Certificate

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/xwTJoNEV0mBiqRaordaY8hjgCoc.cer
File:                     xwTJoNEV0mBiqRaordaY8hjgCoc.cer (raw, json)
Hash identifier:          tWx0Zr/jH9Bn02CTryp0HHoBNFNh+tVKZjCm2+/x5T4=
Subject key identifier:   C7:04:C9:A0:D1:15:D2:60:62:A9:16:A8:AD:D6:98:F2:18:E0:0A:87
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       72CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30024/xwTJoNEV0mBiqRaordaY8hjgCoc.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30024/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Tue 15 Sep 2026 01:40:16 +0000
Certificate not after:    Wed 15 Sep 2027 01:30:02 +0000
Subordinate resources:    IP: 2001:2f8::/32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 04:45:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29390 (0x72ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Sep 15 01:40:16 2026 GMT
            Not After : Sep 15 01:30:02 2027 GMT
        Subject: CN=C704C9A0D115D26062A916A8ADD698F218E00A87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cd:f8:99:f9:0d:c1:40:bc:a1:94:df:39:f7:
                    bf:43:f1:91:72:b1:f4:e0:80:58:46:36:3b:71:c4:
                    ea:87:62:b6:06:b7:71:bd:fe:4e:e2:bd:d7:41:f8:
                    ad:6b:be:96:1b:93:4e:3e:e4:83:5f:06:40:84:82:
                    60:df:47:ce:01:f4:0c:10:7a:b9:16:bf:65:0d:da:
                    44:e5:9b:3f:25:10:5d:32:5e:78:79:16:38:73:b5:
                    43:9a:e3:3a:bb:d1:e6:40:4d:bd:a8:aa:c1:f4:30:
                    f3:5b:b1:c2:05:d2:10:20:c2:cc:05:8a:70:27:d2:
                    67:58:54:cb:67:0d:5a:d9:97:7e:c2:7e:91:14:91:
                    06:a4:f0:77:73:0c:92:0c:6a:b6:19:dd:45:f7:2f:
                    ae:25:ee:05:62:83:e5:54:09:57:34:6b:d6:bb:cc:
                    08:c7:8e:82:13:fa:fc:31:0c:0b:00:42:8a:c8:1d:
                    89:1b:85:c3:e3:cd:c8:ad:03:cd:79:8f:70:07:41:
                    e5:70:96:94:3a:57:28:fa:d6:dc:5b:ab:50:30:ed:
                    a0:79:9f:3f:5f:00:8e:76:32:81:53:8e:0c:3f:d4:
                    50:f2:b5:42:9e:92:92:e7:1e:5a:22:06:51:6f:0c:
                    dd:a3:ec:4e:1e:1d:0c:4c:d9:a3:27:c9:f0:37:19:
                    5a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:04:C9:A0:D1:15:D2:60:62:A9:16:A8:AD:D6:98:F2:18:E0:0A:87
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30024/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30024/xwTJoNEV0mBiqRaordaY8hjgCoc.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:2f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:1a:85:ce:b4:c4:cb:be:d9:a3:89:90:f2:76:d7:bb:14:f4:
         3e:ac:e6:c8:46:90:1d:67:7a:9a:55:89:62:91:20:37:34:36:
         cf:3b:62:c6:73:e0:3a:7d:4a:54:38:b3:70:c0:f9:63:2f:03:
         38:7e:84:88:a7:18:6e:79:57:22:fd:20:1d:bf:ae:3e:33:d6:
         02:96:73:f9:32:48:1a:e1:fe:86:bf:00:a6:50:90:3c:bc:5a:
         b0:e8:97:bb:f8:b7:09:b3:bd:02:13:7b:44:01:00:16:37:18:
         78:0c:2b:de:df:07:34:24:da:50:89:d3:c0:88:33:d9:16:d8:
         cd:0c:ac:b9:60:f6:a7:10:fa:4d:e8:4f:79:ad:f7:1a:7a:17:
         96:bc:6c:b3:0f:1e:87:47:17:ca:f9:0d:b3:90:01:5c:64:01:
         09:2b:9e:36:00:c5:d9:d8:bd:ff:d4:b6:28:96:eb:29:b1:96:
         cb:9f:e1:1a:09:5c:a3:4a:ed:6b:ac:56:aa:08:62:52:18:28:
         8b:e4:6e:53:c4:d3:fc:4f:29:d7:61:63:7c:05:92:4e:71:7b:
         b5:06:60:01:1c:61:9f:9a:a9:39:71:62:f6:68:a3:d9:29:ee:
         0a:74:e1:23:d3:a9:2f:93:df:ec:44:b6:6b:c2:17:ac:da:3a:
         c4:31:bb:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:20:16 2026 by rpki-client