:ce:51:8d:bb:1d:8e:b5:f2:63:39:
         d9:cd:f5:da:78:e7:e5:69:2d:50:14:b8:3a:bb:a4:a0:aa:2f:
         58:24:1e:13:16:11:fb:90:7d:b1:ce:59:12:af:81:38:1f:90:
         c6:7b:83:47:8f:ca:3f:1b:d5:e0:a1:1d:a9:da:ce:c2:74:65:
         45:b9:b6:50:8d:d9:ad:8c:7f:82:18:0a:56:e0:76:0d:c9:42:
         bf:b6:68:e2:27:f9:15:c9:7a:08:73:1e:57:76:a0:a4:85:ce:
         bb:3a:1b:ac:a1:e7:ab:25:17:b1:4c:eb:be:0b:93:36:60:8a:
         d6:03:91:3f:3d:8b:74:fc:da:4e:87:0a:4e:47:0d:95:29:5a:
         d6:15:0f:b4:07:09:ae:fd:e9:ec:b4:d1:3f:dc:2c:4a:6d:ea:
         68:3e:db:70:6d:d8:d5:2c:cf:cb:5e:d0:3f:c6:5a:ed:70:37:
         19:f3:eb:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 07:25:26 2025 by rpki-client