Certificate

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/M4iHkg7nVIfjsLmG-mET_Y1b5dM.cer
File:                     M4iHkg7nVIfjsLmG-mET_Y1b5dM.cer (raw, json)
Hash identifier:          zsC9bgTLWef8/8JIAPcP3i/43sEbiIdZjJ3Wj/Zn5sI=
Subject key identifier:   33:88:87:92:0E:E7:54:87:E3:B0:B9:86:FA:61:13:FD:8D:5B:E5:D3
Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2
Certificate issuer:       /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2
Certificate serial:       187B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
CRL Distribution Point:   rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/M4iHkg7nVIfjsLmG-mET_Y1b5dM.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Thu 15 Oct 2026 01:35:23 +0000
Certificate not after:    Fri 15 Oct 2027 01:30:02 +0000
Subordinate resources:    IP: 157.112.144.0/20
                          IP: 157.112.176.0/20
                          IP: 162.43.0.0/17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 14:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6267 (0x187b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2
        Validity
            Not Before: Oct 15 01:35:23 2026 GMT
            Not After : Oct 15 01:30:02 2027 GMT
        Subject: CN=338887920EE75487E3B0B986FA6113FD8D5BE5D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b1:2c:2b:8b:ec:0f:8f:e1:67:0d:14:56:80:
                    15:72:5d:48:f8:42:2b:ae:05:b8:e8:c2:8f:93:8d:
                    87:4c:50:da:0f:bb:6d:20:27:f4:94:00:c0:cd:82:
                    64:90:01:5b:66:ce:81:9e:ec:9a:25:a6:b6:ef:de:
                    1c:92:99:34:8a:7c:a0:ca:e4:b6:10:06:fc:53:24:
                    39:03:5b:9c:f5:cb:23:cf:b8:ea:76:a4:ba:c8:46:
                    fd:26:a8:23:14:26:cf:f6:d4:d1:0d:f4:88:dd:fa:
                    78:3b:84:8e:51:36:cd:37:46:c9:74:a3:2b:0a:75:
                    56:69:58:46:22:5c:f9:99:c8:4f:34:85:50:4b:1f:
                    b4:c2:93:b4:97:c4:7b:f1:23:24:c8:e8:52:c0:e9:
                    69:dd:eb:3e:3c:cf:09:53:96:54:2e:9d:fb:6b:30:
                    02:b1:0d:1c:83:e2:83:5d:fc:5b:54:b2:06:ea:3d:
                    1b:e1:c3:57:0e:14:e4:05:7b:83:c9:b2:55:4a:99:
                    33:32:9f:2c:c0:c4:a0:32:35:93:e5:7e:aa:5a:17:
                    a7:3b:a1:1e:fe:6e:bc:99:e8:c1:dd:a2:05:d3:d7:
                    53:df:62:16:5a:81:2e:62:c5:66:96:00:27:8e:b9:
                    c1:cf:62:7a:52:da:fb:10:a8:65:1e:2c:5d:32:b8:
                    f0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:88:87:92:0E:E7:54:87:E3:B0:B9:86:FA:61:13:FD:8D:5B:E5:D3
            X509v3 Authority Key Identifier:
                keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/M4iHkg7nVIfjsLmG-mET_Y1b5dM.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.112.144.0/20
                  157.112.176.0/20
                  162.43.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         54:79:80:ed:e9:40:5c:e1:24:2e:52:5f:5a:9f:2c:27:e9:96:
