Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/Ab5k6lGElpjv90IvaTdI0tKCnPY.cer
File:                     Ab5k6lGElpjv90IvaTdI0tKCnPY.cer (raw, json)
Hash identifier:          ZmxtsgFjPlyclnA9OmpgAkKvQiY7FS5+B+sIZW3r00E=
Subject key identifier:   01:BE:64:EA:51:84:96:98:EF:F7:42:2F:69:37:48:D2:D2:82:9C:F6
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       5B88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/491/Ab5k6lGElpjv90IvaTdI0tKCnPY.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/491/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Wed 15 Oct 2025 01:42:20 +0000
Certificate not after:    Thu 15 Oct 2026 01:30:02 +0000
Subordinate resources:    IP: 61.122.224.0/20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 08:37:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23432 (0x5b88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Oct 15 01:42:20 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=01BE64EA51849698EFF7422F693748D2D2829CF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9e:87:cd:ed:ca:27:13:9e:9f:5a:5f:96:22:
                    f8:15:01:26:72:80:2d:47:1b:5d:a8:fb:b0:d3:10:
                    c4:33:5f:65:5f:e2:05:71:f3:74:01:7e:ff:e0:cc:
                    11:2f:06:4a:ea:ae:47:8b:1d:4a:63:4f:3c:9f:0b:
                    cc:28:71:b5:12:1c:d7:02:84:37:47:64:96:d2:8b:
                    2a:49:73:cb:04:ab:41:57:5d:ba:a5:68:68:f0:69:
                    5a:47:27:a5:9b:3d:bd:bc:98:74:df:0e:99:2a:c5:
                    f9:ec:16:1c:f0:8b:01:6b:7c:45:eb:ba:b0:a2:0b:
                    01:0b:b2:62:73:09:62:1d:c0:55:a7:5e:4e:f1:90:
                    a0:86:ef:79:1c:cd:3d:e6:9b:19:64:86:0d:60:74:
                    86:81:78:c8:da:e0:ef:52:15:e1:67:e2:a0:06:af:
                    69:93:c1:78:80:78:5d:a4:a5:80:af:db:c0:5b:1c:
                    7b:4a:62:73:2f:fc:fe:34:0b:55:bd:e8:2d:20:97:
                    0d:13:2a:90:05:54:09:44:7d:8d:10:11:0e:de:50:
                    d0:6a:74:a6:88:c4:cf:68:b5:72:82:31:fb:f3:fd:
                    5d:7e:74:ba:96:3e:d4:77:00:d5:76:cb:f1:0b:1c:
                    04:a4:94:13:64:e3:15:1f:26:ed:cd:ff:70:08:a9:
                    a8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:BE:64:EA:51:84:96:98:EF:F7:42:2F:69:37:48:D2:D2:82:9C:F6
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/491/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/491/Ab5k6lGElpjv90IvaTdI0tKCnPY.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.122.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         43:70:a5:db:ec:0d:d7:eb:9c:43:4b:b8:55:69:a3:ef:fe:fe:
         74:1d:77:73:c7:96:36:11:8c:d0:22:66:f5:e0:81:9a:86:f2:
         ad:f7:c0:05:f0:1a:f0:bf:36:de:7e:30:bd:c0:0f:2e:5d:c5:
         55:c7:98:4a:15:b7:1d:e1:04:41:4f:2e:23:40:bb:12:eb:6e:
         48:b3:20:71:84:db:ed:d3:82:a1:54:63:9d:88:0e:02:e6:3c:
         ae:ee:fb:d2:14:cd:3d:ee:35:e2:04:9a:c3:d7:44:c4:3e:91:
         9f:c3:a8:83:8b:3a:cb:50:64:0f:40:78:4e:4a:5a:36:86:0e:
         05:63:36:0d:1f:b7:e1:40:cb:b1:ff:7c:53:e3:8d:6d:c7:dc:
         74:0d:0b:d6:6d:5e:1e:f9:a7:92:3c:87:c2:1c:ef:75:28:2f:
         16:32:e3:28:cd:92:89:ad:11:73:6c:28:69:f9:65:e8:6d:98:
         75:01:5c:72:f5:c4:c1:ab:5a:3b:46:a5:e4:8b:27:15:01:01:
         b9:78:0e:22:87:c0:6d:43:86:29:34:cf:90:87:a8:cb:69:c1:
         97:5b:04:58:53:6d:a4:8b:ac:75:06:33:ec:8a:27:73:52:47:
         c4:dc:a4:c4:69:6e:57:59:17:18:e8:ba:30:8d:3a:78:24:ec:
         ac:a0:ac:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:53:54 2025 by rpki-client