Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/IKcN2Pan97KkZ1Mu0bYKphCilzk.cer
File:                     IKcN2Pan97KkZ1Mu0bYKphCilzk.cer (raw, json)
Hash identifier:          La8RiIbTrQ3GvPJ91ro3+zHaOPGCVGGpTysUHmBtVGo=
Subject key identifier:   20:A7:0D:D8:F6:A7:F7:B2:A4:67:53:2E:D1:B6:0A:A6:10:A2:97:39
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       6768
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4688/IKcN2Pan97KkZ1Mu0bYKphCilzk.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4688/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Wed 15 Apr 2026 01:40:51 +0000
Certificate not after:    Thu 15 Apr 2027 01:30:02 +0000
Subordinate resources:    IP: 202.166.185.0/24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26472 (0x6768)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Apr 15 01:40:51 2026 GMT
            Not After : Apr 15 01:30:02 2027 GMT
        Subject: CN=20A70DD8F6A7F7B2A467532ED1B60AA610A29739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:84:ff:f2:66:ff:42:17:0a:0b:5a:56:61:17:
                    f6:c1:39:a6:ae:b0:dd:ed:76:e4:e5:c7:36:04:4a:
                    95:cf:41:d9:f1:f7:12:84:ea:bb:98:95:26:55:61:
                    be:7f:d5:a9:6f:a4:5b:f6:cb:24:98:c6:60:0a:16:
                    ef:c8:b5:7f:b6:d7:17:56:84:f5:d2:0f:09:9e:bf:
                    e4:1f:89:5c:64:02:64:59:19:3f:ff:5c:ee:82:ce:
                    72:f2:fe:a4:43:16:6d:74:51:f9:c4:2f:94:de:3c:
                    f4:67:39:86:ec:fe:d9:b0:1e:09:c0:bc:2e:59:b0:
                    e2:a4:85:47:95:88:89:fd:aa:19:dd:5c:48:e0:1f:
                    25:16:be:30:69:cc:5a:31:8d:c7:7a:ce:3a:5c:13:
                    cf:5b:b0:6c:28:5a:d8:a9:84:29:66:a0:53:f9:c9:
                    ed:02:4f:5b:77:d6:8d:82:5a:be:00:42:44:a9:83:
                    af:bb:ec:f2:8a:0f:6f:ad:d5:e1:0b:f1:56:91:21:
                    67:a1:0c:e4:c6:fb:ea:2a:23:83:35:1f:6c:1d:76:
                    39:aa:58:5f:95:be:6b:b1:87:ab:9c:23:60:d2:7e:
                    6d:f3:fd:6a:c6:ea:a8:63:37:9d:a3:a9:14:ef:6e:
                    d8:db:48:0e:e6:a0:2f:f6:4d:6e:21:61:49:f2:33:
                    3c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:A7:0D:D8:F6:A7:F7:B2:A4:67:53:2E:D1:B6:0A:A6:10:A2:97:39
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4688/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4688/IKcN2Pan97KkZ1Mu0bYKphCilzk.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.166.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:2c:87:70:87:a3:cc:41:7b:6f:4b:50:84:15:8b:24:c0:08:
         1e:de:13:e7:1a:66:26:6a:07:b9:e3:67:9d:a9:d1:43:29:02:
         cb:21:2b:68:98:86:f5:1f:8a:fb:f3:5e:51:c8:26:05:b5:48:
         71:a2:ec:fc:18:2b:ff:0c:a1:1c:90:b2:77:6d:87:4c:32:7a:
         7c:b1:be:de:ab:76:18:25:cb:3b:85:a3:27:d2:90:57:84:c2:
         f8:33:bd:b1:59:93:4b:2b:e4:25:68:4e:26:7d:65:98:94:c7:
         15:63:1a:0b:2e:10:99:82:49:c9:52:53:a2:05:d6:0a:6b:23:
         d7:68:ba:02:6d:27:a6:58:b2:08:e2:bf:09:da:3a:83:5f:c1:
         de:02:86:11:7a:06:89:d2:41:ba:45:f5:4d:58:1c:ab:79:a3:
         24:1b:42:8f:cf:b8:a4:fe:e4:33:01:ea:7e:50:95:53:98:6a:
         ba:0f:54:8c:72:4f:12:59:14:73:60:37:6d:c3:53:7c:3f:de:
         42:d9:22:4a:5a:9b:34:9a:4f:23:12:6b:bc:c5:22:83:2b:48:
         09:ad:bc:82:f0:98:6f:91:4f:e8:e6:e9:c6:cc:fb:f3:a8:df:
         6f:13:ff:42:c3:34:11:45:08:2e:ec:23:75:b6:eb:7e:47:13:
         9b:dc:cb:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:59:00 2026 by rpki-client