Certificate

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/po7KKdBstMAGEbpK2FJvBJDMbn0.cer
File:                     po7KKdBstMAGEbpK2FJvBJDMbn0.cer (raw, json)
Hash identifier:          fpBLlxbOQerY22/t5PYfFgaNK1A+Yx3gIgkaOBuun/U=
Subject key identifier:   A6:8E:CA:29:D0:6C:B4:C0:06:11:BA:4A:D8:52:6F:04:90:CC:6E:7D
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       737D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30140/po7KKdBstMAGEbpK2FJvBJDMbn0.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30140/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Thu 15 Oct 2026 01:31:52 +0000
Certificate not after:    Fri 15 Oct 2027 01:30:02 +0000
Subordinate resources:    IP: 2402:d600::/32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Nov 2026 02:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29565 (0x737d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Oct 15 01:31:52 2026 GMT
            Not After : Oct 15 01:30:02 2027 GMT
        Subject: CN=A68ECA29D06CB4C00611BA4AD8526F0490CC6E7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:70:db:76:5a:6e:df:2a:3f:83:c5:59:ae:a9:
                    0b:b6:45:11:df:ae:4a:50:9e:6e:00:bf:a6:c6:cf:
                    e7:1b:98:42:f6:59:59:79:7f:92:ba:8e:2b:cf:4b:
                    ae:56:32:10:f8:8c:23:12:31:ad:9b:87:d8:f0:31:
                    ba:33:6b:5e:b2:e9:dd:6a:50:1b:d0:d0:b1:55:c9:
                    81:94:fe:24:b3:7e:a8:cf:bc:60:32:74:c5:b6:5a:
                    d8:27:28:c3:d9:01:ce:70:e3:d8:3f:ee:e1:8c:20:
                    d8:25:ed:d6:08:eb:90:88:ff:b8:fb:b6:01:a9:f0:
                    e1:ca:42:4a:5a:14:f4:b6:1b:2b:06:82:38:4a:3d:
                    fb:85:9e:9f:3d:0d:9d:68:17:2e:d0:f3:99:93:f9:
                    5b:aa:d5:31:1c:bb:fb:b5:e7:ef:e0:ff:2c:ab:ef:
                    44:a0:d3:cb:f5:63:e1:47:c9:36:79:e3:5d:f8:d3:
                    62:7c:91:76:7d:dc:ff:e4:8f:da:34:2d:8c:25:08:
                    da:d4:24:23:27:65:8d:b9:5a:eb:19:39:44:fd:91:
                    8f:d5:8d:45:7a:fe:32:74:e6:39:cd:2d:f0:29:ba:
                    fa:d6:19:a4:2c:28:c0:6f:2a:0a:78:fa:99:b0:ce:
                    f0:a4:e3:5d:88:e8:9b:2c:a0:79:e2:94:9a:7e:67:
                    58:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:8E:CA:29:D0:6C:B4:C0:06:11:BA:4A:D8:52:6F:04:90:CC:6E:7D
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30140/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30140/po7KKdBstMAGEbpK2FJvBJDMbn0.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:d600::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:f4:18:f9:a0:71:4c:72:5f:15:d9:5a:45:cb:d9:52:a8:d2:
         31:e1:75:a3:27:62:cd:83:2a:fb:69:ca:02:a2:e5:fe:d9:7b:
         d9:f4:d1:9a:e0:45:e0:44:dc:46:63:4e:90:1e:73:e8:3c:96:
         8f:3d:3d:af:0e:28:fd:33:ab:81:81:22:06:b0:9b:a8:58:41:
         aa:e5:34:82:ec:3a:e1:52:e6:0d:44:da:d3:12:03:f1:a0:f3:
         3d:ee:34:e2:97:0f:51:21:af:0a:61:23:3f:0c:a0:76:4e:47:
         8c:96:00:13:8f:45:77:c6:7e:aa:b7:d9:1a:05:13:e8:24:ee:
         df:25:c2:66:33:06:ac:21:a5:68:6c:7f:e8:4d:32:a7:25:de:
         c6:f6:bf:2b:66:86:61:cd:63:91:44:38:c2:7f:53:51:0c:0b:
         4c:da:36:5d:ae:42:51:ad:84:5a:44:6c:52:fc:27:a4:af:16:
         e3:0d:73:0d:c7:aa:9b:0e:06:23:c0:ac:2d:06:91:ce:db:dd:
         e1:2a:f2:12:1d:0c:27:9a:fa:c9:7a:35:17:46:85:fa:4e:8a:
         03:6c:55:88:42:c6:c9:92:7c:fd:25:12:58:2d:97:d7:8a:84:
         da:54:b6:a8:f8:01:b4:9d:24:51:d1:d2:83:01:e5:d8:3d:c1:
         bb:99:9c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 14:54:04 2026 by rpki-client