Certificate

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
File:                     xJ5k-3yMfGtc18dwGILoWXxCg44.cer (raw, json)
Hash identifier:          VrdBavI4GW70IZedxhQWvtOced4qrwFuJNlvEpvpZTE=
Subject key identifier:   C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       75D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
CRL Distribution Point:   rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Sun 15 Nov 2026 01:32:32 +0000
Certificate not after:    Mon 15 Nov 2027 01:30:02 +0000
Subordinate resources:    IP: 43.223.0.0/16
                          IP: 103.2.12.0/22
                          IP: 103.2.28.0/24
                          IP: 103.2.30.0/23
                          IP: 103.2.244.0/22
                          IP: 118.151.224.0/19
                          IP: 119.235.224.0/24
                          IP: 119.235.232.0/24
                          IP: 119.235.235.0 -- 119.235.237.255
                          IP: 124.147.32.0/19
                          IP: 182.22.0.0/17
                          IP: 202.93.64.0/19
                          IP: 202.239.0.0/20
                          IP: 203.104.128.0 -- 203.104.158.255
                          IP: 203.141.32.0/20
                          IP: 203.141.54.0/24
                          IP: 203.216.224.0/19
                          IP: 211.14.8.0/24
                          IP: 211.14.12.0/22
                          IP: 211.14.20.0/22
                          IP: 211.14.26.0 -- 211.14.29.255
                          IP: 219.100.144.0/22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 17:14:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30160 (0x75d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Nov 15 01:32:32 2026 GMT
            Not After : Nov 15 01:30:02 2027 GMT
        Subject: CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f7:a6:ab:4d:7b:5a:d9:e6:61:5d:fa:57:bb:
                    62:f9:97:88:e5:84:9c:93:01:af:25:4a:88:d8:a1:
                    06:ad:8d:9f:37:f2:dc:be:ea:98:96:ff:cc:eb:c8:
                    3e:7f:1d:d8:ac:b6:30:99:97:ea:23:ef:e4:e7:11:
                    8d:70:8c:d9:df:c9:ea:af:27:16:e2:84:6e:ee:ca:
                    35:77:ea:63:2b:be:e8:c9:98:bd:64:09:65:61:f3:
                    25:71:4b:5f:de:0e:ad:59:ad:3b:7f:cb:61:7a:b7:
                    1e:b5:d5:bc:e1:a1:9a:f0:63:c9:f4:41:2a:d4:ec:
                    38:96:75:25:a6:de:0e:1c:d3:35:a9:a9:09:62:0e:
                    90:7a:86:80:41:4c:48:0b:df:9b:0c:bb:91:65:98:
                    be:97:c1:57:68:f5:d8:d7:df:09:bf:ec:c7:8a:5d:
                    04:c5:57:de:35:e2:50:1b:bb:27:a7:06:82:e4:89:
                    a4:2f:08:d2:94:40:86:6c:13:87:4f:fd:4c:5b:ed:
                    db:6b:2e:48:35:bc:38:30:c9:e6:da:72:8b:85:de:
                    fa:ec:e1:1c:6e:3b:b1:49:70:2a:79:a3:48:ea:40:
                    86:4f:cb:6b:5f:9c:11:16:a9:77:b1:b6:c6:8d:82:
                    d7:94:ad:39:97:cb:41:f2:86:1f:15:89:36:c4:35:
                    34:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.223.0.0/16
                  103.2.12.0/22
                  103.2.28.0/24
                  103.2.30.0/23
                  103.2.244.0/22
                  118.151.224.0/19
                  119.235.224.0/24
                  119.235.232.0/24
                  119.235.235.0-119.235.237.255
                  124.147.32.0/19
                  182.22.0.0/17
                  202.93.64.0/19
                  202.239.0.0/20
                  203.104.128.0-203.104.158.255
                  203.141.32.0/20
                  203.141.54.0/24
                  203.216.224.0/19
                  211.14.8.0/24
                  211.14.12.0/22
                  211.14.20.0/22
                  211.14.26.0-211.14.29.255
                  219.100.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:8d:a6:16:af:33:da:98:ad:fc:4a:dd:75:ec:8f:9c:03:a9:
         15:22:be:5d:50:34:de:bb:5f:f4:a9:1c:54:dc:1f:ce:6f:c0:
         e3:47:2c:65:a7:f4:d7:e5:df:b7:1e:00:b3:74:6b:f2:c3:b4:
         5d:68:26:1b:33:9b:ea:49:ea:9a:37:00:52:bf:d6:01:01:91:
         ab:fb:46:55:6c:9c:07:da:7f:a3:95:15:ce:01:f2:b3:2f:4c:
         e6:66:27:87:c1:00:90:b4:a9:bc:02:4c:57:6c:84:c2:7b:6a:
         b7:eb:6c:f3:e7:80:4e:58:ea:b1:ff:61:3c:6d:2a:a2:89:02:
         ac:b8:da:d7:a7:80:16:8b:8e:68:ce:50:26:d6:8e:6e:ea:9b:
         cf:8d:7e:93:57:e7:af:78:e2:0f:31:01:7f:17:3b:3e:a4:2c:
         a9:63:60:1b:e2:1d:d4:2f:c2:68:bd:8f:1b:3f:a4:ab:a4:bb:
         2c:d4:a4:0f:4d:c9:0d:0c:5f:3e:1a:44:24:38:cd:3e:08:1c:
         81:0f:88:b7:0f:89:5b:60:9e:d1:64:6f:75:8b:7d:8f:84:56:
         ee:c4:3d:d5:5c:b7:b9:5a:01:fc:9b:b0:d9:b4:8d:82:f6:f3:
         3e:00:be:ed:64:b4:c2:65:a0:ee:60:b7:c0:7e:5b:fe:27:c7:
         d5:c5:d3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:57:02 2026 by rpki-client