Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/JXco2IS3-bpoWu8ll-xxS-IjkBE.cer
File:                     JXco2IS3-bpoWu8ll-xxS-IjkBE.cer (raw, json)
Hash identifier:          olCQSx5zBR8OnDyvBqMk1CS1ZH8mOsENck5lBfULWMM=
Subject key identifier:   25:77:28:D8:84:B7:F9:BA:68:5A:EF:25:97:EC:71:4B:E2:23:90:11
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       67F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30383/JXco2IS3-bpoWu8ll-xxS-IjkBE.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30383/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Wed 15 Apr 2026 01:45:02 +0000
Certificate not after:    Thu 15 Apr 2027 01:30:02 +0000
Subordinate resources:    IP: 2407:d440::/32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26617 (0x67f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Apr 15 01:45:02 2026 GMT
            Not After : Apr 15 01:30:02 2027 GMT
        Subject: CN=257728D884B7F9BA685AEF2597EC714BE2239011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:16:b6:12:54:e8:b1:24:4b:41:a1:a8:2f:30:
                    04:f9:79:7d:be:8b:50:04:55:1c:01:cf:45:bd:8d:
                    ca:38:0e:dd:c5:4d:e8:de:95:5b:7a:64:4a:eb:05:
                    c8:d1:8d:e6:72:df:74:ff:24:4e:6a:db:0b:04:63:
                    9d:f3:ea:c8:26:0d:6e:59:f2:a6:ad:c4:52:c8:c1:
                    78:bc:e6:fa:0f:67:9e:9a:a5:59:f8:37:49:ae:87:
                    25:71:07:02:1b:4f:9a:f3:a5:a1:75:55:40:74:3c:
                    2d:29:13:7d:40:99:26:d2:08:be:fb:f7:e9:f6:2d:
                    f5:63:9a:94:d1:38:9e:96:12:89:da:e4:87:d5:7d:
                    44:9c:28:98:cc:e5:ea:8c:a4:4e:fe:f5:6b:1d:8c:
                    19:01:64:e1:74:ce:c5:b1:2b:0f:82:f1:1a:03:83:
                    e7:99:39:5f:aa:31:3a:71:fb:f0:08:32:a9:07:7a:
                    19:84:d0:13:96:0c:2c:db:a2:fb:06:bf:16:1a:8f:
                    a8:35:f9:fb:58:cc:aa:8b:9e:ef:31:3b:49:32:88:
                    c9:71:29:a9:b5:a2:37:13:8c:af:79:35:b9:26:04:
                    4a:80:c2:5c:0d:bc:ce:0f:24:8e:ae:d5:d2:dd:10:
                    af:b1:cd:c7:62:0b:38:7c:8d:20:c5:51:57:e0:82:
                    9e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:77:28:D8:84:B7:F9:BA:68:5A:EF:25:97:EC:71:4B:E2:23:90:11
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30383/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30383/JXco2IS3-bpoWu8ll-xxS-IjkBE.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:d440::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:d4:f9:fd:b3:9d:a6:d5:7f:30:6d:05:45:2d:0f:81:90:92:
         99:20:2b:43:73:19:6a:b1:25:26:1d:36:66:9c:07:ef:b4:c0:
         54:4a:1c:e2:0c:4b:69:0f:65:e7:61:a0:62:0e:88:cd:6f:80:
         72:fe:ca:13:e2:f8:5d:79:e7:5c:66:47:60:ac:89:2d:89:9f:
         3e:66:58:93:a5:76:81:1b:53:ef:95:7a:fc:05:f8:b4:a2:d8:
         0f:de:ed:62:56:b3:5c:dd:c0:4b:09:17:e3:e6:95:da:76:11:
         90:af:b2:cd:8a:48:6f:86:70:a6:c3:58:29:e8:3e:2c:60:36:
         c7:c1:39:00:70:b1:6c:27:1e:e2:23:50:90:0d:bb:71:02:ad:
         7a:e2:3e:96:39:3c:ff:63:fd:92:6f:8c:54:53:6b:10:99:93:
         59:09:9f:cf:17:2a:88:58:7c:de:d7:30:d6:02:b3:54:ce:15:
         26:7b:56:ac:af:33:2f:e7:05:40:13:38:3b:3d:f9:c4:af:f4:
         18:a5:5f:d1:20:8f:17:8d:3e:a7:fe:7f:6e:f6:35:9d:c4:61:
         5e:d6:4d:26:e5:13:c8:ac:2c:51:ad:06:ac:4c:59:a8:b9:8b:
         4b:c6:3e:af:64:1f:4d:dc:c3:a5:2f:b3:20:66:ea:9a:ab:ef:
         29:7b:36:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:31:22 2026 by rpki-client