Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/sEtqduG_YW1rQFBoSjO7kwzBjDI.cer
File:                     sEtqduG_YW1rQFBoSjO7kwzBjDI.cer (raw, json)
Hash identifier:          uh7GU+I30rYqRaYMPddXoYuadXZC4QIZRgOv74b9d0E=
Subject key identifier:   B0:4B:6A:76:E1:BF:61:6D:6B:40:50:68:4A:33:BB:93:0C:C1:8C:32
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       666C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/221/sEtqduG_YW1rQFBoSjO7kwzBjDI.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/221/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Wed 15 Apr 2026 01:32:47 +0000
Certificate not after:    Thu 15 Apr 2027 01:30:02 +0000
Subordinate resources:    IP: 103.4.40.0/22
                          IP: 202.255.63.0/24
                          IP: 210.133.96.0/20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26220 (0x666c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Apr 15 01:32:47 2026 GMT
            Not After : Apr 15 01:30:02 2027 GMT
        Subject: CN=B04B6A76E1BF616D6B4050684A33BB930CC18C32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f8:59:1c:f3:9a:74:cc:65:aa:b8:1f:23:2f:
                    9f:70:72:72:22:66:a4:4b:a0:2d:0d:32:8d:41:8f:
                    e7:19:35:7e:b3:bf:5d:01:ce:00:b7:bc:24:27:bb:
                    72:af:c0:88:b3:52:5f:7b:86:0e:ab:90:f3:4d:0f:
                    14:62:f7:1a:63:23:ab:50:22:bb:eb:d7:39:d4:3b:
                    72:ff:12:74:9f:5d:4b:ac:39:21:9c:9e:ae:c8:d1:
                    ff:47:8e:47:36:d4:52:1b:ec:4e:25:3d:a5:0e:ad:
                    e2:a5:87:29:f7:e0:cd:30:78:68:a5:2f:5b:a9:fe:
                    f9:5f:17:02:bc:24:95:1e:6b:80:30:57:f5:7a:5e:
                    73:45:5d:27:31:1e:40:d5:b5:e8:c5:6d:b5:f8:98:
                    e0:04:6f:34:22:ea:e3:9a:e1:c1:ee:de:af:ba:e2:
                    f2:56:db:0b:51:49:39:ec:b5:2f:c9:84:64:ff:d0:
                    9c:d5:57:15:a1:cd:65:02:ee:b8:0f:94:97:84:11:
                    26:db:72:b0:95:f5:73:56:88:21:1c:98:16:9d:ed:
                    e4:e4:4d:45:fd:5f:35:e1:84:b9:e4:c6:b5:68:bc:
                    a9:42:ec:a1:91:7f:bd:48:ce:0a:6b:54:3d:bd:08:
                    ed:c3:29:5b:a1:ba:cd:d6:16:d4:ad:d8:92:8e:2c:
                    78:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:4B:6A:76:E1:BF:61:6D:6B:40:50:68:4A:33:BB:93:0C:C1:8C:32
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/221/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/221/sEtqduG_YW1rQFBoSjO7kwzBjDI.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.4.40.0/22
                  202.255.63.0/24
                  210.133.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         13:56:71:13:d6:42:36:d7:96:0b:8d:c7:2b:66:86:07:02:eb:
         80:28:97:d8:50:e2:b0:b1:19:d0:22:ab:4a:3e:2b:a8:cf:cd:
         2a:d8:69:de:a1:b4:fe:56:e8:a8:c5:e6:95:1e:e1:f2:78:83:
         f1:2b:7e:15:85:fb:69:76:ba:95:a7:4f:b8:57:2b:84:00:bb:
         06:e9:27:9a:3d:16:88:db:80:e8:e2:fa:62:bd:18:0c:16:e7:
         59:fd:35:9f:5d:f3:1c:c4:d8:67:47:2b:a7:c2:a3:20:21:1a:
         1a:21:87:a2:a9:7d:c9:92:6b:e8:63:84:33:be:52:bd:50:72:
         1c:20:0f:b2:30:24:13:20:ae:d9:7f:55:3a:85:dc:3a:2c:69:
         cf:de:18:75:58:79:fa:10:b2:46:c5:9f:6f:25:df:07:e4:65:
         97:82:01:3f:d1:48:35:dc:27:ae:07:58:f7:c1:bb:be:bc:d9:
         35:99:43:d6:7b:ae:f4:af:96:80:00:37:de:5c:85:a3:dc:26:
         90:81:2e:7c:87:b7:59:55:dc:16:8a:ef:38:6e:d1:5e:93:e2:
         14:ec:df:2b:30:d6:a8:da:79:b7:8d:88:34:b7:a9:a9:ff:89:
         63:d2:48:9e:52:9a:6a:93:4b:d7:b9:9e:a4:63:d3:1b:b5:a6:
         18:14:4c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:06:59 2026 by rpki-client