Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/3YKdZG1T7PKYlQtodTLekm7H68A.cer
File:                     3YKdZG1T7PKYlQtodTLekm7H68A.cer (raw, json)
Hash identifier:          TGRTrmvJ1dyPcFMuitN1Qx1G03MbAubbuimecb8t4dY=
Subject key identifier:   DD:82:9D:64:6D:53:EC:F2:98:95:0B:68:75:32:DE:92:6E:C7:EB:C0
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       5A42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/3YKdZG1T7PKYlQtodTLekm7H68A.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Wed 15 Oct 2025 01:32:13 +0000
Certificate not after:    Thu 15 Oct 2026 01:30:02 +0000
Subordinate resources:    IP: 103.141.34.0/23
                          IP: 115.31.80.0/21
                          IP: 202.84.48.0/20
                          IP: 202.226.56.0/22
                          IP: 211.14.200.0/21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23106 (0x5a42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Oct 15 01:32:13 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=DD829D646D53ECF298950B687532DE926EC7EBC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:37:d4:1b:95:3d:1b:8f:cf:21:bf:c3:20:95:
                    b0:dc:ac:ad:af:20:81:9a:3f:07:56:30:59:ff:8d:
                    f9:e9:59:1b:ac:fe:04:ed:90:13:44:97:12:16:26:
                    e6:3c:8a:14:4c:47:3f:ce:8d:31:61:0f:e3:40:5e:
                    09:da:ac:03:e9:c0:4a:87:dc:66:a3:ee:d7:94:2f:
                    e2:a6:18:f7:8a:2c:ab:c3:6b:4a:d8:ca:60:ef:bc:
                    42:75:69:a4:b3:ba:bc:81:ea:a3:9b:dc:94:94:73:
                    53:96:18:f5:6d:5d:0f:0e:4e:02:4b:df:59:ce:31:
                    1c:aa:87:58:ab:0d:81:13:3a:e9:0e:56:46:3b:f8:
                    0a:d7:31:69:7e:e5:73:4f:13:a3:9d:e1:75:73:e4:
                    3a:d0:5d:57:84:a4:ba:7e:94:ac:21:16:5b:0c:59:
                    74:77:d6:21:62:32:74:b2:86:e2:ee:bc:b8:7b:ff:
                    e4:f8:4a:59:d3:3d:00:30:a6:ad:e0:22:16:90:5d:
                    c1:44:ad:1c:0f:7e:be:04:ed:da:fa:53:2b:b5:ba:
                    e1:94:54:7e:0d:38:48:5d:a2:e8:17:0e:73:14:9f:
                    d6:48:b4:b6:2b:91:74:8d:50:45:bc:13:cc:25:f2:
                    c6:38:d2:5e:d9:29:65:d4:c8:96:40:c4:57:42:36:
                    c7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:82:9D:64:6D:53:EC:F2:98:95:0B:68:75:32:DE:92:6E:C7:EB:C0
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/3YKdZG1T7PKYlQtodTLekm7H68A.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.34.0/23
                  115.31.80.0/21
                  202.84.48.0/20
                  202.226.56.0/22
                  211.14.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         87:1e:e5:d2:0d:c3:9a:5b:0d:da:ca:c9:cd:f0:85:60:f3:36:
         b8:79:51:d6:e3:a5:15:20:7c:d7:05:ef:0f:63:b6:d4:48:01:
         88:59:8a:49:8f:bf:4b:71:af:62:64:7d:d2:1d:8e:37:e6:f1:
         03:65:fe:46:14:d8:83:e8:8f:46:bf:80:9a:44:fa:eb:cb:00:
         47:f5:97:c4:82:75:f5:d0:79:73:87:fe:71:26:a0:2d:3b:3b:
         7b:5a:17:c0:a3:49:c5:3b:f5:8e:b5:dc:92:96:51:c0:0f:a3:
         b2:c5:13:2d:44:1f:13:06:dc:07:5a:df:ed:07:54:dd:38:a1:
         00:1e:28:6c:c7:e4:a1:b3:e4:52:fc:33:c1:c4:ad:60:6e:49:
         d7:a2:e5:c6:b8:3b:4d:e5:66:1d:71:6e:ca:c9:8b:5b:63:2e:
         31:c5:95:e3:08:a3:09:ab:c6:84:a6:e2:6b:f5:ca:f7:b4:90:
         81:7d:9f:37:6b:91:fb:37:24:99:ad:cb:5e:4d:9d:d3:df:cd:
         5a:ca:3d:2d:31:3b:ec:b6:c0:b2:be:6d:ab:c0:6e:51:95:81:
         15:62:ea:6b:aa:ab:76:42:9b:a2:63:c9:96:ab:1b:34:14:0b:
         72:ce:0e:d6:7d:7a:cc:1f:04:dd:b0:19:5c:1c:ab:19:5e:cf:
         ee:91:50:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:24:01 2025 by rpki-client