Certificate

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/9a0af9SZUc0bHUgqgvKKlae1Th4.cer
File:                     9a0af9SZUc0bHUgqgvKKlae1Th4.cer (raw, json)
Hash identifier:          8NyMcGQCBmpVIuOpOMMbcQvIyoBE1i548tJlshLNnb4=
Subject key identifier:   F5:AD:1A:7F:D4:99:51:CD:1B:1D:48:2A:82:F2:8A:95:A7:B5:4E:1E
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       7587
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
CRL Distribution Point:   rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20006/9a0af9SZUc0bHUgqgvKKlae1Th4.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20006/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Sun 15 Nov 2026 01:30:25 +0000
Certificate not after:    Mon 15 Nov 2027 01:30:02 +0000
Subordinate resources:    IP: 202.235.0.0/21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 08:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30087 (0x7587)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Nov 15 01:30:25 2026 GMT
            Not After : Nov 15 01:30:02 2027 GMT
        Subject: CN=F5AD1A7FD49951CD1B1D482A82F28A95A7B54E1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:eb:37:29:57:e0:02:4f:88:5a:40:c3:53:9d:
                    67:3d:9a:d8:a0:d7:53:1c:bf:ce:86:1a:26:08:9a:
                    b6:99:fd:21:04:2c:3c:cf:f1:e1:5e:1b:13:3b:71:
                    ea:c2:38:d1:4d:99:af:cf:f0:26:4f:f4:23:32:18:
                    a0:43:1e:48:56:d7:4a:7c:e1:cc:4e:bb:c5:fb:ce:
                    da:cc:1c:d8:cd:c0:7a:af:54:96:71:2b:21:0e:60:
                    54:16:03:2b:3a:a7:c4:b9:36:42:26:74:f0:ac:43:
                    77:d7:ad:b0:3f:54:3b:4e:7b:a1:3f:7e:13:9e:4b:
                    98:24:55:d7:40:c7:c5:d9:44:75:d3:f2:14:b3:27:
                    18:cd:3a:85:83:f5:cd:2f:28:2e:02:ac:93:92:4b:
                    2c:7c:71:1b:d4:0a:4e:ea:e6:87:4e:8d:48:cc:d2:
                    50:7b:08:2a:12:12:cd:7c:23:ff:d5:45:7f:96:92:
                    38:4c:85:20:4c:34:0f:37:ac:1f:80:00:28:bc:0c:
                    02:ac:9d:1b:46:55:b6:e3:2d:e4:5b:15:11:c7:03:
                    99:63:4e:4f:f9:41:1a:a4:fd:91:d0:c9:4d:c7:d7:
                    2e:54:1b:88:a0:7f:58:bc:a9:9d:dc:78:2a:ae:a3:
                    e5:1a:71:01:3f:cd:e5:af:c9:65:2d:30:54:dc:e8:
                    54:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:AD:1A:7F:D4:99:51:CD:1B:1D:48:2A:82:F2:8A:95:A7:B5:4E:1E
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20006/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20006/9a0af9SZUc0bHUgqgvKKlae1Th4.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.235.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8a:c3:8c:97:b7:d1:cd:74:81:2d:df:40:cb:49:8c:a8:6f:97:
         2e:ec:a2:27:d6:1f:21:ff:02:16:a1:58:b9:f3:d1:1c:80:89:
         30:b4:a0:5f:99:d8:58:d4:98:be:b8:4e:22:61:e0:a3:e6:64:
         18:e8:24:4d:23:29:15:54:40:d3:65:20:42:f4:dc:f7:91:be:
         e2:9f:b8:ab:c4:e4:a2:97:9e:ed:64:89:68:f7:88:d1:31:fd:
         91:81:31:c5:28:f0:d6:1d:ed:b0:0e:a1:b4:be:83:ff:66:06:
         cb:cc:a7:22:75:2d:e3:78:5b:4f:fc:8e:3c:85:4b:a2:5a:a2:
         44:df:20:c0:8d:51:ed:f3:5b:73:c6:54:b3:77:aa:91:de:56:
         07:cf:32:55:24:95:fe:98:2d:22:91:93:3a:b6:be:95:c0:0d:
         35:a9:14:b6:45:0f:31:51:9b:38:9a:d9:49:28:db:44:4d:34:
         96:dd:dd:e6:65:93:9b:e7:53:0f:17:54:a1:f5:e0:f5:2d:e1:
         3a:ef:e2:a9:21:40:fb:15:0c:4b:d0:89:6b:b2:36:1b:7e:dc:
         89:5a:fa:e5:91:7d:eb:25:ef:31:7e:12:4d:2a:1f:0e:12:17:
         1f:0a:ad:5a:f3:e1:c4:d3:8d:03:e9:ca:04:38:7e:da:3e:a5:
         6e:8f:e7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:15:36 2026 by rpki-client