Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.cer
File:                     uZC_1j-Gdbe0RWNiPkL3KSVsoeg.cer (raw, json)
Hash identifier:          R2v606y5xZn/04uJ55FFSAnqYryRUtZEfY8HIMPdtng=
Subject key identifier:   B9:90:BF:D6:3F:86:75:B7:B4:45:63:62:3E:42:F7:29:25:6C:A1:E8
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       6679
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/425/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/425/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Wed 15 Apr 2026 01:33:09 +0000
Certificate not after:    Thu 15 Apr 2027 01:30:02 +0000
Subordinate resources:    IP: 49.128.128.0/19
                          IP: 61.195.240.0/20
                          IP: 122.49.192.0/21
                          IP: 123.255.240.0/21
                          IP: 175.41.32.0/21
                          IP: 202.75.112.0/20
                          IP: 202.238.32.0/20
                          IP: 210.48.128.0/21
                          IP: 211.133.224.0/20
                          IP: 219.124.0.0/20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26233 (0x6679)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Apr 15 01:33:09 2026 GMT
            Not After : Apr 15 01:30:02 2027 GMT
        Subject: CN=B990BFD63F8675B7B44563623E42F729256CA1E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ca:10:a6:a6:eb:0d:a9:a5:a8:0a:c5:c8:48:
                    6f:8c:7f:9c:3a:a1:39:83:5b:e9:b1:59:a1:ba:9a:
                    44:5a:b2:08:72:e3:72:e8:5a:65:a2:1d:13:c7:f9:
                    70:91:cb:53:95:ad:d4:e5:2e:f7:a8:c0:b2:79:eb:
                    d9:94:6d:f4:c3:91:4f:1b:cf:62:fd:52:74:c2:da:
                    df:43:1e:a7:26:69:2d:80:ad:1b:64:94:85:a2:3e:
                    49:e5:8c:62:21:1b:d3:96:1c:be:80:ea:3c:12:4e:
                    c9:20:82:20:69:4d:11:33:ce:4d:42:74:1c:3a:d0:
                    10:5b:b5:0f:27:b3:a1:68:83:d3:93:61:08:ae:de:
                    4d:b0:66:46:ee:9b:45:01:34:3f:8b:48:6a:08:5d:
                    3a:4c:de:da:a7:d5:97:86:f7:b0:cf:81:7a:3b:52:
                    8b:75:ac:22:2f:d9:92:b9:01:64:1e:d3:d9:e0:15:
                    da:fb:95:74:73:40:f2:8c:89:d4:60:8c:7c:e1:ee:
                    8b:97:a2:32:fd:1f:c5:ae:ea:dd:5e:78:4d:48:5e:
                    f0:5d:57:86:c2:24:a0:e1:5e:4a:36:29:d9:15:78:
                    8d:70:90:28:04:9a:83:eb:99:8f:21:fa:58:c4:19:
                    07:cc:44:17:d3:98:d8:36:be:20:ac:bf:7c:06:98:
                    d6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:90:BF:D6:3F:86:75:B7:B4:45:63:62:3E:42:F7:29:25:6C:A1:E8
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/425/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/425/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.128.128.0/19
                  61.195.240.0/20
                  122.49.192.0/21
                  123.255.240.0/21
                  175.41.32.0/21
                  202.75.112.0/20
                  202.238.32.0/20
                  210.48.128.0/21
