Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/E0OpitJ8sYmBuPP9GKTVc6gu14s.cer
File:                     E0OpitJ8sYmBuPP9GKTVc6gu14s.cer (raw, json)
Hash identifier:          8BJF4xvWN8+eOCmwx939qdUyIdO5aBTwjs0aEulK2Fk=
Subject key identifier:   13:43:A9:8A:D2:7C:B1:89:81:B8:F3:FD:18:A4:D5:73:A8:2E:D7:8B
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       5AF8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30408/E0OpitJ8sYmBuPP9GKTVc6gu14s.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30408/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Wed 15 Oct 2025 01:37:37 +0000
Certificate not after:    Thu 15 Oct 2026 01:30:02 +0000
Subordinate resources:    IP: 2400:b1a0::/32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 20:26:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23288 (0x5af8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Oct 15 01:37:37 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=1343A98AD27CB18981B8F3FD18A4D573A82ED78B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:42:a9:f5:2d:8d:29:b3:34:e3:11:8f:f5:55:
                    bf:d1:2a:b0:7b:08:5f:f7:d9:88:99:32:cf:2b:89:
                    d3:f7:89:65:33:b6:0b:da:cb:e7:d0:d1:25:17:8b:
                    f1:0a:e5:75:f8:6a:f7:75:49:3e:25:0a:e6:74:30:
                    da:62:9c:8a:43:7e:3b:44:34:1a:5c:1b:3c:38:51:
                    eb:05:8e:d4:72:52:0d:2e:4f:e2:46:7b:cb:66:0c:
                    41:20:f2:65:ab:57:94:df:0f:09:7b:60:b2:66:34:
                    4b:22:7d:b5:e8:b7:95:76:af:8e:91:fe:18:f3:3c:
                    3a:d3:ff:1a:e6:0b:4a:19:3b:68:b8:b6:6c:09:a9:
                    e6:66:32:f8:0a:73:5e:97:5f:ac:82:58:19:84:6d:
                    4a:3a:0d:5d:d6:a6:91:4f:1a:a9:47:4d:4e:da:4b:
                    d0:55:78:8d:74:fa:63:47:fa:15:da:3f:1e:40:70:
                    e8:88:74:a2:b2:16:5f:60:b9:c9:b3:a9:b7:4c:a4:
                    cd:cf:d9:24:e6:41:90:a8:ef:38:36:f8:48:0c:7d:
                    fa:63:70:64:ea:a7:fe:7a:52:cd:b3:e1:3b:a6:a3:
                    66:3b:02:e5:d9:7b:70:04:02:45:c0:0a:8c:bc:f7:
                    63:69:34:47:b7:50:ee:39:b6:bc:2a:23:4a:0a:8e:
                    c2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:43:A9:8A:D2:7C:B1:89:81:B8:F3:FD:18:A4:D5:73:A8:2E:D7:8B
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30408/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30408/E0OpitJ8sYmBuPP9GKTVc6gu14s.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:b1a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:0f:1a:69:6d:5b:db:e1:10:17:56:07:2b:68:5e:ef:f2:b3:
         ad:34:95:ed:c8:76:73:8b:d6:e8:4c:15:83:32:fd:e0:66:99:
         d1:20:73:b1:a6:20:1a:f4:9d:b7:31:6a:e5:fa:6f:a5:e9:24:
         e8:65:61:46:11:c4:1e:5a:a7:95:42:7a:01:10:aa:c4:46:ee:
         c5:08:94:d4:a4:68:c1:91:a7:54:f8:ae:47:6f:b2:36:84:63:
         b3:0b:e7:1a:65:f9:b2:98:8f:f6:06:cd:41:c0:39:a3:6d:4c:
         54:89:17:b3:6b:c8:2a:4f:4f:1a:c1:74:b7:2b:c2:35:c6:5e:
         c0:a6:6c:7f:c0:87:81:2d:4e:64:70:6d:91:71:ef:42:a5:d4:
         a0:75:dd:ce:27:ab:70:38:83:b7:00:b9:38:08:db:36:19:fe:
         3c:ef:30:a2:3f:e2:d1:ee:ef:59:59:c7:cf:21:34:ae:fd:49:
         41:ad:4a:56:05:67:5c:4a:21:03:9b:be:43:77:44:53:d9:32:
         5e:1a:c2:1e:c8:76:7d:36:3b:c4:33:29:7a:01:bb:02:d5:13:
         f9:66:11:18:2f:7d:12:47:3f:07:00:74:52:44:5b:32:8b:1f:
         bf:53:f0:9a:9c:4c:35:b7:bd:33:95:ea:4b:0b:c3:68:13:68:
         fc:49:7e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:54:00 2025 by rpki-client