Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6ESHjyExP90FqcNFb_9ImIXcqmU.cer
File:                     6ESHjyExP90FqcNFb_9ImIXcqmU.cer (raw, json)
Hash identifier:          XElU+GBUG7fVIXM4MSdtKKVsmprLz5ulv8ky8TUpCj8=
Subject key identifier:   E8:44:87:8F:21:31:3F:DD:05:A9:C3:45:6F:FF:48:98:85:DC:AA:65
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       517F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30403/6ESHjyExP90FqcNFb_9ImIXcqmU.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30403/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Sun 15 Jun 2025 01:36:43 +0000
Certificate not after:    Mon 15 Jun 2026 01:30:02 +0000
Subordinate resources:    IP: 2400:8120::/32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20863 (0x517f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Jun 15 01:36:43 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=E844878F21313FDD05A9C3456FFF489885DCAA65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e6:24:ab:55:66:4b:80:39:62:75:df:dc:9e:
                    06:be:97:12:67:9c:99:6b:8c:8e:5a:ce:05:94:85:
                    5e:14:7b:dc:39:e2:35:30:79:a9:47:5c:ff:51:09:
                    d9:c3:14:3f:4e:ab:6e:04:bf:dc:f1:0a:f9:2b:8c:
                    22:11:b1:07:86:b0:2d:7a:09:f3:54:26:99:1f:f5:
                    93:ba:b1:a5:8b:ae:fc:46:8c:68:1c:c3:aa:32:5f:
                    17:68:d1:ec:1b:12:be:70:a3:68:13:8b:3f:f1:20:
                    77:7a:89:8a:2e:1d:56:7d:e2:02:f6:2b:0b:f8:c8:
                    b7:05:e4:23:1c:a8:95:29:75:9d:7e:fa:88:a4:c7:
                    c9:0d:5d:3f:b2:f0:64:a8:22:e7:05:31:68:f7:42:
                    43:a2:f3:51:ed:7d:27:36:c8:9c:bf:09:a6:09:4b:
                    76:13:d6:9f:95:6e:7e:1a:14:91:17:92:2a:5b:54:
                    7d:57:ce:fc:64:47:fb:59:3c:65:13:ef:a4:07:4b:
                    3b:fa:04:9b:5d:6a:29:d0:ed:de:b2:85:d6:0c:97:
                    42:76:1d:45:6f:22:76:fb:d2:29:2c:a2:b6:76:6b:
                    49:8b:1a:7c:f9:b4:52:93:72:58:fe:c6:a3:50:ec:
                    35:97:e2:68:30:53:03:b3:5b:15:b2:60:a1:0d:85:
                    ea:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:44:87:8F:21:31:3F:DD:05:A9:C3:45:6F:FF:48:98:85:DC:AA:65
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30403/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30403/6ESHjyExP90FqcNFb_9ImIXcqmU.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:8120::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:84:ca:89:23:9e:c6:a4:59:13:95:55:02:25:c3:d4:ab:30:
         22:b7:fa:4b:36:71:57:17:cb:ba:eb:6f:65:4c:9d:b4:f4:52:
         9e:ca:83:bd:bb:a7:c9:a7:a5:af:ab:e1:3b:80:88:f9:38:68:
         c0:cb:08:ad:98:80:96:dc:be:b8:bd:c7:ca:18:c8:76:d3:5b:
         cc:70:5e:d5:1e:c7:07:02:a6:03:3e:b7:08:ae:24:0e:c0:ec:
         e8:f0:dd:9d:39:1d:6e:cf:bf:48:35:34:48:f6:d8:e1:3b:04:
         59:76:fd:c3:bf:e3:ff:1d:65:56:c8:ed:64:25:23:08:23:bb:
         11:6c:70:35:04:c0:e3:e0:de:23:cb:8c:71:b1:d5:0f:60:ef:
         8e:73:2c:ce:ef:72:a2:bf:27:30:6d:b7:71:1a:be:2e:c0:7f:
         8b:50:29:26:2f:36:25:89:01:dc:d8:8c:fd:c1:d2:84:3f:61:
         37:a3:04:f8:05:c5:0a:bc:a0:d6:b8:e5:f5:20:84:27:b2:05:
         18:44:78:02:f1:b2:13:f8:9a:c0:6e:13:53:49:ac:20:0e:0d:
         e3:84:b8:e1:bf:91:8d:68:11:0d:85:4d:42:eb:75:80:fd:08:
         f5:86:f8:75:d7:95:cc:c8:65:06:6a:81:8f:bc:52:f5:85:62:
         fa:dc:52:4d
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgICUX8wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC
NTIwREFBQzdEQThGMB4XDTI1MDYxNTAxMzY0M1oXDTI2MDYxNTAxMzAwMlowMzEx
MC8GA1UEAxMoRTg0NDg3OEYyMTMxM0ZERDA1QTlDMzQ1NkZGRjQ4OTg4NURDQUE2
NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALfmJKtVZkuAOWJ139ye
Br6XEmecmWuMjlrOBZSFXhR73DniNTB5qUdc/1EJ2cMUP06rbgS/3PEK+SuMIhGx
B4awLXoJ81QmmR/1k7qxpYuu/EaMaBzDqjJfF2jR7BsSvnCjaBOLP/Egd3qJii4d
Vn3iAvYrC/jItwXkIxyolSl1nX76iKTHyQ1dP7LwZKgi5wUxaPdCQ6LzUe19JzbI
nL8JpglLdhPWn5VufhoUkReSKltUfVfO/GRH+1k8ZRPvpAdLO/oEm11qKdDt3rKF
1gyXQnYdRW8idvvSKSyitnZrSYsafPm0UpNyWP7Go1DsNZfiaDBTA7NbFbJgoQ2F
6tsCAwEAAaOCAowwggKIMB0GA1UdDgQWBBToRIePITE/3QWpw0Vv/0iYhdyqZTAf
BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0
b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa
dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j
Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0
NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G
A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw
gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9hcC9BOTFBNzM4MTAwMDAvMzA0MDMvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw
a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwNDAzLzZF
U0hqeUV4UDkwRnFjTkZiXzlJbUlYY3FtVS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz
Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv
bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAIEgMA0GCSqGSIb3
DQEBCwUAA4IBAQAUhMqJI57GpFkTlVUCJcPUqzAit/pLNnFXF8u6629lTJ209FKe
yoO9u6fJp6Wvq+E7gIj5OGjAywitmICW3L64vcfKGMh201vMcF7VHscHAqYDPrcI
riQOwOzo8N2dOR1uz79INTRI9tjhOwRZdv3Dv+P/HWVWyO1kJSMII7sRbHA1BMDj
4N4jy4xxsdUPYO+OcyzO73KivycwbbdxGr4uwH+LUCkmLzYliQHc2Iz9wdKEP2E3
owT4BcUKvKDWuOX1IIQnsgUYRHgC8bIT+JrAbhNTSawgDg3jhLjhv5GNaBENhU1C
63WA/Qj1hvh115XMyGUGaoGPvFL1hWL63FJN
-----END CERTIFICATE-----
Generated at Fri Jul 4 08:55:26 2025 by rpki-client