Certificate

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/xwTJoNEV0mBiqRaordaY8hjgCoc.cer
File:                     xwTJoNEV0mBiqRaordaY8hjgCoc.cer (raw, json)
Hash identifier:          D5gT4jsH6CK/gWs9jIJsqsHnBXfY5+AsJKTB21yE8T0=
Subject key identifier:   C7:04:C9:A0:D1:15:D2:60:62:A9:16:A8:AD:D6:98:F2:18:E0:0A:87
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       706B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30024/xwTJoNEV0mBiqRaordaY8hjgCoc.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30024/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Sat 15 Aug 2026 01:38:58 +0000
Certificate not after:    Sun 15 Aug 2027 01:30:02 +0000
Subordinate resources:    IP: 2001:2f8::/32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 09:23:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28779 (0x706b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Aug 15 01:38:58 2026 GMT
            Not After : Aug 15 01:30:02 2027 GMT
        Subject: CN=C704C9A0D115D26062A916A8ADD698F218E00A87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cd:f8:99:f9:0d:c1:40:bc:a1:94:df:39:f7:
                    bf:43:f1:91:72:b1:f4:e0:80:58:46:36:3b:71:c4:
                    ea:87:62:b6:06:b7:71:bd:fe:4e:e2:bd:d7:41:f8:
                    ad:6b:be:96:1b:93:4e:3e:e4:83:5f:06:40:84:82:
                    60:df:47:ce:01:f4:0c:10:7a:b9:16:bf:65:0d:da:
                    44:e5:9b:3f:25:10:5d:32:5e:78:79:16:38:73:b5:
                    43:9a:e3:3a:bb:d1:e6:40:4d:bd:a8:aa:c1:f4:30:
                    f3:5b:b1:c2:05:d2:10:20:c2:cc:05:8a:70:27:d2:
                    67:58:54:cb:67:0d:5a:d9:97:7e:c2:7e:91:14:91:
                    06:a4:f0:77:73:0c:92:0c:6a:b6:19:dd:45:f7:2f:
                    ae:25:ee:05:62:83:e5:54:09:57:34:6b:d6:bb:cc:
                    08:c7:8e:82:13:fa:fc:31:0c:0b:00:42:8a:c8:1d:
                    89:1b:85:c3:e3:cd:c8:ad:03:cd:79:8f:70:07:41:
                    e5:70:96:94:3a:57:28:fa:d6:dc:5b:ab:50:30:ed:
                    a0:79:9f:3f:5f:00:8e:76:32:81:53:8e:0c:3f:d4:
                    50:f2:b5:42:9e:92:92:e7:1e:5a:22:06:51:6f:0c:
                    dd:a3:ec:4e:1e:1d:0c:4c:d9:a3:27:c9:f0:37:19:
                    5a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:04:C9:A0:D1:15:D2:60:62:A9:16:A8:AD:D6:98:F2:18:E0:0A:87
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30024/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30024/xwTJoNEV0mBiqRaordaY8hjgCoc.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:2f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:72:e7:d6:7a:9f:23:f9:e1:d6:c4:6e:38:c0:96:52:97:81:
         c4:36:d8:d7:4e:f7:a8:71:bb:6b:d1:c0:92:e5:93:f8:d2:62:
         89:08:f8:1c:07:4c:cf:05:46:3b:28:39:ba:0a:43:f1:3f:79:
         e3:31:57:fc:49:db:0e:39:2d:a1:08:92:3e:02:53:19:b6:af:
         2e:8e:3c:d7:3e:94:6a:cf:5f:a3:b7:27:84:fa:1c:ba:41:97:
         1f:ba:3e:80:08:8d:ac:70:d7:b7:07:c1:4b:3c:bb:fa:61:7c:
         ec:97:0e:66:89:85:28:96:5b:89:7f:89:12:89:5a:60:9e:66:
         e9:ad:d2:02:0f:a9:90:9d:f8:b8:02:29:2a:87:c3:2d:64:3a:
         3f:9f:74:df:6a:33:c5:6d:33:90:70:c6:8c:4f:c9:dc:01:28:
         51:b7:ab:e3:13:cf:b8:b7:7f:37:82:c2:ff:09:6e:0c:f1:48:
         f7:2a:68:8a:46:6f:7b:9c:38:0a:5b:60:40:36:fb:05:59:69:
         79:7f:07:74:ec:40:07:84:24:5f:4b:80:34:dd:e4:08:f4:8c:
         0c:93:9e:c5:59:b2:f8:6c:31:2a:fa:a2:53:d3:3e:d3:09:e4:
         31:3d:0f:9d:88:2f:32:b3:f0:16:39:a6:15:c8:f3:5c:05:e1:
         50:5a:7c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:19:56 2026 by rpki-client