         7e:52:ac:04:9f:81:bb:2d:ba:5e:54:e9:7a:fe:a0:ca:65:d6:
         f3:e1:17:90:98:07:b7:cf:f8:4b:1e:09:03:9a:fa:85:22:fe:
         bd:ee:08:5f:68:b0:b4:62:53:c8:7b:93:41:48:fc:43:5e:17:
         c1:dd:69:3a:d6:f5:5c:0d:ca:87:97:83:24:ae:9b:f9:4a:ab:
         0d:b7:79:f2:30:a8:6e:8b:c0:35:af:b5:93:f5:e5:66:40:8f:
         bf:2a:91:88:74:d8:7e:53:9a:e6:e6:1b:29:36:1e:60:00:51:
         e3:d9:09:e7:48:37:6e:b5:c4:2b:b6:1a:ec:ed:2c:ea:62:f8:
         dd:32:be:63:54:66:17:67:eb:d1:d5:a3:9b:26:0f:f4:ec:8f:
         8f:5d:f9:fb:09:42:bb:2c:d8:7a:b2:f2:9a:84:73:a9:59:7c:
         4f:ff:3d:41:0c:cb:be:cd:3e:86:d9:96:83:0b:0c:73:8f:2d:
         40:66:f7:d2:17:ad:4f:5a:46:c8:6e:ec:c6:ba:89:ff:59:bf:
         ba:e7:21:10:a4:2a:ce:94:3e:f8:d3:97:f6:07:d2:0f:53:1a:
         88:a7:24:ef:a8:6d:39:c0:81:be:be:6e:28:37:55:e8:54:ca:
         fa:61:a7:f6
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgICGHswDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QTczODEwMDAwMTEwLwYDVQQFEyg2RjY4M0VBRTM5QTE3MzhBRTZDOTNGREYwNDFG
MTE0OEU2NTM0REYyMB4XDTI2MTAxNTAxMzUyM1oXDTI3MTAxNTAxMzAwMlowMzEx
MC8GA1UEAxMoMzM4ODg3OTIwRUU3NTQ4N0UzQjBCOTg2RkE2MTEzRkQ4RDVCRTVE
MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN2xLCuL7A+P4WcNFFaA
FXJdSPhCK64FuOjCj5ONh0xQ2g+7bSAn9JQAwM2CZJABW2bOgZ7smiWmtu/eHJKZ
NIp8oMrkthAG/FMkOQNbnPXLI8+46nakushG/SaoIxQmz/bU0Q30iN36eDuEjlE2
zTdGyXSjKwp1VmlYRiJc+ZnITzSFUEsftMKTtJfEe/EjJMjoUsDpad3rPjzPCVOW
VC6d+2swArENHIPig138W1SyBuo9G+HDVw4U5AV7g8myVUqZMzKfLMDEoDI1k+V+
qloXpzuhHv5uvJnowd2iBdPXU99iFlqBLmLFZpYAJ465wc9ielLa+xCoZR4sXTK4
8HsCAwEAAaOCApcwggKTMB0GA1UdDgQWBBQziIeSDudUh+OwuYb6YRP9jVvl0zAf
BgNVHSMEGDAWgBRvaD6uOaFziubJP98EHxFI5lNN8jAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0
b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYjJnLXJqbWhjNHJteVRfZkJC
OFJTT1pUVGZJLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j
Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFD
ODgzN0M3MkZEMUZGMi9iMmctcmptaGM0cm15VF9mQkI4UlNPWlRUZkkuY2VyMA8G
A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw
gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9hcC9BOTFBNzM4MTAwMDAvMjAzMDMvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw
a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMzAzL000
aUhrZzduVklmanNMbUctbUVUX1kxYjVkTS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz
Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv
bi54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBASdcJADBASdcLADBAei
KwAwDQYJKoZIhvcNAQELBQADggEBAFR5gO3pQFzhJC5SX1qfLCfpln5SrASfgbst
ul5U6Xr+oMpl1vPhF5CYB7fP+EseCQOa+oUi/r3uCF9osLRiU8h7k0FI/ENeF8Hd
aTrW9VwNyoeXgySum/lKqw23efIwqG6LwDWvtZP15WZAj78qkYh02H5TmubmGyk2
HmAAUePZCedIN261xCu2GuztLOpi+N0yvmNUZhdn69HVo5smD/Tsj49d+fsJQrss
2Hqy8pqEc6lZfE//PUEMy77NPobZloMLDHOPLUBm99IXrU9aRshu7Ma6if9Zv7rn
IRCkKs6UPvjTl/YH0g9TGoinJO+obTnAgb6+big3VehUyvphp/Y=
-----END CERTIFICATE-----
Generated at Sat Nov 14 22:24:20 2026 by rpki-client