Certificate

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/PbsW67aNlauUvG44o6PxmiX25sA.cer
File:                     PbsW67aNlauUvG44o6PxmiX25sA.cer (raw, json)
Hash identifier:          LOaNeolBl7hXDB2DuSfqiYwRe4FEpb+Il2QWiWuIhr0=
Subject key identifier:   3D:BB:16:EB:B6:8D:95:AB:94:BC:6E:38:A3:A3:F1:9A:25:F6:E6:C0
Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2
Certificate issuer:       /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2
Certificate serial:       1774
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2344/PbsW67aNlauUvG44o6PxmiX25sA.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2344/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Sat 15 Aug 2026 01:34:17 +0000
Certificate not after:    Sun 15 Aug 2027 01:30:02 +0000
Subordinate resources:    IP: 160.17.0.0/16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 06:44:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6004 (0x1774)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2
        Validity
            Not Before: Aug 15 01:34:17 2026 GMT
            Not After : Aug 15 01:30:02 2027 GMT
        Subject: CN=3DBB16EBB68D95AB94BC6E38A3A3F19A25F6E6C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:65:0e:26:ad:78:54:47:02:86:fd:68:d9:22:
                    84:0b:f8:40:ab:c9:c5:5c:f8:f7:c4:b2:37:3a:a9:
                    7d:5f:81:ce:90:b6:e1:6a:7b:b1:4a:1e:d8:29:ae:
                    cc:c1:c2:ce:55:79:7e:cf:da:ad:3c:6a:48:ac:da:
                    8b:f9:3a:e1:a2:97:e5:94:35:68:cc:a9:ca:51:cc:
                    5c:23:44:68:02:3a:df:07:57:98:c2:24:23:59:9b:
                    1b:75:a9:12:6d:c0:23:22:e6:3d:a8:7b:b4:00:fe:
                    7a:df:c2:b4:43:dd:aa:41:8f:2a:88:eb:5d:42:58:
                    5c:cd:20:83:d3:c7:c6:f3:46:6d:fe:d3:4d:aa:8e:
                    4e:bd:8d:75:9d:9a:ab:e6:5f:f7:6c:97:fc:9a:4c:
                    e0:5f:00:af:8d:e9:3a:59:ce:fb:4b:d4:ca:ae:23:
                    96:38:82:bd:5e:06:f6:65:7f:b4:49:5f:46:21:ba:
                    51:40:80:19:4a:62:2e:92:fc:e2:90:8f:1f:f5:f5:
                    a3:b6:35:10:44:df:87:69:ce:3c:9c:1e:2b:1f:68:
                    24:65:84:e1:dc:10:62:68:9a:d3:8c:48:25:27:7b:
                    68:99:a7:0e:ac:ba:2c:11:85:e7:47:14:2d:fb:09:
                    ad:82:1b:7b:e5:c7:d3:d2:dc:d9:ba:f4:ab:20:07:
                    e6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:BB:16:EB:B6:8D:95:AB:94:BC:6E:38:A3:A3:F1:9A:25:F6:E6:C0
            X509v3 Authority Key Identifier:
                keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2344/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2344/PbsW67aNlauUvG44o6PxmiX25sA.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.17.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7d:b0:d8:23:e1:e0:88:41:db:e4:ce:29:55:84:d2:eb:1f:22:
         1f:72:8b:a3:a9:75:b3:dd:cc:47:32:e6:fa:56:ea:10:00:ce:
         87:45:7e:bd:aa:85:86:58:bd:b9:be:b1:e5:fd:3b:34:71:cc:
         9e:89:60:d2:2b:3e:d7:c8:f4:60:94:3d:97:4a:1d:7f:18:05:
         1a:ef:7d:88:80:9d:96:a6:8d:98:0a:87:07:9d:61:de:a2:af:
         1a:fe:99:01:74:54:2e:fb:21:18:18:88:f7:07:38:64:69:68:
         5c:3b:68:27:98:54:af:3e:dd:28:ac:37:67:86:7f:33:8b:37:
         d4:eb:a2:56:5c:74:50:22:dd:37:52:ee:f4:59:f6:9d:af:af:
         67:88:d3:dc:1d:f6:09:cc:c1:7b:07:4d:71:e1:e0:29:92:f9:
         fb:9b:43:f4:c0:29:1f:fd:9f:3f:27:e8:47:c1:24:fd:55:4e:
         64:1e:92:13:37:c3:f5:ef:f6:0c:5a:6b:1b:f0:fb:a0:c5:69:
         cd:ef:46:e0:9a:f6:8f:47:33:8c:48:c5:98:36:25:64:1f:17:
         a5:0a:62:c1:a3:d0:fe:48:5d:fb:ff:f7:76:bf:43:29:ca:5b:
         2e:59:0f:d3:39:23:53:ee:33:8b:04:c5:82:83:b9:64:ca:ee:
         3e:c9:53:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 11:07:53 2026 by rpki-client