Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/PbsW67aNlauUvG44o6PxmiX25sA.cer
File:                     PbsW67aNlauUvG44o6PxmiX25sA.cer (raw, json)
Hash identifier:          M5V49dMa9oQGNAjomcCvcfeGqa2ns67UcD3tQi5K8mg=
Subject key identifier:   3D:BB:16:EB:B6:8D:95:AB:94:BC:6E:38:A3:A3:F1:9A:25:F6:E6:C0
Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2
Certificate issuer:       /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2
Certificate serial:       1353
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2344/PbsW67aNlauUvG44o6PxmiX25sA.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2344/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Wed 15 Oct 2025 01:44:48 +0000
Certificate not after:    Thu 15 Oct 2026 01:30:02 +0000
Subordinate resources:    IP: 160.17.0.0/16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 19:55:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4947 (0x1353)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2
        Validity
            Not Before: Oct 15 01:44:48 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=3DBB16EBB68D95AB94BC6E38A3A3F19A25F6E6C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:65:0e:26:ad:78:54:47:02:86:fd:68:d9:22:
                    84:0b:f8:40:ab:c9:c5:5c:f8:f7:c4:b2:37:3a:a9:
                    7d:5f:81:ce:90:b6:e1:6a:7b:b1:4a:1e:d8:29:ae:
                    cc:c1:c2:ce:55:79:7e:cf:da:ad:3c:6a:48:ac:da:
                    8b:f9:3a:e1:a2:97:e5:94:35:68:cc:a9:ca:51:cc:
                    5c:23:44:68:02:3a:df:07:57:98:c2:24:23:59:9b:
                    1b:75:a9:12:6d:c0:23:22:e6:3d:a8:7b:b4:00:fe:
                    7a:df:c2:b4:43:dd:aa:41:8f:2a:88:eb:5d:42:58:
                    5c:cd:20:83:d3:c7:c6:f3:46:6d:fe:d3:4d:aa:8e:
                    4e:bd:8d:75:9d:9a:ab:e6:5f:f7:6c:97:fc:9a:4c:
                    e0:5f:00:af:8d:e9:3a:59:ce:fb:4b:d4:ca:ae:23:
                    96:38:82:bd:5e:06:f6:65:7f:b4:49:5f:46:21:ba:
                    51:40:80:19:4a:62:2e:92:fc:e2:90:8f:1f:f5:f5:
                    a3:b6:35:10:44:df:87:69:ce:3c:9c:1e:2b:1f:68:
                    24:65:84:e1:dc:10:62:68:9a:d3:8c:48:25:27:7b:
                    68:99:a7:0e:ac:ba:2c:11:85:e7:47:14:2d:fb:09:
                    ad:82:1b:7b:e5:c7:d3:d2:dc:d9:ba:f4:ab:20:07:
                    e6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:BB:16:EB:B6:8D:95:AB:94:BC:6E:38:A3:A3:F1:9A:25:F6:E6:C0
            X509v3 Authority Key Identifier:
                keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2344/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2344/PbsW67aNlauUvG44o6PxmiX25sA.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.17.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4b:b1:4f:07:85:ce:2d:62:77:b7:0b:93:d7:6b:96:95:1e:93:
         8d:66:54:0d:a3:ad:7c:a9:ed:f0:9c:b4:83:08:95:d0:68:4e:
         56:12:4f:9d:66:4e:35:d9:0e:5a:56:24:74:b3:83:8b:fd:ef:
         3c:09:fc:b9:96:67:f3:b1:d1:4c:f9:69:a7:6f:62:c8:88:f1:
         c0:df:d5:9f:61:6a:8f:69:0a:0a:cc:06:c4:84:66:c6:3f:90:
         83:70:09:fc:ab:e0:99:2f:0d:8d:ba:9d:00:bd:6a:a7:39:2a:
         bc:8b:13:19:24:af:bb:2e:38:3f:74:bb:b3:70:4c:4e:21:ec:
         12:76:eb:62:45:90:d2:fa:23:c4:1f:6e:34:7d:14:6a:41:08:
         a3:b3:0e:63:70:73:5c:55:91:51:69:9a:fe:b3:b9:ba:0a:15:
         8a:6c:96:b9:58:57:28:06:60:aa:71:c1:c2:54:96:d0:ca:dd:
         b3:7a:e6:b4:4f:31:3f:ce:da:5d:0e:a2:5d:f8:eb:a3:f8:71:
         4e:53:36:5c:49:c7:5b:d7:04:cc:18:b7:c1:45:25:67:0b:ef:
         53:1a:a7:48:7f:e7:a7:63:d8:e1:fd:f8:f3:0f:2a:1e:9a:3d:
         ee:5f:73:a9:98:e2:4a:1d:08:60:de:5c:9a:3e:78:27:f4:08:
         24:79:f9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:19:36 2025 by rpki-client