Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/n_1hCP46yEH5IOgIwaGkN0qBIO0.cer
File:                     n_1hCP46yEH5IOgIwaGkN0qBIO0.cer (raw, json)
Hash identifier:          940GBoBStM9++QvBojQbK4p3scHhdRbmEoJsEmpQMLI=
Subject key identifier:   9F:FD:61:08:FE:3A:C8:41:F9:20:E8:08:C1:A1:A4:37:4A:81:20:ED
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       48B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30057/n_1hCP46yEH5IOgIwaGkN0qBIO0.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30057/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Tue 15 Apr 2025 01:32:18 +0000
Certificate not after:    Wed 15 Apr 2026 01:30:03 +0000
Subordinate resources:    IP: 2001:f60::/27
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18617 (0x48b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Apr 15 01:32:18 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=9FFD6108FE3AC841F920E808C1A1A4374A8120ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c4:c9:8e:30:17:fb:e2:1c:68:94:ff:ca:85:
                    86:8a:9e:e8:e5:36:1b:23:42:d0:a6:2d:83:14:d5:
                    5a:66:3d:04:2b:4a:5c:ee:92:8c:75:33:be:b7:e0:
                    24:40:af:aa:45:1f:ab:a5:d6:18:a5:e3:e9:01:51:
                    02:43:ea:9f:08:7b:f9:03:9c:f5:28:51:a9:57:da:
                    39:85:3c:8c:e6:78:3e:fd:7a:dd:53:f3:58:18:67:
                    75:04:f5:4f:bd:a1:8d:4d:36:9c:5f:88:f6:f8:b9:
                    39:3a:84:27:65:74:f2:be:df:5a:94:5d:71:40:5f:
                    1c:cd:b5:06:8e:5e:fa:ad:f2:ac:e6:da:2f:f8:ab:
                    de:7c:17:78:b7:87:b7:2e:c4:dd:4a:d3:32:17:b1:
                    d9:29:46:ae:ae:b4:25:09:da:2a:f1:93:30:ca:93:
                    03:c1:6f:13:3b:36:1c:b8:a9:7d:b0:40:49:5e:0d:
                    21:a6:4b:09:31:fc:f6:11:9e:0d:09:71:9c:c0:3b:
                    f2:24:83:70:1a:55:c0:4d:b2:41:db:f6:f5:4e:ac:
                    fb:d5:63:3a:e0:ad:62:77:77:03:34:52:7f:be:6f:
                    a7:69:14:79:05:12:8a:09:bf:9e:29:e5:44:97:28:
                    e0:4f:8d:56:70:24:07:e8:91:01:8c:bf:6c:47:17:
                    e3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:FD:61:08:FE:3A:C8:41:F9:20:E8:08:C1:A1:A4:37:4A:81:20:ED
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30057/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30057/n_1hCP46yEH5IOgIwaGkN0qBIO0.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:f60::/27

    Signature Algorithm: sha256WithRSAEncryption
         2e:8a:ab:63:38:eb:de:51:a1:c5:4c:3d:90:94:cf:62:0a:b9:
         2c:a7:b6:98:15:5b:c7:50:79:ca:67:96:10:3b:a7:80:ab:91:
         d3:c5:58:00:9d:f1:dd:79:d2:77:1d:68:06:f5:52:7c:f2:32:
         08:1c:3b:3d:7f:02:89:ab:ca:93:6c:99:32:29:fa:20:5a:12:
         ed:01:bc:56:d9:cb:db:54:97:ae:65:c1:47:a7:e5:e9:8a:36:
         53:2b:f0:bf:0b:7f:5f:73:d7:0f:54:a8:63:b8:ec:3d:84:ff:
         af:d5:23:c1:35:25:29:df:8e:1a:fe:53:ee:4d:21:ec:c0:56:
         10:4f:31:77:2a:09:74:c2:75:7e:82:4b:00:d0:23:8b:76:22:
         19:0b:d2:17:1b:c8:a0:f0:82:d2:4a:b2:eb:7b:ee:29:20:f5:
         d6:ad:93:22:86:ba:a1:17:37:c6:17:45:49:71:4c:9f:22:c1:
         37:c0:7d:06:b9:7c:89:08:e9:10:4b:53:2d:92:27:8f:51:17:
         ce:21:9b:ce:d8:e6:6b:9e:f4:19:93:23:47:6c:b1:6d:24:bb:
         58:02:60:7b:06:f4:bc:a7:a2:f6:e4:42:72:dc:26:ba:5c:7c:
         02:1c:2b:be:e0:43:5b:6f:ed:3e:4c:15:11:8e:a5:35:59:78:
         24:99:9a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:16:59 2025 by rpki-client