Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer
File:                     D38zCPyVIyRZg2_fFZr2tPqrrJE.cer (raw, json)
Hash identifier:          Hdh6Z6ZvhFzImaBvwtkO1BKAgYaKdtMWAgn4/Ro2Z4c=
Subject key identifier:   0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       636E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Sun 15 Feb 2026 01:42:58 +0000
Certificate not after:    Mon 15 Feb 2027 01:30:02 +0000
Subordinate resources:    IP: 103.2.96.0/22
                          IP: 133.226.160.0/20
                          IP: 180.178.80.0/21
                          IP: 218.40.96.0/20
                          IP: 219.103.48.0/20
                          IP: 220.247.184.0/21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25454 (0x636e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Feb 15 01:42:58 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=0F7F3308FC95232459836FDF159AF6B4FAABAC91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8e:a3:b2:54:63:b5:e1:7f:d9:52:38:f4:28:
                    59:7a:b0:db:49:4a:0d:a8:95:ab:f7:b1:c1:ba:0d:
                    e3:4e:80:e6:b6:65:02:b7:77:6c:fb:a9:c4:d8:63:
                    62:ca:5a:f5:32:f4:95:bd:97:ea:16:ef:a9:5f:7a:
                    e5:9f:d7:91:66:fb:83:07:8c:88:89:6f:45:2e:d3:
                    5b:c1:84:df:80:90:96:08:87:44:f4:0d:02:18:25:
                    59:fb:46:50:16:85:87:85:62:29:47:24:36:25:2b:
                    bc:2d:b6:62:b2:4b:a1:37:b8:97:43:f4:50:60:50:
                    39:e5:53:e1:f2:65:a3:89:67:17:54:66:09:17:c8:
                    1b:7c:10:f1:7c:14:10:ce:dd:55:85:ee:fd:df:09:
                    68:73:82:9e:71:fd:1b:1c:f3:dd:d6:fb:0b:03:d1:
                    84:81:8c:fb:8c:3c:5a:a6:33:79:ee:80:9a:78:b1:
                    06:c7:9e:a0:db:d9:22:4b:9c:ee:eb:94:8b:a3:00:
                    bc:bf:5f:d1:1e:ad:84:25:b4:94:b7:78:bc:82:e9:
                    47:c8:c9:65:12:cc:87:45:ee:94:0d:38:37:b0:26:
                    71:42:37:77:89:0d:79:4a:bf:8d:c8:95:f0:d3:d7:
                    87:a9:d0:47:fd:f6:c9:56:0b:5d:a1:40:4b:9b:13:
                    ea:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.96.0/22
                  133.226.160.0/20
                  180.178.80.0/21
                  218.40.96.0/20
                  219.103.48.0/20
                  220.247.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         52:50:5a:29:76:76:b3:29:f6:bb:99:bb:5e:14:ef:ee:3a:50:
         31:aa:32:ac:85:36:a8:10:32:b6:88:ce:e1:df:31:45:e0:6c:
         31:98:05:14:fb:b8:ea:1d:57:d1:9b:6b:7f:46:9b:0d:36:54:
         a9:91:45:f7:6c:57:d0:08:03:63:59:0f:fe:33:65:b8:78:2c:
         fe:7a:b4:76:c1:c9:50:6e:de:2d:fe:50:b4:00:d7:7c:af:9f:
         8a:31:71:da:cf:d5:86:d1:0d:02:b2:21:2c:a4:06:0e:31:c0:
         2d:e0:35:08:d2:d7:b1:58:e4:84:ca:50:88:4a:93:0e:6a:43:
         3d:ad:c3:47:ba:62:86:50:7d:1d:62:38:c4:5f:d9:8b:81:d4:
         30:21:cc:7e:99:18:8c:fc:aa:12:e0:a0:86:97:6e:cb:5f:73:
         ad:ef:05:61:af:ae:44:0c:9d:71:69:29:3f:41:bd:9e:8f:06:
         56:9c:db:10:b6:09:22:03:81:7a:74:a9:f9:6c:7a:3d:11:50:
         36:f9:29:7e:34:a4:a2:cd:67:3d:07:54:f6:9e:dd:3e:56:13:
         d1:f7:38:d6:03:37:4d:83:60:88:ea:66:fd:06:be:5c:d4:37:
         16:95:54:c5:5f:00:45:f8:d3:e2:86:8d:f5:42:f7:5f:ca:0d:
         e3:b3:da:32
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgICY24wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC
NTIwREFBQzdEQThGMB4XDTI2MDIxNTAxNDI1OFoXDTI3MDIxNTAxMzAwMlowMzEx
MC8GA1UEAxMoMEY3RjMzMDhGQzk1MjMyNDU5ODM2RkRGMTU5QUY2QjRGQUFCQUM5
MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMCOo7JUY7Xhf9lSOPQo
WXqw20lKDaiVq/exwboN406A5rZlArd3bPupxNhjYspa9TL0lb2X6hbvqV965Z/X
kWb7gweMiIlvRS7TW8GE34CQlgiHRPQNAhglWftGUBaFh4ViKUckNiUrvC22YrJL
oTe4l0P0UGBQOeVT4fJlo4lnF1RmCRfIG3wQ8XwUEM7dVYXu/d8JaHOCnnH9Gxzz
3db7CwPRhIGM+4w8WqYzee6AmnixBseeoNvZIkuc7uuUi6MAvL9f0R6thCW0lLd4
vILpR8jJZRLMh0XulA04N7AmcUI3d4kNeUq/jciV8NPXh6nQR/32yVYLXaFAS5sT
6r8CAwEAAaOCAqQwggKgMB0GA1UdDgQWBBQPfzMI/JUjJFmDb98Vmva0+quskTAf
BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0
b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa
dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j
Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0
NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G
A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB
7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw
L2FwL0E5MUE3MzgxMDAwMC82NzkvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt
cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzY3OS9EMzh6Q1B5
Vkl5UlpnMl9mRlpyMnRQcXJySkUubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw
a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s
MD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCZwJgAwQEheKgAwQDtLJQAwQE
2ihgAwQE22cwAwQD3Pe4MA0GCSqGSIb3DQEBCwUAA4IBAQBSUFopdnazKfa7mbte
FO/uOlAxqjKshTaoEDK2iM7h3zFF4GwxmAUU+7jqHVfRm2t/RpsNNlSpkUX3bFfQ
CANjWQ/+M2W4eCz+erR2wclQbt4t/lC0ANd8r5+KMXHaz9WG0Q0CsiEspAYOMcAt
4DUI0texWOSEylCISpMOakM9rcNHumKGUH0dYjjEX9mLgdQwIcx+mRiM/KoS4KCG
l27LX3Ot7wVhr65EDJ1xaSk/Qb2ejwZWnNsQtgkiA4F6dKn5bHo9EVA2+Sl+NKSi
zWc9B1T2nt0+VhPR9zjWAzdNg2CI6mb9Br5c1DcWlVTFXwBF+NPiho31Qvdfyg3j
s9oy
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:31 2026 by rpki-client