                  211.133.224.0/20
                  219.124.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         58:81:6e:a9:72:53:2d:7a:96:d4:f2:0b:de:bb:61:3d:5a:26:
         a3:b3:90:6f:30:c1:f4:b7:9e:fc:3b:f5:61:72:02:e7:99:c1:
         76:99:71:6e:73:75:c2:3e:1b:cb:db:5f:6c:76:d0:57:e8:02:
         6d:a1:b5:55:49:be:03:1e:31:6d:eb:e1:f1:2a:dd:a3:02:d0:
         16:e6:af:65:1b:73:17:e6:5f:16:69:9c:06:ba:00:b9:d8:82:
         58:a9:6f:60:54:10:e6:92:fb:cb:d6:f8:9e:95:ec:f6:ee:bd:
         0e:c5:3c:e8:16:b1:51:c9:0b:78:2b:1f:67:cf:00:38:e6:b2:
         9d:e0:53:b5:36:ac:7b:85:5f:26:e5:76:31:a1:8d:10:c6:04:
         50:b0:55:eb:46:52:c8:7a:35:71:7c:b0:ec:cf:2b:ca:90:40:
         dc:30:fb:16:7f:c4:9e:1d:51:3c:73:e9:40:10:27:46:8b:df:
         7d:c3:07:76:47:47:b6:c2:9c:f0:bc:db:f6:95:ae:8d:fe:7e:
         04:f6:56:68:6d:f7:c5:e8:ee:91:41:d0:34:36:1b:e9:04:ce:
         eb:4c:c0:08:50:5d:f6:c5:b2:6d:70:f5:a2:58:e9:bd:6c:fe:
         7d:31:f5:bc:e4:ba:d8:eb:4f:6e:c5:b7:c1:1a:63:35:1c:9d:
         9c:b4:29:79
-----BEGIN CERTIFICATE-----
MIIFtzCCBJ+gAwIBAgICZnkwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC
NTIwREFBQzdEQThGMB4XDTI2MDQxNTAxMzMwOVoXDTI3MDQxNTAxMzAwMlowMzEx
MC8GA1UEAxMoQjk5MEJGRDYzRjg2NzVCN0I0NDU2MzYyM0U0MkY3MjkyNTZDQTFF
ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK/KEKam6w2ppagKxchI
b4x/nDqhOYNb6bFZobqaRFqyCHLjcuhaZaIdE8f5cJHLU5Wt1OUu96jAsnnr2ZRt
9MORTxvPYv1SdMLa30MepyZpLYCtG2SUhaI+SeWMYiEb05YcvoDqPBJOySCCIGlN
ETPOTUJ0HDrQEFu1DyezoWiD05NhCK7eTbBmRu6bRQE0P4tIaghdOkze2qfVl4b3
sM+BejtSi3WsIi/ZkrkBZB7T2eAV2vuVdHNA8oyJ1GCMfOHui5eiMv0fxa7q3V54
TUhe8F1XhsIkoOFeSjYp2RV4jXCQKASag+uZjyH6WMQZB8xEF9OY2Da+IKy/fAaY
1gcCAwEAAaOCArwwggK4MB0GA1UdDgQWBBS5kL/WP4Z1t7RFY2I+QvcpJWyh6DAf
BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0
b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa
dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j
Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0
NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G
A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB
7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw
L2FwL0E5MUE3MzgxMDAwMC80MjUvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt
cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzQyNS91WkNfMWot
R2RiZTBSV05pUGtMM0tTVnNvZWcubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw
a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s
MFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQFMYCAAwQEPcPwAwQDejHAAwQD
e//wAwQDrykgAwQEyktwAwQEyu4gAwQD0jCAAwQE04XgAwQE23wAMA0GCSqGSIb3
DQEBCwUAA4IBAQBYgW6pclMtepbU8gveu2E9Wiajs5BvMMH0t578O/VhcgLnmcF2
mXFuc3XCPhvL219sdtBX6AJtobVVSb4DHjFt6+HxKt2jAtAW5q9lG3MX5l8WaZwG
ugC52IJYqW9gVBDmkvvL1vielez27r0OxTzoFrFRyQt4Kx9nzwA45rKd4FO1Nqx7
hV8m5XYxoY0QxgRQsFXrRlLIejVxfLDszyvKkEDcMPsWf8SeHVE8c+lAECdGi999
wwd2R0e2wpzwvNv2la6N/n4E9lZobffF6O6RQdA0NhvpBM7rTMAIUF32xbJtcPWi
WOm9bP59MfW85LrY609uxbfBGmM1HJ2ctCl5
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:08:15 2026 by rpki-client