Certificate

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/ht9ESoCt6i07iOxmTUpZPxX1JRc.cer
File:                     ht9ESoCt6i07iOxmTUpZPxX1JRc.cer (raw, json)
Hash identifier:          m2F9eSpbDHZBbhK3G0+/zhWSwCW2KRYdEMcd2ISg5w0=
Subject key identifier:   86:DF:44:4A:80:AD:EA:2D:3B:88:EC:66:4D:4A:59:3F:15:F5:25:17
Authority key identifier: D1:95:7E:C5:8C:08:F3:5B:AA:6B:FE:77:E4:5A:97:40:BA:47:1F:9E
Certificate issuer:       /CN=A91A73810000/serialNumber=D1957EC58C08F35BAA6BFE77E45A9740BA471F9E
Certificate serial:       02F6
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/ht9ESoCt6i07iOxmTUpZPxX1JRc.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Tue 15 Sep 2026 01:30:19 +0000
Certificate not after:    Wed 15 Sep 2027 01:30:02 +0000
Subordinate resources:    IP: 85.131.192.0/18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 08:22:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 758 (0x2f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=D1957EC58C08F35BAA6BFE77E45A9740BA471F9E
        Validity
            Not Before: Sep 15 01:30:19 2026 GMT
            Not After : Sep 15 01:30:02 2027 GMT
        Subject: CN=86DF444A80ADEA2D3B88EC664D4A593F15F52517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d8:85:13:c4:82:2b:14:54:13:6a:c0:e6:4a:
                    21:4b:a3:6f:3f:a0:85:17:4c:35:61:47:e4:4a:12:
                    70:fd:91:92:57:44:0a:80:be:7c:74:61:7a:44:c7:
                    7e:00:9b:3e:20:4a:43:02:bd:ef:15:ab:85:24:fc:
                    76:e0:e8:a2:4c:11:98:33:d1:ef:8f:37:06:23:5e:
                    6c:7d:a3:b0:0f:45:b7:d1:d1:6f:c2:d7:98:f9:68:
                    b1:eb:42:32:a8:28:30:08:c3:1e:a3:4c:af:c4:d9:
                    af:74:e8:7c:85:64:aa:92:da:07:fb:cb:c3:ec:87:
                    45:16:08:31:47:e9:90:ef:26:7d:31:f1:ec:02:ff:
                    6c:4a:4e:24:00:c1:e4:b1:57:7b:4b:70:9d:5a:ec:
                    7b:7c:04:cb:04:14:a9:cf:da:73:aa:d6:77:44:cd:
                    88:c3:08:40:0d:78:44:64:6a:18:7d:6f:e0:73:91:
                    29:5c:56:77:14:82:90:1b:c8:af:75:3d:51:18:cb:
                    41:32:6f:01:b1:3d:e9:00:01:22:88:27:ff:e4:d1:
                    58:e6:36:5e:f1:dd:99:de:97:16:18:a8:bd:c0:7d:
                    40:c7:b1:82:94:02:cc:00:16:69:46:57:15:d7:7a:
                    39:6d:4d:e1:3e:0b:40:15:78:54:c1:59:c0:f2:c7:
                    d3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:DF:44:4A:80:AD:EA:2D:3B:88:EC:66:4D:4A:59:3F:15:F5:25:17
            X509v3 Authority Key Identifier:
                keyid:D1:95:7E:C5:8C:08:F3:5B:AA:6B:FE:77:E4:5A:97:40:BA:47:1F:9E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/ht9ESoCt6i07iOxmTUpZPxX1JRc.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.131.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         cd:a5:d9:ea:6a:bf:e2:d2:84:4b:4f:54:2e:ab:bb:bf:2f:58:
         36:a5:94:48:0f:d3:78:46:0c:3e:0d:2c:55:12:b0:f8:89:91:
         3f:c9:ac:79:1f:58:ee:34:0d:3f:3f:79:fc:52:b5:41:e3:db:
         64:26:cd:ed:f8:15:ea:4f:42:49:e8:82:43:b1:8a:eb:67:94:
         66:94:d4:c6:20:80:09:b8:29:37:c6:55:56:f7:e6:5f:e8:3c:
         d4:10:87:39:5f:26:1a:ec:4f:a7:44:5b:1a:94:05:41:10:85:
         5d:9c:76:72:a8:4f:82:ed:05:51:d3:52:d0:04:82:85:a9:20:
         e6:c6:6c:84:b5:9e:8f:05:94:87:08:9e:18:0a:a3:0a:ba:fd:
         f1:3e:bd:cf:7e:35:35:cf:f4:34:62:b0:f5:77:23:e3:ca:b4:
         a9:99:a9:9f:15:18:a3:80:1e:a4:23:d9:15:c7:13:9e:02:2c:
         aa:8b:47:83:c3:13:8a:20:e2:9d:d0:9c:19:2e:9b:1e:11:eb:
         fa:0f:93:d2:75:29:cb:8f:f9:41:ea:d5:b0:9f:24:6d:b0:b5:
         d8:77:28:45:20:ad:d6:dc:18:c3:24:de:00:40:6b:b7:67:1c:
         e3:b3:52:69:82:c6:af:f3:ab:3c:c8:3b:c2:d7:ac:b5:c3:25:
         ad:2a:32:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:06:48 2026 by rpki-client