Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/PbsW67aNlauUvG44o6PxmiX25sA.cer
File:                     PbsW67aNlauUvG44o6PxmiX25sA.cer (raw, json)
Hash identifier:          huNWUS/TMlrYuSAoVCEnbHAY9LQG5Rd0kR4bdXyfPYs=
Subject key identifier:   3D:BB:16:EB:B6:8D:95:AB:94:BC:6E:38:A3:A3:F1:9A:25:F6:E6:C0
Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2
Certificate issuer:       /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2
Certificate serial:       15D2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2344/PbsW67aNlauUvG44o6PxmiX25sA.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2344/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Wed 15 Apr 2026 01:45:13 +0000
Certificate not after:    Thu 15 Apr 2027 01:30:02 +0000
Subordinate resources:    IP: 160.17.0.0/16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5586 (0x15d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2
        Validity
            Not Before: Apr 15 01:45:13 2026 GMT
            Not After : Apr 15 01:30:02 2027 GMT
        Subject: CN=3DBB16EBB68D95AB94BC6E38A3A3F19A25F6E6C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:65:0e:26:ad:78:54:47:02:86:fd:68:d9:22:
                    84:0b:f8:40:ab:c9:c5:5c:f8:f7:c4:b2:37:3a:a9:
                    7d:5f:81:ce:90:b6:e1:6a:7b:b1:4a:1e:d8:29:ae:
                    cc:c1:c2:ce:55:79:7e:cf:da:ad:3c:6a:48:ac:da:
                    8b:f9:3a:e1:a2:97:e5:94:35:68:cc:a9:ca:51:cc:
                    5c:23:44:68:02:3a:df:07:57:98:c2:24:23:59:9b:
                    1b:75:a9:12:6d:c0:23:22:e6:3d:a8:7b:b4:00:fe:
                    7a:df:c2:b4:43:dd:aa:41:8f:2a:88:eb:5d:42:58:
                    5c:cd:20:83:d3:c7:c6:f3:46:6d:fe:d3:4d:aa:8e:
                    4e:bd:8d:75:9d:9a:ab:e6:5f:f7:6c:97:fc:9a:4c:
                    e0:5f:00:af:8d:e9:3a:59:ce:fb:4b:d4:ca:ae:23:
                    96:38:82:bd:5e:06:f6:65:7f:b4:49:5f:46:21:ba:
                    51:40:80:19:4a:62:2e:92:fc:e2:90:8f:1f:f5:f5:
                    a3:b6:35:10:44:df:87:69:ce:3c:9c:1e:2b:1f:68:
                    24:65:84:e1:dc:10:62:68:9a:d3:8c:48:25:27:7b:
                    68:99:a7:0e:ac:ba:2c:11:85:e7:47:14:2d:fb:09:
                    ad:82:1b:7b:e5:c7:d3:d2:dc:d9:ba:f4:ab:20:07:
                    e6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:BB:16:EB:B6:8D:95:AB:94:BC:6E:38:A3:A3:F1:9A:25:F6:E6:C0
            X509v3 Authority Key Identifier:
                keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2344/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2344/PbsW67aNlauUvG44o6PxmiX25sA.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.17.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4f:70:15:b8:50:34:db:a9:a0:eb:11:a0:95:59:5f:c7:93:8f:
         78:d1:53:54:80:21:0f:c8:a3:5c:24:57:c4:0d:87:bc:f0:37:
         e1:99:27:1b:83:de:11:83:9a:05:b7:8e:fe:cf:03:3c:84:53:
         55:f8:31:fa:cc:36:b0:2f:7b:62:c4:c9:36:3c:38:8c:4b:2d:
         4a:8c:c6:e2:96:57:1e:80:69:a5:a3:ff:1a:3f:12:78:d4:8d:
         03:15:45:22:74:02:b8:58:ae:c2:e1:15:19:28:a7:d2:2c:27:
         a1:91:bf:a9:28:4e:1c:1c:c9:58:06:7e:2b:12:f1:02:7d:4f:
         69:c8:7e:ea:8a:f0:86:1d:66:f6:78:57:72:34:27:66:c8:3a:
         69:12:07:78:f3:c3:a4:54:e0:e9:75:93:51:55:aa:26:dd:7d:
         c2:bb:9c:66:71:eb:91:03:f5:f8:b1:88:8a:32:bc:78:bd:9d:
         bc:36:ed:86:23:0f:d7:51:9e:0c:e2:3d:82:10:9f:da:a9:b5:
         09:29:e6:ad:3d:07:cc:bd:9d:83:4d:70:82:21:fc:05:6f:5d:
         64:73:1f:02:44:e5:17:e9:7c:0e:fd:0c:9c:c4:5c:83:e1:da:
         6e:19:ef:29:86:0d:59:77:aa:31:04:11:44:68:8f:3c:99:a1:
         3a:7e:9c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:30:53 2026 by rpki-client