Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/r9gkd6CRsXzaYcVWO8KSDNzXqqU.cer
File:                     r9gkd6CRsXzaYcVWO8KSDNzXqqU.cer (raw, json)
Hash identifier:          zXozFDtI7vZspRa2mVmU3Vk7WgYIJoCxD5h2I3WILUw=
Subject key identifier:   AF:D8:24:77:A0:91:B1:7C:DA:61:C5:56:3B:C2:92:0C:DC:D7:AA:A5
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       55B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/r9gkd6CRsXzaYcVWO8KSDNzXqqU.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Wed 30 Jul 2025 06:42:04 +0000
Certificate not after:    Thu 30 Jul 2026 06:29:08 +0000
Subordinate resources:    IP: 103.144.122.0/23
                          IP: 133.32.192.0/21
                          IP: 133.226.176.0/21
                          IP: 202.233.72.0/22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21942 (0x55b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Jul 30 06:42:04 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=AFD82477A091B17CDA61C5563BC2920CDCD7AAA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e0:28:97:f3:a5:31:74:98:62:e4:0d:0a:0f:
                    27:80:fc:f7:84:ec:3a:61:41:d3:55:cc:3a:1a:b2:
                    2e:6d:3f:c7:39:f1:57:83:62:fc:e6:ab:4c:98:c9:
                    55:0d:f1:5a:1b:22:1d:04:27:5e:30:aa:85:68:54:
                    d7:b3:14:3e:75:ec:41:f9:f0:d7:b0:ec:fd:84:97:
                    5d:82:4c:83:7e:ce:80:da:d1:58:6f:e0:86:73:73:
                    a1:44:ba:63:dd:e3:04:d9:85:2b:8d:42:96:d7:00:
                    d0:6f:e4:c3:8b:31:f9:f5:ba:5f:ea:88:85:52:c5:
                    cf:3d:82:1e:f8:a8:06:36:90:d7:84:86:89:d5:a2:
                    bd:36:10:c9:94:74:bf:c0:77:68:e9:51:b4:52:ab:
                    c0:cb:bb:24:76:f1:f3:cd:2d:0b:ad:46:71:8a:2d:
                    a7:cd:19:58:f4:00:a3:ea:89:f7:46:cc:6f:b8:47:
                    64:56:1d:9c:34:74:c0:d3:15:8c:6e:43:4b:49:92:
                    3c:93:7f:35:5c:82:cc:56:6d:9c:8c:6b:71:b6:83:
                    5a:fb:e7:86:c4:85:a2:0c:2b:3a:c5:da:0d:5f:b3:
                    72:6e:cf:53:86:6b:6d:dd:c5:2d:15:11:68:52:be:
                    c4:44:32:28:09:1c:db:de:f3:8f:3e:7f:0d:76:ee:
                    03:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:D8:24:77:A0:91:B1:7C:DA:61:C5:56:3B:C2:92:0C:DC:D7:AA:A5
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/r9gkd6CRsXzaYcVWO8KSDNzXqqU.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.122.0/23
                  133.32.192.0/21
                  133.226.176.0/21
                  202.233.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:e2:7f:05:2d:56:4a:00:57:66:ff:87:98:bb:84:25:37:8e:
         39:c7:b0:4c:87:3d:93:e3:3b:44:92:d6:e6:28:f3:ea:b4:eb:
         d2:76:0e:5c:a1:21:69:06:00:8a:14:93:00:ba:ea:1e:3e:4d:
         46:a7:7c:f2:4b:b1:a3:a4:a4:f2:48:74:22:f1:1e:77:61:74:
         65:e5:ce:ce:57:5b:2d:f1:1e:b0:f1:b6:23:4d:1b:f9:52:82:
         40:85:4b:28:fd:21:f9:67:00:60:eb:b7:68:3b:3c:1e:11:84:
         92:52:79:94:6d:66:b9:e4:f5:da:50:71:34:f3:7b:fd:84:21:
         0d:66:20:7d:bc:1e:a4:b2:0b:11:05:37:e0:88:cc:fc:a2:86:
         10:92:fd:6f:3e:00:60:24:1c:79:30:68:30:07:88:6a:1d:4c:
         a7:40:51:96:93:59:9d:18:62:e7:1f:ef:88:92:9a:fe:58:a8:
         64:40:5c:8c:d3:39:9e:ad:05:23:a8:6b:be:47:45:5d:1a:55:
         ff:d6:1c:f7:55:3f:f5:d0:29:18:72:b7:bf:d0:4f:e2:f8:c2:
         3b:13:f4:05:1e:a5:4e:9f:9c:28:ef:1f:c9:3f:58:7d:cb:f9:
         0e:19:84:e2:6c:6b:6f:0b:07:31:f8:b4:ef:d5:e1:02:fb:3f:
         11:0c:ad:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 08:07:31 2025 by rpki-client