Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/SNsa5IPjQwk6sGMDcmD-uRlRQDg.cer
File:                     SNsa5IPjQwk6sGMDcmD-uRlRQDg.cer (raw, json)
Hash identifier:          PlzSlI38+dQkeZ6VTxqU/etxEaRcs3htfWNWzbDkQsA=
Subject key identifier:   48:DB:1A:E4:83:E3:43:09:3A:B0:63:03:72:60:FE:B9:19:51:40:38
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       5135
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30033/SNsa5IPjQwk6sGMDcmD-uRlRQDg.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30033/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Sun 15 Jun 2025 01:34:39 +0000
Certificate not after:    Mon 15 Jun 2026 01:30:02 +0000
Subordinate resources:    IP: 2001:350::/32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20789 (0x5135)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Jun 15 01:34:39 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=48DB1AE483E343093AB063037260FEB919514038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:84:ea:47:b3:a8:2b:54:76:fa:6c:3c:04:a5:
                    65:5c:5a:65:c2:54:c6:b4:97:f2:df:c9:64:eb:f4:
                    51:89:86:cf:d0:33:cd:72:d2:99:18:fc:09:46:1b:
                    91:70:9c:d5:bf:3f:44:34:d5:31:f3:63:92:74:a2:
                    0c:58:b9:34:a3:50:d6:5a:eb:f4:c4:4e:b7:a1:f1:
                    55:c2:ee:d2:ef:5e:be:dd:d9:eb:a1:b9:2c:45:33:
                    74:a6:59:1f:8b:6a:cb:2c:d0:70:7c:b5:44:6d:00:
                    40:36:85:09:1e:2b:7a:9a:37:49:30:66:69:93:94:
                    53:3f:d7:6d:a3:6d:69:8f:bf:c5:bf:de:66:2c:93:
                    d0:67:44:0b:c3:51:61:16:87:ca:42:ee:b8:af:db:
                    81:ca:d2:c9:8d:11:94:85:33:e4:0e:5e:51:e1:25:
                    56:00:f8:2e:e3:0d:96:64:57:93:f8:b8:bc:14:84:
                    c0:b7:e8:a1:c4:16:70:7f:54:00:e0:15:8e:d6:95:
                    ee:29:91:4b:03:47:b7:88:50:8f:fd:fc:9e:da:69:
                    b5:35:1d:47:3a:42:6c:c3:12:a0:5d:d0:d1:14:a7:
                    4e:e4:58:5c:24:0a:c2:af:80:27:12:7c:03:62:93:
                    96:10:4c:16:78:85:c5:c3:5d:6f:0a:7e:37:96:84:
                    f8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:DB:1A:E4:83:E3:43:09:3A:B0:63:03:72:60:FE:B9:19:51:40:38
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30033/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30033/SNsa5IPjQwk6sGMDcmD-uRlRQDg.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:350::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:5d:55:19:e5:a8:26:d1:8d:4e:1a:dc:af:b2:4a:d6:85:ea:
         a7:ed:6c:e0:b3:5a:da:73:42:7a:5e:5e:0e:50:bd:6a:72:e6:
         82:be:86:6a:d9:fa:84:a0:fb:a5:10:ce:d0:32:9c:67:23:81:
         ab:5b:de:87:c0:b0:24:f3:93:f8:57:77:d2:59:05:b5:55:bf:
         6a:61:20:f5:c2:24:f7:64:ee:25:93:46:3f:25:a4:71:9a:00:
         4a:33:43:77:7f:5a:24:cc:ff:c9:23:49:65:b7:a1:6c:60:6d:
         58:38:dd:ee:5b:b6:76:b6:25:49:72:ee:c6:c2:dd:a7:5e:37:
         aa:24:b7:cd:01:fc:fe:5d:62:c6:6a:3d:9c:21:00:eb:95:a3:
         6e:e5:6a:ba:33:52:bc:51:50:24:6a:b8:5c:58:38:30:62:96:
         8b:47:18:1e:46:36:3e:a4:61:e0:3f:2f:96:34:df:34:fa:4f:
         04:4d:d7:ba:79:a3:c2:61:ae:04:89:0c:76:5c:7f:66:83:77:
         b4:70:8c:d8:e0:c7:dc:40:1b:74:51:b3:6e:8c:48:42:34:ad:
         df:4c:e0:ed:25:0c:1d:b1:3e:65:62:37:39:19:8b:fb:dd:4c:
         4b:17:8c:63:40:fa:14:35:84:0a:44:b1:61:8a:c5:c6:b6:a3:
         a0:2b:6a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 06:33:44 2025 by rpki-client