Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/EwgiqaPTOrq2FTetw3QoZxC6DHc.cer
File:                     EwgiqaPTOrq2FTetw3QoZxC6DHc.cer (raw, json)
Hash identifier:          oYomW80u8D0Ze+dqOkUa5diErvlXqsxP7PNQV3BZDbU=
Subject key identifier:   13:08:22:A9:A3:D3:3A:BA:B6:15:37:AD:C3:74:28:67:10:BA:0C:77
Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2
Certificate issuer:       /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2
Certificate serial:       0FCF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/EwgiqaPTOrq2FTetw3QoZxC6DHc.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Thu 15 May 2025 01:35:35 +0000
Certificate not after:    Fri 15 May 2026 01:30:03 +0000
Subordinate resources:    IP: 144.91.128.0 -- 144.91.175.255
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 May 2025 15:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4047 (0xfcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2
        Validity
            Not Before: May 15 01:35:35 2025 GMT
            Not After : May 15 01:30:03 2026 GMT
        Subject: CN=130822A9A3D33ABAB61537ADC374286710BA0C77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4f:c2:b7:ab:33:88:7b:b5:8b:98:ed:e3:98:
                    16:b5:25:87:2c:72:bc:e0:e8:cd:6d:52:1f:ab:a8:
                    01:c4:95:36:9e:65:78:fb:a9:f7:e5:85:f6:32:72:
                    78:fd:d1:6d:8f:31:4c:3e:07:e0:96:ea:a2:0a:ca:
                    32:44:c3:72:6b:29:e7:72:25:6a:90:b6:48:21:dc:
                    0c:b0:75:8c:42:0d:3c:46:e5:c8:32:c0:14:96:82:
                    7d:b1:72:8e:15:c8:46:5a:e4:39:5f:d1:7a:a9:d7:
                    f1:5d:6a:2a:3d:11:45:a7:dc:b4:ad:76:79:12:9d:
                    87:1d:4c:b4:a0:9e:96:24:dc:ef:04:e9:01:5d:ce:
                    8f:8c:20:18:df:cf:38:79:43:19:08:24:f0:e9:ea:
                    5f:3b:4b:d5:96:bb:0c:40:aa:fe:47:f7:ba:2f:c7:
                    24:a5:d5:23:5e:30:45:7a:bf:27:34:e4:4c:f4:23:
                    07:9a:0a:51:90:25:2e:7b:33:d2:e2:84:03:ae:a9:
                    6f:8d:26:d7:46:c5:2c:a1:2b:d7:1a:de:92:ae:20:
                    e1:0b:3c:75:cc:8f:e5:ab:22:59:d0:7e:72:d3:a1:
                    c7:45:9b:57:72:8e:84:30:e8:11:24:90:6c:4f:61:
                    d4:28:cc:d7:96:fc:51:55:d1:13:dd:de:16:51:33:
                    3d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:08:22:A9:A3:D3:3A:BA:B6:15:37:AD:C3:74:28:67:10:BA:0C:77
            X509v3 Authority Key Identifier:
                keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/EwgiqaPTOrq2FTetw3QoZxC6DHc.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.91.128.0-144.91.175.255

    Signature Algorithm: sha256WithRSAEncryption
         5c:a1:0f:aa:b6:d8:75:1c:ab:77:40:2e:85:57:06:41:4e:df:
         c7:e7:34:31:fd:7d:06:eb:91:31:1c:30:53:d7:91:3f:9c:b9:
         3f:a4:3f:d8:7e:df:ab:2a:5c:0e:c6:83:1f:1d:71:82:f4:e8:
         bb:3a:dc:1f:f3:c6:6e:fa:10:53:be:b4:cb:8d:0b:c4:0e:c0:
         8c:01:c9:17:77:82:c9:fa:ea:f2:86:a0:5b:e9:92:93:c1:84:
         7f:7b:d5:e4:4b:b5:04:0a:aa:f7:c9:45:ce:56:ce:43:cc:fc:
         90:a4:2b:4a:cd:d0:44:d7:a6:9a:41:cf:c7:9e:44:02:24:a2:
         b1:ff:76:85:73:35:f7:b2:54:86:93:cb:02:0d:b0:35:97:8c:
         02:c6:3a:49:aa:a9:f7:b1:05:07:31:78:94:0a:64:33:48:ac:
         a0:07:82:cc:50:b6:93:5c:f2:a8:ec:4c:0a:ec:cc:ab:55:4f:
         51:81:e6:52:4b:58:4f:a8:40:9a:d8:3c:49:0e:82:93:f6:1f:
         22:5f:ee:a3:30:70:0a:04:ab:ea:f6:e8:fc:a4:e2:56:de:54:
         dd:05:d4:14:98:0b:e1:ca:5e:18:2b:54:90:6b:d5:3e:8c:5b:
         60:86:ea:2f:4e:ff:ac:73:5b:ce:30:e3:75:bf:08:6d:80:27:
         a6:3d:ba:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 17:32:58 2025 by rpki-client