Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/4oKHAq-VJLLD1X4biwxkliVmlJw.cer
File:                     4oKHAq-VJLLD1X4biwxkliVmlJw.cer (raw, json)
Hash identifier:          xVodIXK/7nR1QCg8fI3K978qLGvZR6FkE98fz+uJU+E=
Subject key identifier:   E2:82:87:02:AF:95:24:B2:C3:D5:7E:1B:8B:0C:64:96:25:66:94:9C
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       54C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30376/4oKHAq-VJLLD1X4biwxkliVmlJw.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30376/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Wed 30 Jul 2025 06:35:00 +0000
Certificate not after:    Thu 30 Jul 2026 06:29:08 +0000
Subordinate resources:    IP: 2407:58c0::/32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21703 (0x54c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Jul 30 06:35:00 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=E2828702AF9524B2C3D57E1B8B0C64962566949C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:76:f9:3f:55:c9:c1:51:e3:78:cc:6b:2a:f6:
                    53:0a:24:1c:59:3f:17:10:18:32:ea:2b:24:8a:fd:
                    6b:ae:2c:ce:fb:8d:dc:74:1c:4d:6c:e3:39:72:0c:
                    ed:09:04:37:88:5c:92:0c:94:8e:73:aa:0f:2f:2d:
                    3a:3a:1f:eb:62:32:99:f4:a8:85:ca:bf:6a:80:01:
                    04:2c:80:1c:76:e6:71:7a:2f:4f:0b:17:4a:7c:fa:
                    04:f2:9a:9f:74:c1:63:15:4c:51:9c:25:13:cd:9c:
                    b4:8a:27:cf:4f:24:6d:18:cc:d3:1a:20:2e:92:43:
                    3f:f9:4a:3f:e7:d2:a9:75:14:9c:d2:d0:62:8f:23:
                    4e:ee:5d:df:29:d6:f8:18:b1:99:55:3f:f4:20:e2:
                    17:28:63:03:b2:d0:02:8f:b8:cb:18:0b:69:50:16:
                    3c:17:44:45:3b:c5:d8:80:c3:8c:ae:8e:cb:c5:86:
                    3f:94:59:5a:8b:cf:b9:bc:69:8b:23:77:39:98:72:
                    90:fd:28:de:be:cb:b8:68:5e:bd:54:7b:8d:69:98:
                    77:eb:14:6d:ca:86:40:97:bc:4e:3d:6f:bb:e8:1f:
                    0c:ca:45:30:88:5c:c3:d0:ee:f9:c7:f6:7d:c2:10:
                    d2:90:14:97:ff:00:fa:af:bb:dd:62:fc:a7:41:a5:
                    84:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:82:87:02:AF:95:24:B2:C3:D5:7E:1B:8B:0C:64:96:25:66:94:9C
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30376/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30376/4oKHAq-VJLLD1X4biwxkliVmlJw.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:58c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:67:bc:c2:ea:a7:5a:33:5a:a5:8d:49:af:2d:0a:91:3f:58:
         d1:41:74:37:93:0b:09:1d:57:6e:e6:ab:00:ac:fd:5d:f4:ad:
         d2:cb:e2:51:c6:ba:25:66:8c:45:bf:9b:de:f5:c7:b6:89:d7:
         46:f9:5c:c9:47:35:be:63:b5:63:ae:3f:95:50:ad:6d:cc:32:
         77:ab:13:b5:fb:28:38:37:38:db:9d:86:53:60:f7:90:00:ff:
         0b:45:f8:b4:cc:e6:f9:17:1f:df:a0:e2:74:fc:e0:a1:c7:2b:
         89:97:40:44:02:d3:b2:58:69:b2:bd:1b:c9:2a:50:9a:cd:a7:
         b4:cf:9c:c1:84:98:81:c0:de:34:07:7f:e9:e5:39:35:4c:30:
         ef:db:05:ea:a4:51:53:d1:4f:a7:ef:07:7b:0c:28:32:3b:6a:
         7f:43:4b:47:29:cc:eb:df:0b:85:e5:b9:f1:94:f0:c0:02:a9:
         5a:eb:b8:f9:f4:91:49:ef:2c:16:f7:68:d1:2f:2b:9f:8c:42:
         73:8a:8f:fe:ca:c4:cb:a4:c5:42:d9:db:ff:fe:f3:6c:7a:5e:
         4d:64:eb:8c:22:47:d2:87:35:cb:ca:8c:2f:e3:e8:c2:7a:43:
         bb:ce:1b:4d:fe:91:47:20:3e:3b:1d:70:15:92:ea:58:50:8d:
         c9:cf:59:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:37:06 2025 by rpki-client