Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/RsHMLWUoO-OBBxn16hqHkDA6Ink.cer
File:                     RsHMLWUoO-OBBxn16hqHkDA6Ink.cer (raw, json)
Hash identifier:          1KVh1X1PMoX3SrkiyVKL8BOwU6lr15OEnCx4hfidb+s=
Subject key identifier:   46:C1:CC:2D:65:28:3B:E3:81:07:19:F5:EA:1A:87:90:30:3A:22:79
Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2
Certificate issuer:       /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2
Certificate serial:       0FEA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20252/RsHMLWUoO-OBBxn16hqHkDA6Ink.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20252/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Thu 15 May 2025 01:40:29 +0000
Certificate not after:    Fri 15 May 2026 01:30:03 +0000
Subordinate resources:    IP: 157.15.254.0/23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 00:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4074 (0xfea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2
        Validity
            Not Before: May 15 01:40:29 2025 GMT
            Not After : May 15 01:30:03 2026 GMT
        Subject: CN=46C1CC2D65283BE3810719F5EA1A8790303A2279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b4:66:05:d5:60:08:60:be:5b:a9:26:b6:89:
                    ef:60:0b:0e:34:af:10:de:a9:e2:78:06:a8:b5:20:
                    79:d3:ad:0d:6e:b0:25:2c:04:80:8c:a8:e4:49:c2:
                    9f:33:e9:b4:57:88:e7:aa:1c:40:1f:1b:18:01:20:
                    6a:a7:f5:e3:eb:a6:af:6d:11:96:b7:4b:9d:a2:ea:
                    6a:85:1c:f8:46:1a:36:79:66:03:bb:80:39:17:92:
                    a2:b3:29:dc:4a:27:29:c2:14:f8:96:3c:0b:97:4f:
                    7c:ab:26:17:dc:e5:bb:ac:35:c5:99:96:e3:a1:71:
                    fe:8b:4b:64:8e:d4:2c:f6:84:d9:73:73:ef:73:3c:
                    57:3c:ed:c2:fc:38:0d:89:13:09:68:ee:7d:e4:94:
                    59:d2:f8:55:76:f7:87:b6:a7:a2:0b:92:8d:11:d1:
                    31:ff:29:4d:bd:f0:0c:93:2c:33:1a:cf:c0:3b:ef:
                    47:23:50:9b:68:14:14:74:89:3f:ba:da:e2:9f:0f:
                    8d:9a:d1:6e:7b:23:09:40:80:26:0a:cc:8b:15:15:
                    a9:e6:b1:e9:91:33:ca:55:14:85:a6:05:c3:2c:fc:
                    61:84:02:32:64:0c:8f:78:9a:53:5a:ce:1e:fc:37:
                    97:d3:4c:ad:a0:4a:d2:43:e6:c5:93:5a:56:14:1f:
                    e0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:C1:CC:2D:65:28:3B:E3:81:07:19:F5:EA:1A:87:90:30:3A:22:79
            X509v3 Authority Key Identifier:
                keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20252/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20252/RsHMLWUoO-OBBxn16hqHkDA6Ink.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:5b:b9:44:72:a6:22:f2:05:bd:f3:12:66:0d:8c:40:e7:74:
         9b:3a:33:b8:e8:cd:b4:b0:a2:47:68:b7:6c:ec:6a:d5:0e:e2:
         b1:8e:e7:c2:77:fc:ed:40:d2:16:e2:ff:88:0d:95:5e:bc:1d:
         c9:31:d2:6d:88:2a:10:bf:f3:fd:a5:f4:4a:8b:be:7f:06:7a:
         94:d5:d4:62:03:33:e0:c3:de:17:42:b8:be:0d:30:48:1c:24:
         fe:8b:83:09:ac:b4:76:b1:21:92:34:fd:7d:d8:e0:cb:ac:00:
         19:fc:06:71:9c:55:2e:1c:85:82:53:44:53:64:a3:85:90:ab:
         fd:f2:e5:7e:88:a5:6b:82:8c:99:88:04:bc:f6:9a:af:67:44:
         15:55:e0:3e:31:d6:6d:a1:f3:7b:66:3f:c4:66:10:57:20:d1:
         ec:98:42:71:7c:68:8f:6a:0c:84:09:97:fc:d7:74:56:ca:e5:
         c3:04:9f:b3:9b:cd:37:c2:8a:2e:77:5e:ee:04:82:ef:29:1d:
         11:4e:9e:76:59:52:30:fe:89:52:d9:8a:d8:90:95:18:18:df:
         a7:06:b4:36:73:2a:de:27:e8:56:75:d8:74:ef:73:a7:b2:e1:
         0a:de:8c:35:68:41:a6:31:1b:01:6d:ef:ac:3c:8b:aa:c0:9c:
         0c:69:bb:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 02:35:10 2025 by rpki-client