Certificate

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/_OvnvRuI6xUg2pjVaS5nPgpN0q8.cer
File:                     _OvnvRuI6xUg2pjVaS5nPgpN0q8.cer (raw, json)
Hash identifier:          tX/IAQlhJ6eRoJ2ud9IzecMbly5Pv3DHWsRIi7OcJ20=
Subject key identifier:   FC:EB:E7:BD:1B:88:EB:15:20:DA:98:D5:69:2E:67:3E:0A:4D:D2:AF
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       71D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/514/_OvnvRuI6xUg2pjVaS5nPgpN0q8.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/514/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Tue 15 Sep 2026 01:35:13 +0000
Certificate not after:    Wed 15 Sep 2027 01:30:02 +0000
Subordinate resources:    IP: 27.253.128.0/17
                          IP: 223.25.128.0/18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 04:45:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29143 (0x71d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Sep 15 01:35:13 2026 GMT
            Not After : Sep 15 01:30:02 2027 GMT
        Subject: CN=FCEBE7BD1B88EB1520DA98D5692E673E0A4DD2AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:08:57:5d:46:0c:ff:35:e3:24:3b:77:6a:37:
                    d4:ad:b9:88:d9:a5:87:a1:6f:01:7e:ea:22:69:09:
                    d3:56:65:48:12:64:84:ea:f5:6a:b3:fb:00:46:14:
                    b8:cb:3a:2d:89:35:85:54:14:bd:ad:fc:00:9c:9b:
                    bb:e0:ed:a7:e7:f6:5d:ca:bc:a4:00:a8:3d:10:cf:
                    16:7e:e9:b4:c3:25:52:d2:02:78:72:57:c6:8e:66:
                    42:6e:2c:c5:e5:e3:05:cb:27:5d:fd:4b:90:5d:1a:
                    6d:8a:d2:c2:d8:2d:b9:ce:c8:e0:6f:95:c7:40:5d:
                    45:c0:9a:e4:50:9c:e4:f6:10:87:82:db:3f:00:16:
                    ab:6a:dd:4e:4a:4e:2f:cf:24:d3:29:02:72:7f:94:
                    33:09:5b:d7:07:b3:34:08:da:11:37:35:a9:ff:9a:
                    15:9d:8b:80:74:d9:1d:81:7f:fd:fd:8d:61:1a:c1:
                    45:62:9c:7d:87:ff:54:c5:5a:0e:1a:39:9c:35:8b:
                    ba:3f:d1:98:1f:d9:e0:c4:a2:6a:05:05:56:be:e8:
                    cc:72:ac:a9:f7:90:72:db:b6:94:7f:68:ab:2c:80:
                    a0:0f:d5:8c:8f:e5:62:8f:63:15:8d:17:13:d2:8e:
                    89:5c:7e:81:3e:5e:c2:c4:06:cc:d8:44:cb:3e:97:
                    b0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:EB:E7:BD:1B:88:EB:15:20:DA:98:D5:69:2E:67:3E:0A:4D:D2:AF
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/514/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/514/_OvnvRuI6xUg2pjVaS5nPgpN0q8.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.253.128.0/17
                  223.25.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         47:0c:5e:17:d9:ea:e8:8e:4e:e0:3d:a2:62:fa:23:de:a3:b5:
         89:73:ca:02:c5:74:42:bf:2e:e1:93:b2:6e:47:0b:a2:c3:08:
         02:08:ac:7e:4c:10:61:5a:2d:cc:ee:6d:ea:bd:85:eb:a6:2c:
         0e:bd:4d:02:7c:14:41:46:68:2e:24:d8:49:29:4d:bd:b6:87:
         d9:1f:23:67:46:ca:f3:b0:2c:c8:11:19:de:f0:66:f2:42:cf:
         a3:2f:88:91:e1:4b:a9:a7:53:48:89:dd:23:7f:3d:0e:a2:14:
         01:ee:55:4e:dc:15:1a:09:98:68:32:6f:4a:bc:26:36:e1:82:
         3b:81:41:6d:4f:c7:89:7f:c2:93:45:a4:24:d0:38:e0:e4:ef:
         5d:72:99:00:cb:e8:bd:69:ef:78:62:fb:4d:31:15:fd:c0:50:
         5d:7e:bf:d4:a8:f0:64:01:e2:31:90:8f:54:91:cf:26:97:b9:
         60:b8:61:25:ec:8b:15:a4:41:b7:52:13:9c:1d:c6:12:15:fd:
         45:32:0a:2d:26:72:d2:b6:4b:6d:fd:b5:56:f5:45:5c:d5:17:
         02:96:45:17:a7:85:22:dc:10:38:6c:79:0b:ef:4c:c9:43:1c:
         79:66:e8:dd:92:6a:89:32:31:cd:10:8c:9b:3e:09:d5:af:9f:
         8f:5f:82:33
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgICcdcwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC
NTIwREFBQzdEQThGMB4XDTI2MDkxNTAxMzUxM1oXDTI3MDkxNTAxMzAwMlowMzEx
MC8GA1UEAxMoRkNFQkU3QkQxQjg4RUIxNTIwREE5OEQ1NjkyRTY3M0UwQTRERDJB
RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKcIV11GDP814yQ7d2o3
1K25iNmlh6FvAX7qImkJ01ZlSBJkhOr1arP7AEYUuMs6LYk1hVQUva38AJybu+Dt
p+f2Xcq8pACoPRDPFn7ptMMlUtICeHJXxo5mQm4sxeXjBcsnXf1LkF0abYrSwtgt
uc7I4G+Vx0BdRcCa5FCc5PYQh4LbPwAWq2rdTkpOL88k0ykCcn+UMwlb1wezNAja
ETc1qf+aFZ2LgHTZHYF//f2NYRrBRWKcfYf/VMVaDho5nDWLuj/RmB/Z4MSiagUF
Vr7ozHKsqfeQctu2lH9oqyyAoA/VjI/lYo9jFY0XE9KOiVx+gT5ewsQGzNhEyz6X
sPcCAwEAAaOCAowwggKIMB0GA1UdDgQWBBT86+e9G4jrFSDamNVpLmc+Ck3SrzAf
BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0
b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa
dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j
Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0
NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G
A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB
7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw
L2FwL0E5MUE3MzgxMDAwMC81MTQvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt
cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzUxNC9fT3ZudlJ1
STZ4VWcycGpWYVM1blBncE4wcTgubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw
a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQHG/2AAwQG3xmAMA0GCSqGSIb3
DQEBCwUAA4IBAQBHDF4X2erojk7gPaJi+iPeo7WJc8oCxXRCvy7hk7JuRwuiwwgC
CKx+TBBhWi3M7m3qvYXrpiwOvU0CfBRBRmguJNhJKU29tofZHyNnRsrzsCzIERne
8GbyQs+jL4iR4Uupp1NIid0jfz0OohQB7lVO3BUaCZhoMm9KvCY24YI7gUFtT8eJ
f8KTRaQk0Djg5O9dcpkAy+i9ae94YvtNMRX9wFBdfr/UqPBkAeIxkI9Ukc8ml7lg
uGEl7IsVpEG3UhOcHcYSFf1FMgotJnLStktt/bVW9UVc1RcClkUXp4Ui3BA4bHkL
70zJQxx5ZujdkmqJMjHNEIybPgnVr5+PX4Iz
-----END CERTIFICATE-----
Generated at Mon Sep 21 09:09:59 2026 by rpki-client