Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/rT7LxCj-FH6KC7LmRIUA0xEqr2Q.cer
File:                     rT7LxCj-FH6KC7LmRIUA0xEqr2Q.cer (raw, json)
Hash identifier:          KvpjaFwmjbh/eDc0Z/11GRtwbJUP6ESz1U3+BS7vgt8=
Subject key identifier:   AD:3E:CB:C4:28:FE:14:7E:8A:0B:B2:E6:44:85:00:D3:11:2A:AF:64
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       680D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30353/rT7LxCj-FH6KC7LmRIUA0xEqr2Q.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30353/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Wed 15 Apr 2026 01:45:39 +0000
Certificate not after:    Thu 15 Apr 2027 01:30:02 +0000
Subordinate resources:    IP: 2405:5340::/32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26637 (0x680d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Apr 15 01:45:39 2026 GMT
            Not After : Apr 15 01:30:02 2027 GMT
        Subject: CN=AD3ECBC428FE147E8A0BB2E6448500D3112AAF64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ae:65:ba:4e:9f:78:e1:e6:00:b9:13:9d:fc:
                    6a:61:a0:55:0a:30:5b:1d:4c:70:a6:4b:26:91:1f:
                    2d:e8:db:61:7d:1a:af:38:0e:0a:c4:51:63:c9:3b:
                    41:d5:fe:c6:12:70:68:db:b7:a7:f0:2b:ee:cd:87:
                    3d:fa:52:2f:16:83:82:e6:12:e8:95:7e:0d:be:0b:
                    c3:10:a9:44:d4:fb:a9:d6:06:28:b0:51:11:9d:d4:
                    8e:0b:e9:2d:d1:0c:c0:65:51:e7:72:75:f0:7c:22:
                    c4:7a:0b:39:89:67:b7:00:1e:3b:39:8e:06:bf:92:
                    4b:fb:6c:d5:67:82:16:2b:28:9d:f8:bb:f8:5e:b8:
                    06:74:ba:0d:69:a5:a1:70:d3:96:62:f3:06:75:ee:
                    aa:aa:51:e6:4c:82:c9:49:8f:d4:f0:59:71:c7:ee:
                    b0:54:0d:7d:52:39:4f:1f:bb:7b:ca:c8:9a:05:56:
                    1c:ff:1b:6d:0f:1c:7e:21:d0:90:6d:d4:d0:2b:10:
                    fa:2f:51:58:ec:a9:ac:17:c1:8e:41:37:ae:46:43:
                    86:68:6a:48:9b:1d:c9:99:32:ff:c3:fe:41:76:02:
                    3c:64:b2:9d:53:58:99:a2:b3:7e:75:c3:40:ad:24:
                    5b:bb:61:70:5c:6c:ad:17:f4:e1:f3:ca:a2:23:ec:
                    96:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:3E:CB:C4:28:FE:14:7E:8A:0B:B2:E6:44:85:00:D3:11:2A:AF:64
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30353/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30353/rT7LxCj-FH6KC7LmRIUA0xEqr2Q.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:5340::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:08:27:96:bc:fa:04:97:a8:34:3c:3a:14:90:0f:77:72:59:
         37:d9:3a:eb:70:5f:a2:4d:b9:ea:7d:5f:80:ff:9e:22:25:80:
         d9:6b:1e:0f:81:88:0d:b7:0c:ac:52:c5:0b:af:60:3b:bf:16:
         eb:93:42:c9:b0:30:22:68:2a:5a:7f:30:54:4e:b9:b2:57:a1:
         f6:cc:a1:94:3e:70:72:ea:ed:f1:54:66:d0:39:02:4c:0b:f5:
         cf:77:3a:03:1f:4e:17:2c:a2:16:ab:e9:74:68:81:98:95:45:
         e0:de:43:81:41:d2:c9:36:cb:ea:6f:0d:bb:a7:2d:a8:b1:23:
         7e:90:74:50:e5:01:e6:5b:53:dd:53:29:ae:4b:44:88:f2:30:
         7e:d0:d4:23:c6:aa:ee:de:c3:a7:2c:a6:c6:9e:62:d4:b6:5b:
         56:71:87:86:cf:d9:1c:b7:a8:19:6e:2b:5c:fe:41:6b:95:ad:
         ab:04:31:34:5a:0d:45:1a:37:6a:53:96:95:30:33:65:da:02:
         8b:72:7a:98:3d:4d:a8:18:2a:06:4f:f4:34:8f:ad:ea:1f:bf:
         44:b0:6d:51:af:c0:81:de:22:dd:82:7d:90:f1:d6:e2:ac:28:
         83:37:93:a0:47:61:01:20:e5:bd:e8:3a:f1:95:18:4a:79:6a:
         74:71:24:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:15:28 2026 by rpki-client