Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/4oKHAq-VJLLD1X4biwxkliVmlJw.cer
File:                     4oKHAq-VJLLD1X4biwxkliVmlJw.cer (raw, json)
Hash identifier:          LJiU+h6PdJZ0nuU6RQa0ji5T5YnXSsVJPmXe+BcUCzo=
Subject key identifier:   E2:82:87:02:AF:95:24:B2:C3:D5:7E:1B:8B:0C:64:96:25:66:94:9C
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       5B81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30376/4oKHAq-VJLLD1X4biwxkliVmlJw.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30376/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Wed 15 Oct 2025 01:42:09 +0000
Certificate not after:    Thu 15 Oct 2026 01:30:02 +0000
Subordinate resources:    IP: 2407:58c0::/32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 17:27:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23425 (0x5b81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Oct 15 01:42:09 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=E2828702AF9524B2C3D57E1B8B0C64962566949C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:76:f9:3f:55:c9:c1:51:e3:78:cc:6b:2a:f6:
                    53:0a:24:1c:59:3f:17:10:18:32:ea:2b:24:8a:fd:
                    6b:ae:2c:ce:fb:8d:dc:74:1c:4d:6c:e3:39:72:0c:
                    ed:09:04:37:88:5c:92:0c:94:8e:73:aa:0f:2f:2d:
                    3a:3a:1f:eb:62:32:99:f4:a8:85:ca:bf:6a:80:01:
                    04:2c:80:1c:76:e6:71:7a:2f:4f:0b:17:4a:7c:fa:
                    04:f2:9a:9f:74:c1:63:15:4c:51:9c:25:13:cd:9c:
                    b4:8a:27:cf:4f:24:6d:18:cc:d3:1a:20:2e:92:43:
                    3f:f9:4a:3f:e7:d2:a9:75:14:9c:d2:d0:62:8f:23:
                    4e:ee:5d:df:29:d6:f8:18:b1:99:55:3f:f4:20:e2:
                    17:28:63:03:b2:d0:02:8f:b8:cb:18:0b:69:50:16:
                    3c:17:44:45:3b:c5:d8:80:c3:8c:ae:8e:cb:c5:86:
                    3f:94:59:5a:8b:cf:b9:bc:69:8b:23:77:39:98:72:
                    90:fd:28:de:be:cb:b8:68:5e:bd:54:7b:8d:69:98:
                    77:eb:14:6d:ca:86:40:97:bc:4e:3d:6f:bb:e8:1f:
                    0c:ca:45:30:88:5c:c3:d0:ee:f9:c7:f6:7d:c2:10:
                    d2:90:14:97:ff:00:fa:af:bb:dd:62:fc:a7:41:a5:
                    84:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:82:87:02:AF:95:24:B2:C3:D5:7E:1B:8B:0C:64:96:25:66:94:9C
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30376/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30376/4oKHAq-VJLLD1X4biwxkliVmlJw.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:58c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:38:1d:d5:32:b4:85:00:70:a5:fa:5c:2b:32:b7:39:1c:8f:
         76:ef:08:e1:6e:b3:7b:7e:eb:47:77:a4:8d:8a:b4:bc:81:30:
         fc:e1:01:9e:92:eb:17:3f:de:91:8a:9f:14:07:6b:59:b3:c4:
         ec:1c:f4:04:8a:a6:1d:47:da:22:8e:6b:2d:7e:7d:88:e4:47:
         99:01:f5:3e:fc:55:c4:87:88:76:9b:ac:2a:ce:bf:56:fd:e7:
         ba:11:ce:9a:76:91:8b:c0:b8:53:3f:5b:5b:9f:52:88:21:88:
         de:47:3a:77:02:a3:d9:01:bc:70:19:ee:d3:f7:d0:69:dc:44:
         12:b1:06:c1:5d:22:3f:63:de:36:6e:41:9e:5e:4d:a9:ef:77:
         92:2f:52:89:7c:c0:9a:e5:06:aa:c7:03:d9:f6:24:0a:74:b8:
         8a:f8:54:a3:be:42:97:09:cc:bd:e0:9e:a2:5a:2d:e1:78:f8:
         42:38:1c:84:6e:76:5d:5c:71:39:6a:01:19:f9:27:fc:b1:15:
         5d:7b:43:7c:0e:d8:02:da:32:ec:aa:6f:f7:cb:7d:6b:ce:da:
         d8:27:a4:49:95:c3:8d:85:86:48:ff:49:f3:9d:c9:0e:82:a2:
         44:57:54:4d:a7:38:32:0e:e2:21:3d:15:89:07:9f:ce:e8:8c:
         0b:36:b5:61
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgICW4EwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC
NTIwREFBQzdEQThGMB4XDTI1MTAxNTAxNDIwOVoXDTI2MTAxNTAxMzAwMlowMzEx
MC8GA1UEAxMoRTI4Mjg3MDJBRjk1MjRCMkMzRDU3RTFCOEIwQzY0OTYyNTY2OTQ5
QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALR2+T9VycFR43jMayr2
UwokHFk/FxAYMuorJIr9a64szvuN3HQcTWzjOXIM7QkEN4hckgyUjnOqDy8tOjof
62IymfSohcq/aoABBCyAHHbmcXovTwsXSnz6BPKan3TBYxVMUZwlE82ctIonz08k
bRjM0xogLpJDP/lKP+fSqXUUnNLQYo8jTu5d3ynW+BixmVU/9CDiFyhjA7LQAo+4
yxgLaVAWPBdERTvF2IDDjK6Oy8WGP5RZWovPubxpiyN3OZhykP0o3r7LuGhevVR7
jWmYd+sUbcqGQJe8Tj1vu+gfDMpFMIhcw9Du+cf2fcIQ0pAUl/8A+q+73WL8p0Gl
hNcCAwEAAaOCAowwggKIMB0GA1UdDgQWBBTigocCr5UkssPVfhuLDGSWJWaUnDAf
BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0
b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa
dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j
Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0
NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G
A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw
gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9hcC9BOTFBNzM4MTAwMDAvMzAzNzYvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw
a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMzc2LzRv
S0hBcS1WSkxMRDFYNGJpd3hrbGlWbWxKdy5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz
Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv
bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkB1jAMA0GCSqGSIb3
DQEBCwUAA4IBAQA/OB3VMrSFAHCl+lwrMrc5HI927wjhbrN7futHd6SNirS8gTD8
4QGekusXP96Rip8UB2tZs8TsHPQEiqYdR9oijmstfn2I5EeZAfU+/FXEh4h2m6wq
zr9W/ee6Ec6adpGLwLhTP1tbn1KIIYjeRzp3AqPZAbxwGe7T99Bp3EQSsQbBXSI/
Y942bkGeXk2p73eSL1KJfMCa5QaqxwPZ9iQKdLiK+FSjvkKXCcy94J6iWi3hePhC
OByEbnZdXHE5agEZ+Sf8sRVde0N8DtgC2jLsqm/3y31rztrYJ6RJlcONhYZI/0nz
nckOgqJEV1RNpzgyDuIhPRWJB5/O6IwLNrVh
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:29:07 2025 by rpki-client