Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/51bZpc6aysl4NgAR96fPxDAYHVM.cer
File:                     51bZpc6aysl4NgAR96fPxDAYHVM.cer (raw, json)
Hash identifier:          nEhNJYu7xh2zFUSG9dCS8rQgpVoDdobn5iH99WczRXM=
Subject key identifier:   E7:56:D9:A5:CE:9A:CA:C9:78:36:00:11:F7:A7:CF:C4:30:18:1D:53
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       4865
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20058/51bZpc6aysl4NgAR96fPxDAYHVM.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20058/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Tue 15 Apr 2025 01:30:50 +0000
Certificate not after:    Wed 15 Apr 2026 01:30:03 +0000
Subordinate resources:    IP: 202.126.16.0/21
                          IP: 210.158.180.0/24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18533 (0x4865)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Apr 15 01:30:50 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=E756D9A5CE9ACAC978360011F7A7CFC430181D53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f6:ec:9f:ca:1f:ec:a7:cd:67:ed:b0:d3:fd:
                    68:c8:a8:6b:26:af:9a:77:8a:a7:55:a8:44:6e:0b:
                    a1:3c:f0:64:e8:e3:d9:6e:74:02:65:03:03:44:3e:
                    74:82:1e:4b:b0:1e:9b:e3:81:32:d7:70:35:f2:9d:
                    c5:5a:69:b7:fc:99:30:13:ad:c1:80:00:6d:e1:d0:
                    ed:09:d4:74:e5:67:15:16:2d:54:33:37:29:5e:ff:
                    9b:e0:90:78:2d:a7:3a:11:8d:25:cf:e4:43:4a:3c:
                    31:1c:eb:da:28:f8:a2:d5:ef:6f:38:cc:ae:da:b2:
                    11:a0:7f:3e:7f:e1:43:cf:4c:2b:a7:bd:67:6e:1b:
                    46:87:2d:a4:dc:35:44:68:6f:7c:69:a3:c3:73:c5:
                    01:82:bb:92:51:b5:07:ab:17:05:32:36:ec:29:9f:
                    5e:b9:e6:ff:57:93:8c:8d:a2:bd:4a:55:c4:01:73:
                    f8:27:76:7e:c5:9b:36:f0:82:84:d2:21:16:f8:04:
                    3d:e3:c2:6f:e8:87:be:17:26:fc:3a:29:44:60:2e:
                    6a:61:81:25:55:e2:b1:04:2a:e6:e3:f0:a4:60:66:
                    f0:88:e6:87:23:72:0b:81:ec:b3:3e:36:f7:ac:4d:
                    c4:24:7a:61:86:de:30:73:e3:23:73:86:ad:1c:b4:
                    af:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:56:D9:A5:CE:9A:CA:C9:78:36:00:11:F7:A7:CF:C4:30:18:1D:53
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20058/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20058/51bZpc6aysl4NgAR96fPxDAYHVM.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.126.16.0/21
                  210.158.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:68:68:87:3c:bc:5d:8f:f1:32:39:ea:29:c8:3d:26:13:09:
         06:78:f5:e1:5c:6f:df:b1:0b:9c:f7:d2:b9:ec:ca:f0:d8:f8:
         b5:3f:3a:b6:23:e3:7a:de:0d:23:3f:82:54:7f:b8:7e:7c:2b:
         0d:ad:e2:fe:b8:6d:5b:a9:c6:c0:f1:70:88:d4:5f:ad:e7:9b:
         ca:58:49:f1:72:2d:6e:45:1f:ef:5d:b7:99:56:6a:31:7c:1d:
         27:6a:a4:66:d2:8b:6c:f0:aa:ae:ac:34:bf:a1:03:aa:df:26:
         5f:8d:9e:03:bc:1b:41:e6:de:1e:78:b6:4c:c6:76:bd:f7:4b:
         c4:03:46:56:6b:b7:df:df:84:3c:e8:9c:7c:6c:ab:89:a8:80:
         8f:a8:f0:8e:a6:cb:35:2c:4d:48:1c:7f:88:a8:bb:3a:4d:49:
         08:8c:58:89:b1:3c:11:0c:25:6f:72:4e:0b:d6:7d:3c:3d:0d:
         38:87:a7:94:e4:99:91:85:12:2e:7a:c0:ad:80:85:9b:37:8c:
         b8:88:34:8d:55:9f:8e:a8:88:ae:d8:80:2c:3f:13:53:4f:da:
         db:20:75:fb:37:23:f7:fa:4e:7d:c5:ae:50:14:43:bf:5e:de:
         29:e9:73:19:cc:5e:e1:c4:5e:29:9a:44:6c:38:ae:6a:e2:75:
         85:b9:ab:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:17:52 2025 by rpki-client