Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oa5xzag3zu9pzhFNcByGUKCo-qk.cer
File:                     oa5xzag3zu9pzhFNcByGUKCo-qk.cer (raw, json)
Hash identifier:          2HTlDXqoJsa1HTkzDyGxABj6AQ9ZtAaRl9UQV07QI+o=
Subject key identifier:   A1:AE:71:CD:A8:37:CE:EF:69:CE:11:4D:70:1C:86:50:A0:A8:FA:A9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0293FB
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://akane.maru.co.jp/repo/1073c6/14/A1AE71CDA837CEEF69CE114D701C8650A0A8FAA9.mft
caRepository:             rsync://akane.maru.co.jp/repo/1073c6/14/
Notify URL:               https://akane.maru.co.jp/oshirase.xml
Certificate not before:   Fri 27 Feb 2026 03:17:41 +0000
Certificate not after:    Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources:    AS: 7719
                          AS: 9663
                          AS: 154486
                          IP: 2001:df5:f4c0::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 13:18:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 168955 (0x293fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb 27 03:17:41 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=A91B82CE0000, serialNumber=A1AE71CDA837CEEF69CE114D701C8650A0A8FAA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7e:10:7b:4b:95:9a:71:45:6d:30:5d:90:55:
                    60:8f:54:5d:16:7d:cb:89:99:d8:c4:02:a6:62:59:
                    b2:72:27:6a:d3:fc:6f:91:a3:e2:b6:ba:29:12:22:
                    16:b5:85:db:94:1f:f4:f6:07:5d:96:7b:d8:22:f6:
                    24:ed:90:f4:6a:37:b0:d7:5f:f7:18:c9:ce:d9:2f:
                    86:d3:72:26:77:f3:04:eb:72:c7:8f:7f:d4:49:c8:
                    83:eb:49:eb:38:85:6e:0e:f6:cf:16:05:33:99:9b:
                    fa:23:da:51:e5:44:0a:b3:bf:84:9a:f2:22:0d:ad:
                    74:a5:8d:4a:47:c7:f4:54:5b:46:04:52:31:69:e2:
                    76:65:ca:e1:b8:71:9d:de:8f:17:96:37:0c:14:34:
                    08:4d:c9:f9:a3:5c:33:9c:db:c5:0a:ab:b9:83:32:
                    0f:0a:c5:f6:ce:6b:e4:db:81:4e:ed:da:75:6d:9d:
                    5e:21:de:30:43:4d:27:2c:db:09:eb:c3:f5:3c:fc:
                    e7:fa:af:f9:69:53:25:7b:b4:ee:50:0b:cf:6d:d0:
                    2b:de:ba:42:d6:ec:65:99:d1:b1:7f:26:b2:2b:c0:
                    a6:c1:bf:29:c9:7d:6a:b6:e7:56:ae:26:b4:83:48:
                    13:d6:9d:14:0a:e0:62:57:93:19:44:da:21:92:a2:
                    39:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:AE:71:CD:A8:37:CE:EF:69:CE:11:4D:70:1C:86:50:A0:A8:FA:A9
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://akane.maru.co.jp/repo/1073c6/14/
                RPKI Manifest - URI:rsync://akane.maru.co.jp/repo/1073c6/14/A1AE71CDA837CEEF69CE114D701C8650A0A8FAA9.mft
                RPKI Notify - URI:https://akane.maru.co.jp/oshirase.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  7719
                  9663
                  154486

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:f4c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:57:d7:d5:31:df:ef:09:64:ac:03:c1:c4:00:46:1f:bf:5f:
         2c:42:89:b4:a9:94:90:96:62:19:11:e4:1f:d1:57:32:20:cf:
         8a:84:5d:1c:5b:b1:3d:73:c7:a4:b4:99:83:c8:5d:f0:3b:0d:
         90:b0:3e:8c:ed:af:e4:c0:ff:75:b7:41:db:de:ac:4d:cc:a4:
         1f:cd:33:c7:08:f1:bd:e7:21:29:b0:d3:5d:07:3d:73:da:03:
         65:bf:68:fb:18:c5:42:e2:b8:38:3e:cd:55:ff:01:04:c1:af:
         b4:f4:a3:2e:24:46:2d:8b:3f:17:5f:5a:e5:2e:3f:5b:f0:7f:
         d9:fc:57:98:17:50:ed:df:02:97:fa:eb:77:8a:f8:d6:eb:31:
         5b:4d:8c:7b:00:68:54:6b:78:45:78:b7:be:0b:3c:fe:6f:f8:
         b0:f6:96:ee:6f:ca:f2:c4:e7:9f:99:77:3c:6f:28:c9:e0:5e:
         9b:3b:a6:f4:a0:ab:8c:31:9f:36:f1:e2:4d:9e:da:00:77:8a:
         09:c3:42:3a:d3:aa:4e:e9:ed:06:3b:16:c9:8c:81:a3:c2:eb:
         0a:17:f4:59:48:a7:44:2f:f0:2e:e8:16:17:b8:67:de:02:da:
         bc:d9:aa:33:e1:9c:c6:ce:e3:69:03:d8:54:8b:09:d8:bd:39:
         01:3b:95:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:47:53 2026 by rpki-client