Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/u6c_64jhyYfVPdLDsttCdUXro3Q.cer
File:                     u6c_64jhyYfVPdLDsttCdUXro3Q.cer (raw, json)
Hash identifier:          cvhbyv7Vfpi0qOWc1IaEgdo51XADenWkwO6kd53plqY=
Subject key identifier:   BB:A7:3F:EB:88:E1:C9:87:D5:3D:D2:C3:B2:DB:42:75:45:EB:A3:74
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       49A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/536/u6c_64jhyYfVPdLDsttCdUXro3Q.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/536/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Tue 15 Apr 2025 01:37:47 +0000
Certificate not after:    Wed 15 Apr 2026 01:30:03 +0000
Subordinate resources:    IP: 103.5.140.0/22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18853 (0x49a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Apr 15 01:37:47 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=BBA73FEB88E1C987D53DD2C3B2DB427545EBA374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:60:9f:ce:ce:df:29:5c:18:fb:63:88:80:ca:
                    f7:68:d4:b3:c3:62:7c:7f:47:f7:38:b8:e0:ef:b0:
                    26:8a:79:48:7b:d1:d2:6d:8f:c2:03:db:f9:ed:23:
                    e1:da:9b:ba:28:16:bd:0d:37:8f:bf:c9:47:95:1a:
                    45:12:1b:b1:7e:67:a3:77:1c:35:eb:ca:d6:a0:6b:
                    14:e7:04:87:e8:59:65:5c:d0:a4:44:cb:0d:b9:5b:
                    d4:be:03:92:bf:8f:97:0d:2e:e6:dd:0d:73:dd:33:
                    7d:18:eb:06:97:f8:c7:d6:a8:f5:a8:64:ca:85:4c:
                    2f:68:4e:0f:63:a9:fa:bf:49:fa:18:f0:d7:36:03:
                    45:94:a5:30:33:ae:2e:3e:04:10:c7:4c:de:a2:79:
                    4e:c0:76:f4:09:f8:76:f3:24:f7:10:c5:86:08:1f:
                    9e:bb:be:aa:06:57:c3:3c:13:87:83:43:49:70:b3:
                    83:fe:33:62:52:d3:aa:c0:86:2c:0b:6c:0b:ee:07:
                    ad:b9:4a:a2:20:be:0c:be:e0:cb:a5:8b:e7:0f:74:
                    16:93:7d:cd:66:bc:14:57:96:9c:cd:39:19:c7:74:
                    fc:62:70:27:a8:f8:42:c4:43:fc:e1:3b:a3:2b:78:
                    69:82:8a:22:27:c9:06:39:47:a2:ac:5f:84:81:aa:
                    36:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:A7:3F:EB:88:E1:C9:87:D5:3D:D2:C3:B2:DB:42:75:45:EB:A3:74
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/536/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/536/u6c_64jhyYfVPdLDsttCdUXro3Q.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:00:a3:d6:4c:17:31:d6:d9:d3:1f:d3:0f:a4:b3:0a:de:b9:
         96:d1:e1:60:d1:f0:50:51:b0:cf:44:c7:63:37:f3:39:79:c7:
         76:00:a7:b1:1a:13:98:1d:ee:0e:d6:72:14:7c:c7:e8:d0:89:
         fb:79:0c:d6:ac:35:a3:54:79:69:52:62:6d:d2:a6:90:eb:1f:
         ec:90:dd:48:81:9e:88:10:6c:b7:ac:3b:0a:82:e6:d0:91:2e:
         17:7a:52:41:a9:ef:79:bf:00:37:59:6d:f5:78:9c:e6:8a:05:
         b2:bc:fc:9d:41:bb:30:cd:b5:8b:7b:80:ac:f4:d7:ec:d9:9d:
         53:0a:df:6c:d8:a7:1e:42:84:ee:7b:dc:d1:03:61:c0:17:32:
         7a:8e:3e:cd:0a:e6:27:d7:9e:73:c3:53:71:ac:e3:29:5d:49:
         0d:45:96:b1:26:d7:cb:35:08:23:f7:89:81:26:4d:d6:0f:39:
         cd:61:be:83:2c:8c:82:2f:d0:3a:99:12:ce:f7:51:a0:ec:27:
         1b:c5:a8:f4:35:4a:6f:1d:83:4b:fc:e7:83:1d:e3:fa:7a:39:
         04:4a:ac:47:31:ff:db:7d:60:af:b8:57:cb:41:62:1d:6b:0f:
         bf:8c:7a:cc:28:7d:82:d8:fc:15:a5:c6:d8:7a:48:d0:c1:12:
         60:de:4f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:24:14 2025 by rpki-client