Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/cTGT1wLDEiEU983oH9WlhnJyD4Q.cer
File:                     cTGT1wLDEiEU983oH9WlhnJyD4Q.cer (raw, json)
Hash identifier:          9HQbJm2wAgUqUfCIV2bmTFGJNRmIrVnXM2foZeDo9KI=
Subject key identifier:   71:31:93:D7:02:C3:12:21:14:F7:CD:E8:1F:D5:A5:86:72:72:0F:84
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       6323
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10694/cTGT1wLDEiEU983oH9WlhnJyD4Q.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10694/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Sun 15 Feb 2026 01:40:20 +0000
Certificate not after:    Mon 15 Feb 2027 01:30:02 +0000
Subordinate resources:    IP: 101.50.60.0/22
                          IP: 101.53.104.0/21
                          IP: 103.208.96.0/22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25379 (0x6323)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Feb 15 01:40:20 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=713193D702C3122114F7CDE81FD5A58672720F84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b4:f3:ea:aa:54:ea:71:ef:75:55:c0:b8:f9:
                    17:eb:ce:ff:11:43:da:27:d4:0b:a0:ad:16:98:78:
                    f0:e0:ca:5a:cb:a4:37:bd:92:55:84:8a:46:18:15:
                    d3:63:91:1e:4f:0e:00:41:bd:2d:94:e8:1c:11:83:
                    32:1f:b9:b6:92:a7:09:10:8c:24:d3:f8:a6:f8:05:
                    bc:ed:6a:72:43:05:2b:45:d2:e0:c4:e1:f1:dd:a6:
                    f7:ba:02:1a:c4:78:b4:62:6b:0e:47:e1:81:dd:f0:
                    d5:65:7d:38:c6:4c:ab:12:6e:ce:e0:c6:e3:94:70:
                    e2:ca:8b:30:63:e2:b0:25:4e:5f:2a:23:ca:34:be:
                    ea:a0:13:6d:a4:99:34:b1:59:1f:11:57:b9:8e:63:
                    27:38:23:62:0d:9b:5e:e2:67:5c:1f:6d:85:95:9d:
                    33:11:59:47:08:28:31:07:aa:0a:02:b8:df:61:bb:
                    8b:0d:5a:a4:19:82:2d:41:da:e9:3e:6b:59:80:f6:
                    fb:fd:a8:25:a1:db:be:3a:65:b9:f4:e7:3b:eb:0a:
                    a6:7c:e8:1c:e9:06:8e:12:51:9f:fa:94:91:db:cc:
                    01:a8:a1:5d:83:92:a7:77:24:bc:95:83:b0:29:d1:
                    e2:1d:e7:05:e5:94:60:be:6c:bf:4c:63:be:d4:b1:
                    67:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:31:93:D7:02:C3:12:21:14:F7:CD:E8:1F:D5:A5:86:72:72:0F:84
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10694/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10694/cTGT1wLDEiEU983oH9WlhnJyD4Q.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.50.60.0/22
                  101.53.104.0/21
                  103.208.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:24:07:84:bf:8b:41:5a:e3:02:8e:ac:d4:89:39:4b:2d:74:
         2b:20:3e:25:8a:53:33:b6:67:cf:f8:22:e3:c2:00:a7:02:81:
         db:32:6b:a2:a1:df:45:56:32:3b:03:26:78:db:db:d7:07:60:
         96:34:7b:bc:5e:61:bf:97:7d:0b:55:5f:0f:c3:e0:c0:8c:ce:
         fe:d3:b9:06:9d:25:c7:c3:e3:9a:08:9b:89:2a:d2:0d:36:71:
         2a:1e:58:9d:8f:db:21:0a:a9:d6:4f:4e:65:f8:88:cb:b1:3d:
         c1:b4:1a:c1:1e:61:0d:53:c3:15:2a:49:8b:4b:ee:85:04:d0:
         7c:97:ef:bf:69:eb:9d:7b:de:0e:6a:bf:36:21:0f:47:1a:02:
         66:02:66:77:61:6d:ef:6d:1f:f4:b2:b1:b1:32:18:93:29:d3:
         cc:41:ca:b1:ae:3a:d7:94:14:f4:6c:fa:7a:c8:ac:6b:2c:42:
         bd:3b:dd:f8:95:0b:0e:eb:92:3b:ea:89:ee:f8:e0:2d:a0:79:
         2f:0c:f2:0d:f6:ab:30:eb:e3:83:63:b1:49:48:6e:4d:4a:5d:
         29:9c:f1:14:32:92:72:5e:13:66:ca:32:5f:0d:85:7c:f5:c1:
         41:ee:e9:04:94:04:12:ac:87:3e:2b:32:8d:10:e0:77:18:0b:
         f0:6f:bb:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:04:34 2026 by rpki-client