Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/C7ypDcuA1iKxiITqHgs7fUDGHFI.cer
File:                     C7ypDcuA1iKxiITqHgs7fUDGHFI.cer (raw, json)
Hash identifier:          ZIlffymw/JFEpHy7wflQc1QDHK7boXjfKVvznHDM4Lo=
Subject key identifier:   0B:BC:A9:0D:CB:80:D6:22:B1:88:84:EA:1E:0B:3B:7D:40:C6:1C:52
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       59F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/955/C7ypDcuA1iKxiITqHgs7fUDGHFI.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/955/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Wed 15 Oct 2025 01:30:03 +0000
Certificate not after:    Thu 15 Oct 2026 01:30:02 +0000
Subordinate resources:    IP: 119.47.0.0/20
                          IP: 133.247.92.0 -- 133.247.99.255
                          IP: 202.213.64.0/21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23028 (0x59f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Oct 15 01:30:03 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=0BBCA90DCB80D622B18884EA1E0B3B7D40C61C52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:14:ab:4d:88:40:f2:02:87:a0:22:f3:c8:23:
                    99:00:cd:9a:4f:d3:97:e2:f4:d0:90:e9:3c:75:61:
                    62:a2:ab:42:02:15:f2:68:62:80:e0:20:e5:9e:81:
                    4a:3c:f6:d7:59:92:c0:0f:1d:dd:b1:d9:13:15:c3:
                    5e:2c:e7:75:3f:0b:33:0b:0a:a8:0b:76:f5:a5:a2:
                    c1:ea:58:da:26:90:91:eb:81:89:b6:8d:4f:73:76:
                    70:31:ef:a5:0e:56:6b:f2:e8:42:cc:b8:74:b8:da:
                    c9:ac:9e:29:4e:6b:50:08:3b:a3:74:ba:01:9f:8f:
                    0a:24:67:78:86:8d:69:81:3f:71:b9:e0:f4:ed:58:
                    91:df:a5:1d:c3:3b:87:49:c8:2a:9e:c1:0f:d7:d3:
                    24:22:3c:20:63:7e:d8:f0:8e:0e:82:ae:e4:fc:38:
                    9e:97:9b:06:62:6e:20:ea:1a:50:da:5b:1d:9b:86:
                    6d:a7:dc:56:08:e4:01:51:8b:d9:80:66:ee:52:85:
                    09:91:11:91:ae:d5:e9:ae:19:66:9d:84:d4:5c:f5:
                    07:9b:cc:5f:8d:19:10:88:92:02:fc:80:2c:ff:f7:
                    1b:94:e6:27:0a:c5:b6:a6:d6:3c:f3:43:fd:ce:b4:
                    33:53:b3:f5:50:7d:50:64:a5:24:8f:fb:84:1d:b2:
                    c3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:BC:A9:0D:CB:80:D6:22:B1:88:84:EA:1E:0B:3B:7D:40:C6:1C:52
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/955/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/955/C7ypDcuA1iKxiITqHgs7fUDGHFI.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.47.0.0/20
                  133.247.92.0-133.247.99.255
                  202.213.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         09:77:e8:6f:7c:dc:83:d0:bb:b5:51:6e:fa:4d:1e:e5:ee:18:
         ab:a8:79:a8:af:3b:9e:76:99:60:3d:f6:7a:fd:18:30:55:0c:
         59:e3:a3:10:d6:2a:da:06:6a:64:78:3e:1b:fe:64:27:56:44:
         15:e9:fe:19:6f:da:82:d7:0b:cd:e8:40:90:80:55:c1:65:f4:
         d9:28:81:6f:19:ee:1e:1f:d5:f8:c8:72:9a:b7:eb:4c:7b:60:
         6c:63:8f:e5:86:26:a9:52:fe:1f:74:ea:95:79:fc:82:a2:a1:
         36:10:86:25:21:09:97:1f:39:2a:33:33:46:75:71:83:ba:ac:
         57:9b:6f:7d:17:62:c9:5a:93:f2:f9:ce:e7:42:db:d0:fa:12:
         31:74:1d:32:2f:b4:1d:00:da:ea:94:cd:e0:96:8d:6d:cd:d8:
         08:68:6a:e6:06:81:96:71:61:62:69:77:b8:57:5b:f0:6f:9f:
         bc:2f:8c:b4:d5:de:fa:36:69:25:8b:85:a1:8a:94:f4:06:21:
         6a:4d:88:9c:37:6a:23:d0:73:b6:64:5f:dd:48:a6:c0:93:84:
         62:95:a0:35:30:87:1e:42:cd:45:09:3d:4c:68:7c:50:44:45:
         14:ce:44:59:ee:6d:bd:f3:a3:50:04:6e:98:3d:ad:8e:b8:80:
         ed:6a:d0:ef
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgICWfQwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC
NTIwREFBQzdEQThGMB4XDTI1MTAxNTAxMzAwM1oXDTI2MTAxNTAxMzAwMlowMzEx
MC8GA1UEAxMoMEJCQ0E5MERDQjgwRDYyMkIxODg4NEVBMUUwQjNCN0Q0MEM2MUM1
MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMQUq02IQPICh6Ai88gj
mQDNmk/Tl+L00JDpPHVhYqKrQgIV8mhigOAg5Z6BSjz211mSwA8d3bHZExXDXizn
dT8LMwsKqAt29aWiwepY2iaQkeuBibaNT3N2cDHvpQ5Wa/LoQsy4dLjayayeKU5r
UAg7o3S6AZ+PCiRneIaNaYE/cbng9O1Ykd+lHcM7h0nIKp7BD9fTJCI8IGN+2PCO
DoKu5Pw4npebBmJuIOoaUNpbHZuGbafcVgjkAVGL2YBm7lKFCZERka7V6a4ZZp2E
1Fz1B5vMX40ZEIiSAvyALP/3G5TmJwrFtqbWPPND/c60M1Oz9VB9UGSlJI/7hB2y
wz8CAwEAAaOCApowggKWMB0GA1UdDgQWBBQLvKkNy4DWIrGIhOoeCzt9QMYcUjAf
BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0
b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa
dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j
Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0
NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G
A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB
7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw
L2FwL0E5MUE3MzgxMDAwMC85NTUvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt
cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzk1NS9DN3lwRGN1
QTFpS3hpSVRxSGdzN2ZVREdIRkkubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw
a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s
MDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQEdy8AMAwDBAKF91wDBAKF92AD
BAPK1UAwDQYJKoZIhvcNAQELBQADggEBAAl36G983IPQu7VRbvpNHuXuGKuoeaiv
O552mWA99nr9GDBVDFnjoxDWKtoGamR4Phv+ZCdWRBXp/hlv2oLXC83oQJCAVcFl
9NkogW8Z7h4f1fjIcpq360x7YGxjj+WGJqlS/h906pV5/IKioTYQhiUhCZcfOSoz
M0Z1cYO6rFebb30XYslak/L5zudC29D6EjF0HTIvtB0A2uqUzeCWjW3N2AhoauYG
gZZxYWJpd7hXW/Bvn7wvjLTV3vo2aSWLhaGKlPQGIWpNiJw3aiPQc7ZkX91IpsCT
hGKVoDUwhx5CzUUJPUxofFBERRTORFnubb3zo1AEbpg9rY64gO1q0O8=
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:37:18 2025 by rpki-client