Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
File:                     miG9_y3K_ME49b_WwDMNAhng9TI.cer (raw, json)
Hash identifier:          pnobsyBRzNkBZEvbygvYXNooOvlFY9nkKPoae58mGjc=
Subject key identifier:   9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       5543
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Wed 30 Jul 2025 06:38:40 +0000
Certificate not after:    Thu 30 Jul 2026 06:29:08 +0000
Subordinate resources:    IP: 27.131.240.0/21
                          IP: 27.133.128.0/19
                          IP: 27.133.247.0 -- 27.133.255.255
                          IP: 27.134.240.0/20
                          IP: 36.53.0.0 -- 36.53.191.255
                          IP: 59.106.0.0/16
                          IP: 61.211.224.0/20
                          IP: 110.44.128.0/20
                          IP: 110.232.160.0/20
                          IP: 112.109.0.0/20
                          IP: 113.20.160.0/19
                          IP: 122.202.96.0/19
                          IP: 153.121.0.0/17
                          IP: 153.125.224.0/20
                          IP: 163.43.0.0/16
                          IP: 175.28.48.0/22
                          IP: 180.131.127.0/24
                          IP: 202.181.96.0/20
                          IP: 202.222.16.0/20
                          IP: 202.242.89.0/24
                          IP: 210.188.224.0/19
                          IP: 210.229.64.0/21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21827 (0x5543)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Jul 30 06:38:40 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e6:0f:f9:55:e6:c7:49:ce:1e:34:b7:68:55:
                    96:6c:50:36:ed:41:15:29:e2:6c:c8:9e:5f:1a:93:
                    c1:cc:db:3a:1f:f5:d4:80:1f:96:4c:8f:4b:66:d8:
                    05:39:89:61:a4:72:d8:24:e3:48:63:c1:a0:ff:27:
                    74:27:6f:00:76:70:ff:ba:c2:2b:98:7a:a2:94:2d:
                    c9:2c:2d:7e:30:25:69:c9:27:69:30:17:75:2c:e5:
                    ac:a6:48:24:66:5e:5f:f5:72:df:e1:b8:92:8f:d6:
                    8d:52:54:82:cc:22:f4:40:55:f9:8f:cf:ab:22:92:
                    db:03:06:71:9e:e1:7a:93:92:dd:32:5d:6f:ff:60:
                    90:e5:87:b5:62:e8:83:34:f4:96:75:b2:ea:dd:91:
                    97:b3:58:18:6a:cc:3b:da:95:54:8c:39:cb:41:5c:
                    30:8d:6c:75:39:48:f4:37:55:ce:c1:fa:95:5d:da:
                    17:7f:15:7e:35:76:18:a4:90:7b:e9:6f:5a:1e:a7:
                    bc:33:9e:41:ba:e4:43:72:3a:ae:24:c9:85:2c:99:
                    b4:33:fd:6b:85:9b:86:da:de:94:10:38:02:78:c9:
                    09:df:04:bd:54:b8:d2:75:2e:d0:d2:02:fe:20:d1:
                    24:49:2f:b2:b8:fa:86:a3:ad:04:bd:44:b0:19:8e:
                    9a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.131.240.0/21
                  27.133.128.0/19
                  27.133.247.0-27.133.255.255
                  27.134.240.0/20
                  36.53.0.0-36.53.191.255
                  59.106.0.0/16
                  61.211.224.0/20
                  110.44.128.0/20
                  110.232.160.0/20
                  112.109.0.0/20
                  113.20.160.0/19
                  122.202.96.0/19
                  153.121.0.0/17
                  153.125.224.0/20
                  163.43.0.0/16
                  175.28.48.0/22
                  180.131.127.0/24
                  202.181.96.0/20
                  202.222.16.0/20
                  202.242.89.0/24
                  210.188.224.0/19
                  210.229.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4d:14:71:80:55:11:35:fc:fd:bc:f3:a2:96:81:b5:88:49:54:
         38:cc:74:8e:88:20:3b:6c:aa:de:74:87:c9:47:7f:10:c2:b5:
         1d:57:e8:47:8a:bd:d4:d6:18:95:19:be:32:69:c0:a5:29:36:
         89:ee:ea:f8:3f:83:96:7b:c5:87:fa:c0:35:1e:63:42:fe:cb:
         45:86:44:bb:16:a2:f3:9c:15:86:17:13:94:8b:1b:4e:2a:ab:
         73:ea:1a:39:20:a0:22:39:57:7e:7a:b5:2e:a4:3c:ea:57:c5:
         dc:2b:bb:83:2b:13:c4:ea:1a:48:e1:31:12:88:95:f4:64:b0:
         f9:29:f4:e1:44:e5:28:3c:75:e3:8f:0b:dd:e4:a3:54:dd:f4:
         c7:af:42:5b:83:c7:a9:fd:a1:97:f1:d3:7a:e6:a2:a1:0d:16:
         38:51:f3:6d:a2:7a:48:1f:cb:95:a7:9b:75:31:33:bd:86:a6:
         dd:01:fe:45:34:01:44:15:66:e3:21:4a:1d:04:90:8c:17:6c:
         69:89:e5:a6:65:04:02:29:a6:b5:b2:b5:6c:92:68:0f:cf:b3:
         50:b7:71:09:a4:67:f6:08:06:09:84:17:86:23:44:90:e6:c5:
         90:20:0e:15:48:e5:66:b7:50:d8:38:ed:ea:48:9d:f8:43:a5:
         69:81:55:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:46:04 2025 by rpki-client