Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1iPDjCoScAf5PnyEDfh1Ai5RxUc.cer
File:                     1iPDjCoScAf5PnyEDfh1Ai5RxUc.cer (raw, json)
Hash identifier:          ba4Fn3ySKxiQlWoVzzaXrzAh25lfyncW7bMzLEKoCAs=
Subject key identifier:   D6:23:C3:8C:2A:12:70:07:F9:3E:7C:84:0D:F8:75:02:2E:51:C5:47
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       5B31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/224/1iPDjCoScAf5PnyEDfh1Ai5RxUc.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/224/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Wed 15 Oct 2025 01:39:15 +0000
Certificate not after:    Thu 15 Oct 2026 01:30:02 +0000
Subordinate resources:    IP: 202.213.96.0/19
                          IP: 202.245.196.0/23
                          IP: 210.167.0.0/19
                          IP: 210.250.160.0/19
                          IP: 211.120.192.0/20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 21:55:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23345 (0x5b31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Oct 15 01:39:15 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=D623C38C2A127007F93E7C840DF875022E51C547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:39:e8:47:f1:0d:fc:d6:0b:47:75:7d:c0:5b:
                    09:d8:50:91:c3:90:a8:db:75:11:1a:3e:6a:b3:f4:
                    8f:cf:23:e6:53:c4:da:41:e7:fd:6c:ee:4a:ee:67:
                    9a:0e:dc:34:90:c4:1f:20:04:04:e8:e0:03:b2:be:
                    01:10:e7:76:4a:ce:a7:c9:1d:65:51:53:f4:0c:47:
                    9b:13:84:84:15:b6:98:65:05:1b:97:26:af:71:3a:
                    43:d0:5b:bf:2f:16:37:80:c9:e4:c4:3f:18:e9:b3:
                    d7:01:df:15:61:77:1e:c5:b1:57:e7:5c:70:8b:03:
                    69:e9:d3:24:2c:4e:d9:44:fe:cc:ea:a6:a8:5f:f8:
                    2a:14:88:38:16:90:76:b7:a9:48:81:2d:67:e1:f7:
                    c2:c4:2f:17:0a:48:1e:2a:5a:de:84:37:a9:50:c6:
                    46:f2:71:0a:1e:e1:e2:d5:00:73:6c:c5:be:da:66:
                    9e:bb:51:09:08:5f:3c:db:c8:35:89:11:4d:44:5d:
                    d4:d7:cf:22:ea:26:ef:e0:50:2a:79:81:85:1b:37:
                    73:f9:bc:26:03:19:6a:54:86:17:95:e9:7f:97:07:
                    55:82:36:7e:7c:6d:21:50:31:8a:b4:03:32:bc:9f:
                    a3:b3:02:39:bb:cb:cd:75:ee:40:e7:60:ad:2f:c2:
                    a3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:23:C3:8C:2A:12:70:07:F9:3E:7C:84:0D:F8:75:02:2E:51:C5:47
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/224/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/224/1iPDjCoScAf5PnyEDfh1Ai5RxUc.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.213.96.0/19
                  202.245.196.0/23
                  210.167.0.0/19
                  210.250.160.0/19
                  211.120.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a1:32:fd:0b:01:82:e3:b6:3b:af:d1:d8:48:aa:5e:f5:42:1f:
         ff:14:dd:a7:eb:74:04:d3:40:61:90:8e:1e:02:30:68:c2:31:
         14:da:2f:60:08:28:5c:8b:11:d0:fd:e8:92:8e:45:c4:00:0d:
         21:3a:03:11:de:39:a5:de:db:7a:65:de:60:cd:aa:39:96:17:
         c7:7c:6b:ca:ca:0c:cd:2d:80:a5:98:04:ec:1a:6c:13:1b:82:
         d1:af:08:ec:da:d3:4f:4d:54:b6:29:e5:78:83:ec:29:0c:16:
         25:b6:46:32:b2:4a:2c:e6:aa:d1:a8:5e:89:30:16:13:17:5d:
         4c:42:24:d6:eb:6c:5f:3d:6c:c6:f7:8f:0e:e3:0d:67:b1:a6:
         e6:e7:35:77:1b:cb:f4:1a:52:b3:86:12:f8:51:f2:a6:01:df:
         9d:80:81:ff:e9:8b:71:60:6d:5f:df:d2:a1:0b:31:3b:ec:23:
         91:25:ca:8f:00:03:b6:84:cd:26:ba:3f:79:44:47:8b:ca:2c:
         5e:dd:84:03:07:9f:32:45:1f:db:b7:62:4a:25:d6:93:ff:22:
         cd:ba:78:b1:4c:6a:f0:8a:47:8f:c8:fc:0c:87:90:7d:06:ab:
         72:44:59:9d:5a:64:f6:65:bb:a5:04:25:1c:83:2a:81:19:57:
         64:99:ee:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:40:10 2025 by rpki-client