Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/Ab5k6lGElpjv90IvaTdI0tKCnPY.cer
File:                     Ab5k6lGElpjv90IvaTdI0tKCnPY.cer (raw, json)
Hash identifier:          RhFshWTZncb6/vCmwTB7Dg+th0SLa2qEwKYH4Li/ErM=
Subject key identifier:   01:BE:64:EA:51:84:96:98:EF:F7:42:2F:69:37:48:D2:D2:82:9C:F6
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       496D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/491/Ab5k6lGElpjv90IvaTdI0tKCnPY.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/491/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Tue 15 Apr 2025 01:36:47 +0000
Certificate not after:    Wed 15 Apr 2026 01:30:03 +0000
Subordinate resources:    IP: 61.122.224.0/20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18797 (0x496d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Apr 15 01:36:47 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=01BE64EA51849698EFF7422F693748D2D2829CF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9e:87:cd:ed:ca:27:13:9e:9f:5a:5f:96:22:
                    f8:15:01:26:72:80:2d:47:1b:5d:a8:fb:b0:d3:10:
                    c4:33:5f:65:5f:e2:05:71:f3:74:01:7e:ff:e0:cc:
                    11:2f:06:4a:ea:ae:47:8b:1d:4a:63:4f:3c:9f:0b:
                    cc:28:71:b5:12:1c:d7:02:84:37:47:64:96:d2:8b:
                    2a:49:73:cb:04:ab:41:57:5d:ba:a5:68:68:f0:69:
                    5a:47:27:a5:9b:3d:bd:bc:98:74:df:0e:99:2a:c5:
                    f9:ec:16:1c:f0:8b:01:6b:7c:45:eb:ba:b0:a2:0b:
                    01:0b:b2:62:73:09:62:1d:c0:55:a7:5e:4e:f1:90:
                    a0:86:ef:79:1c:cd:3d:e6:9b:19:64:86:0d:60:74:
                    86:81:78:c8:da:e0:ef:52:15:e1:67:e2:a0:06:af:
                    69:93:c1:78:80:78:5d:a4:a5:80:af:db:c0:5b:1c:
                    7b:4a:62:73:2f:fc:fe:34:0b:55:bd:e8:2d:20:97:
                    0d:13:2a:90:05:54:09:44:7d:8d:10:11:0e:de:50:
                    d0:6a:74:a6:88:c4:cf:68:b5:72:82:31:fb:f3:fd:
                    5d:7e:74:ba:96:3e:d4:77:00:d5:76:cb:f1:0b:1c:
                    04:a4:94:13:64:e3:15:1f:26:ed:cd:ff:70:08:a9:
                    a8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:BE:64:EA:51:84:96:98:EF:F7:42:2F:69:37:48:D2:D2:82:9C:F6
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/491/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/491/Ab5k6lGElpjv90IvaTdI0tKCnPY.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.122.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         86:e9:0d:8a:c4:cf:85:05:e9:f5:3e:e3:78:77:65:51:ed:04:
         74:a4:a9:0c:e1:7e:53:c7:a8:8e:b2:16:bf:c2:43:86:ce:d6:
         d8:be:3b:b5:2a:c4:81:4b:2c:2b:b9:71:63:de:18:b5:7a:21:
         7a:9a:89:a6:29:a2:93:fd:8e:0a:cd:6c:83:09:36:9a:e9:4e:
         c0:9e:0d:8a:85:82:97:cf:4c:17:84:92:50:3e:95:89:29:7f:
         dc:38:2e:da:e5:c9:20:ed:4c:4c:36:aa:12:93:15:49:d1:b4:
         81:7f:f8:d4:07:d7:b3:1f:86:16:c9:19:28:53:c3:1f:63:21:
         e4:51:ab:1e:41:ec:70:74:47:fc:7f:d6:0c:60:c1:1c:13:68:
         13:53:3c:3b:3b:a4:fe:4d:4e:ae:5d:fd:56:69:78:5f:7e:ba:
         a3:c0:d8:58:43:8f:d4:2a:ee:b0:84:e9:1a:45:d5:95:6d:d1:
         ad:c6:d6:40:59:b4:b0:c4:35:cf:2b:56:62:58:3e:07:6c:87:
         a3:26:d2:e2:da:9f:b7:f2:26:ef:f9:c0:10:ec:c0:dc:bb:38:
         ac:d3:bb:39:32:b4:ba:31:22:4a:b8:7d:0e:1f:c8:b9:98:d0:
         5e:29:9a:eb:90:a9:ec:57:ad:76:d2:ef:5d:7f:fd:a1:32:45:
         40:68:b8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:23:49 2025 by rpki-client