Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/RJV2NHCVBo-WRmvzqO-pg-MncRY.cer
File:                     RJV2NHCVBo-WRmvzqO-pg-MncRY.cer (raw, json)
Hash identifier:          pAw53Lfas/LZTLFpGuonCMxcHbUJPyvme7te4jAZZoo=
Subject key identifier:   44:95:76:34:70:95:06:8F:96:46:6B:F3:A8:EF:A9:83:E3:27:71:16
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       59F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30133/RJV2NHCVBo-WRmvzqO-pg-MncRY.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30133/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Wed 15 Oct 2025 01:30:12 +0000
Certificate not after:    Thu 15 Oct 2026 01:30:02 +0000
Subordinate resources:    IP: 2401:3600::/32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23031 (0x59f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Oct 15 01:30:12 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=449576347095068F96466BF3A8EFA983E3277116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d2:f6:dc:1f:9a:81:39:15:71:51:97:12:fa:
                    4d:ee:63:25:5f:ce:12:78:97:2a:bd:ca:90:7b:0e:
                    ae:59:ee:77:31:a3:24:cf:86:51:3c:65:ce:d6:f8:
                    50:bd:95:b5:e0:e9:cb:3f:c3:32:c5:6e:ad:1a:18:
                    e7:fa:77:5f:c1:05:99:c6:63:91:62:b4:af:9d:5b:
                    70:41:78:9a:29:3c:fd:60:56:be:fa:2c:c5:d2:53:
                    26:9a:0b:48:ed:3f:7b:b0:46:13:6c:c3:d4:29:ad:
                    05:c1:d6:55:e7:17:43:ba:3b:50:26:c9:8c:c2:54:
                    a8:b8:a6:e6:ff:a4:99:de:27:2d:95:d6:1f:91:b5:
                    c8:06:f1:8a:f7:e7:b2:30:36:17:3d:76:da:50:84:
                    bc:45:3f:bb:ab:f1:57:ad:8e:12:df:9a:1f:7e:de:
                    40:77:40:16:d2:2c:82:d3:6f:ea:38:91:5e:95:42:
                    70:6c:15:ed:6a:af:ae:6f:46:df:76:8c:62:12:63:
                    bb:ab:e7:01:0a:5a:6b:2c:7c:4b:15:1e:85:ce:99:
                    62:ff:0d:dc:72:32:21:de:89:8a:0d:e4:4e:cb:1b:
                    d1:c2:16:f8:01:08:b6:8e:13:45:ff:52:ab:9d:b7:
                    52:cd:88:8c:82:06:38:fd:93:8b:88:71:42:9e:44:
                    36:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:95:76:34:70:95:06:8F:96:46:6B:F3:A8:EF:A9:83:E3:27:71:16
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30133/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30133/RJV2NHCVBo-WRmvzqO-pg-MncRY.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:3600::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:2e:d1:5e:31:95:3a:10:2e:3e:4e:f0:26:68:b7:ae:66:26:
         5d:19:8d:13:88:3a:23:13:49:7d:50:8c:70:29:ce:68:6d:f1:
         64:d9:5e:a1:ad:9e:8a:68:24:1d:e6:66:3c:65:e8:ce:f6:a9:
         48:9b:ad:7c:84:53:73:97:6f:7c:fe:c5:43:3d:54:be:93:bf:
         16:c2:53:2c:11:1f:b1:94:3b:e2:50:44:aa:d7:ff:44:b3:28:
         d2:21:f1:4e:ad:26:05:0e:49:9a:1d:c0:c5:3e:c8:59:95:5f:
         7a:df:b0:7e:c7:e6:59:c5:ee:2a:70:4e:c9:ef:71:ac:7c:7a:
         bc:56:e1:48:31:dc:a3:eb:96:f8:f9:51:ac:3a:f9:4e:64:75:
         79:19:1a:1e:a6:02:02:24:b6:5a:b8:82:b3:cb:b9:b7:a3:00:
         31:af:10:4a:93:3f:ed:08:1f:70:58:93:b9:51:9a:24:f3:3c:
         68:5c:38:05:55:13:dc:77:17:cb:d1:c2:25:dc:e4:07:83:99:
         65:f6:ee:62:0d:0f:11:7a:d5:44:64:97:55:7f:d5:96:6e:24:
         7c:47:66:da:61:b1:72:87:95:de:68:14:67:df:25:51:6a:72:
         27:3e:41:4b:8b:d7:44:62:50:4d:bc:10:e5:f9:ca:48:eb:39:
         d2:e8:c6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:34:18 2025 by rpki-client