Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/NaqlmFHjkt-JLly3q-YiUWWuyJc.cer
File:                     NaqlmFHjkt-JLly3q-YiUWWuyJc.cer (raw, json)
Hash identifier:          R/rwsgtk6ODgwRMl9afpipAaCKt/qdjRYAQoMhZRn6k=
Subject key identifier:   35:AA:A5:98:51:E3:92:DF:89:2E:5C:B7:AB:E6:22:51:65:AE:C8:97
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       64AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30412/NaqlmFHjkt-JLly3q-YiUWWuyJc.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30412/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Sun 15 Mar 2026 01:35:37 +0000
Certificate not after:    Mon 15 Mar 2027 01:30:02 +0000
Subordinate resources:    IP: 2400:c320::/32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 05:36:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25772 (0x64ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Mar 15 01:35:37 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=35AAA59851E392DF892E5CB7ABE6225165AEC897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:99:3d:c4:03:14:ec:bb:18:36:46:c4:30:ef:
                    b4:75:28:43:c3:7d:0f:ca:e7:9c:a4:91:11:e4:c6:
                    cb:ad:e4:38:27:32:58:95:3b:1e:29:ec:b9:7a:56:
                    96:a7:e4:2a:29:fa:fd:63:98:f9:89:8a:30:88:5a:
                    03:43:3c:b9:fc:a8:60:91:6d:16:94:0b:0c:ba:f4:
                    e0:10:64:e6:37:e6:38:4b:18:1f:b5:56:32:31:ea:
                    26:67:2c:0a:2e:14:eb:ec:2d:df:a7:2a:a0:e7:c6:
                    4a:9f:3e:e8:be:30:76:38:30:e2:41:99:63:e8:5e:
                    84:08:5d:77:9b:33:5a:62:24:cb:71:be:04:ac:8b:
                    2f:6a:1a:7b:c0:a7:ce:ed:40:1a:fb:a8:b4:42:6c:
                    96:8b:ca:b8:69:66:ea:de:74:0f:2a:ba:64:1c:3b:
                    d4:e8:56:92:4c:46:f7:51:55:73:4c:e7:b0:d1:a4:
                    17:3a:c3:4f:32:ec:ea:33:28:7d:74:ca:93:8e:05:
                    b9:ef:03:49:5e:5d:4f:32:f0:7d:ca:d3:a6:86:2d:
                    6c:96:01:d3:2d:1e:72:0f:e1:33:31:26:56:51:dd:
                    93:b8:fc:e8:4c:a2:a8:74:b9:93:3c:b3:fd:d4:a1:
                    36:81:b3:3c:d3:c2:52:64:65:20:bf:02:7e:77:8b:
                    26:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:AA:A5:98:51:E3:92:DF:89:2E:5C:B7:AB:E6:22:51:65:AE:C8:97
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30412/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30412/NaqlmFHjkt-JLly3q-YiUWWuyJc.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:c320::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:c3:21:2d:33:57:66:22:58:89:01:ac:c6:84:3c:bf:3d:50:
         45:2f:1c:69:3d:f8:f6:c6:43:a6:33:7f:3e:df:fd:51:9a:79:
         08:5e:51:5a:cc:11:3d:65:85:9f:8d:8f:eb:2e:b7:98:f7:43:
         e4:05:22:0a:b3:6c:21:a2:96:df:66:07:9f:73:1c:b6:26:8e:
         21:6f:1e:0f:24:55:ef:2a:93:be:0f:bf:5e:3d:50:6e:47:d5:
         ef:8c:c8:ae:63:a1:7e:c7:ad:eb:1f:5c:62:81:e1:07:49:69:
         86:6f:3a:f5:b7:83:60:03:04:46:ec:7c:75:bf:6f:a7:e9:9f:
         02:38:34:16:bc:f8:4f:19:b8:a2:7d:61:e5:ed:50:ab:98:a9:
         cd:8a:06:7d:73:49:78:cf:94:5e:f1:00:1c:1e:d9:eb:f6:44:
         03:a2:4d:c1:8a:ce:1a:f6:4a:13:1d:f7:4b:87:93:95:3d:ab:
         d6:7c:21:c7:42:3a:cf:6d:07:7a:bd:69:ad:3e:77:2b:52:cd:
         56:1a:55:b0:57:5d:99:e1:57:aa:15:97:2c:6a:66:d6:23:ec:
         7c:89:6e:f5:52:3e:82:1e:9b:e4:91:6b:4a:2f:85:cd:ad:f6:
         d9:8e:54:8b:3c:b5:1f:31:fa:5a:e0:07:72:9a:58:7d:ec:ef:
         5b:f4:cb:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:29:36 2026 by rpki-client