Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oa5xzag3zu9pzhFNcByGUKCo-qk.cer
File:                     oa5xzag3zu9pzhFNcByGUKCo-qk.cer (raw, json)
Hash identifier:          c8HtjaUT9C9Dutx0t2mAacZBHnIBNtwos9NL3K1H7RI=
Subject key identifier:   A1:AE:71:CD:A8:37:CE:EF:69:CE:11:4D:70:1C:86:50:A0:A8:FA:A9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       027318
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://akane.maru.co.jp/repo/1073c6/14/A1AE71CDA837CEEF69CE114D701C8650A0A8FAA9.mft
caRepository:             rsync://akane.maru.co.jp/repo/1073c6/14/
Notify URL:               https://akane.maru.co.jp/oshirase.xml
Certificate not before:   Tue 04 Nov 2025 21:11:03 +0000
Certificate not after:    Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources:    AS: 7719
                          AS: 154340
                          IP: 2001:df5:f4c0::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 16:10:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160536 (0x27318)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov  4 21:11:03 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=A91B82CE0000, serialNumber=A1AE71CDA837CEEF69CE114D701C8650A0A8FAA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7e:10:7b:4b:95:9a:71:45:6d:30:5d:90:55:
                    60:8f:54:5d:16:7d:cb:89:99:d8:c4:02:a6:62:59:
                    b2:72:27:6a:d3:fc:6f:91:a3:e2:b6:ba:29:12:22:
                    16:b5:85:db:94:1f:f4:f6:07:5d:96:7b:d8:22:f6:
                    24:ed:90:f4:6a:37:b0:d7:5f:f7:18:c9:ce:d9:2f:
                    86:d3:72:26:77:f3:04:eb:72:c7:8f:7f:d4:49:c8:
                    83:eb:49:eb:38:85:6e:0e:f6:cf:16:05:33:99:9b:
                    fa:23:da:51:e5:44:0a:b3:bf:84:9a:f2:22:0d:ad:
                    74:a5:8d:4a:47:c7:f4:54:5b:46:04:52:31:69:e2:
                    76:65:ca:e1:b8:71:9d:de:8f:17:96:37:0c:14:34:
                    08:4d:c9:f9:a3:5c:33:9c:db:c5:0a:ab:b9:83:32:
                    0f:0a:c5:f6:ce:6b:e4:db:81:4e:ed:da:75:6d:9d:
                    5e:21:de:30:43:4d:27:2c:db:09:eb:c3:f5:3c:fc:
                    e7:fa:af:f9:69:53:25:7b:b4:ee:50:0b:cf:6d:d0:
                    2b:de:ba:42:d6:ec:65:99:d1:b1:7f:26:b2:2b:c0:
                    a6:c1:bf:29:c9:7d:6a:b6:e7:56:ae:26:b4:83:48:
                    13:d6:9d:14:0a:e0:62:57:93:19:44:da:21:92:a2:
                    39:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:AE:71:CD:A8:37:CE:EF:69:CE:11:4D:70:1C:86:50:A0:A8:FA:A9
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://akane.maru.co.jp/repo/1073c6/14/
                RPKI Manifest - URI:rsync://akane.maru.co.jp/repo/1073c6/14/A1AE71CDA837CEEF69CE114D701C8650A0A8FAA9.mft
                RPKI Notify - URI:https://akane.maru.co.jp/oshirase.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  7719
                  154340

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:f4c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         d4:ce:3f:71:15:74:88:06:ed:31:c6:36:3a:ac:d3:89:e8:63:
         ee:b9:2f:7d:6e:d4:49:29:56:f6:c4:60:1b:40:78:af:8b:e1:
         6b:7b:23:8f:a1:71:fa:21:49:3a:15:42:04:7e:6a:12:b4:55:
         ca:7b:3b:79:b7:7e:c5:10:d5:b4:e7:47:fb:9c:7c:91:a6:a9:
         78:68:40:ea:c1:88:c8:0f:08:cf:98:e2:54:1d:56:79:64:83:
         0c:36:7b:2b:61:a6:a6:88:4f:9d:d1:e6:a8:92:5b:c9:13:11:
         a4:ee:88:24:08:18:c6:f9:e8:6e:71:4b:0a:fc:27:d6:a0:95:
         d4:29:7e:df:69:e1:87:b2:8c:44:a8:3c:06:5b:40:65:50:11:
         17:74:bb:35:e6:c8:6a:be:5b:bd:b0:67:d8:ad:e4:c7:fb:d9:
         d5:29:b4:6e:ee:bb:81:ea:1a:7a:f9:b3:ee:31:f4:9b:4f:02:
         8a:76:95:04:65:04:ac:07:c5:e1:92:e0:df:64:7c:88:37:d2:
         4b:c6:6a:28:a3:ce:88:fb:25:c6:b9:7e:dc:33:c2:55:78:ff:
         d2:09:21:a7:5d:83:6e:27:71:31:98:44:8d:98:71:44:f6:79:
         dc:9b:56:67:a6:37:b1:ef:9d:de:cf:65:ab:95:a7:42:96:2f:
         41:ab:a2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:01:22 2025 by rpki-client