Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/YYky9kHWUNyGDXQRrIrrbDXInQQ.cer
File:                     YYky9kHWUNyGDXQRrIrrbDXInQQ.cer (raw, json)
Hash identifier:          ifNZGugZrJUB62icP2NhczAEVtvDinxR5mJrdRD5hx4=
Subject key identifier:   61:89:32:F6:41:D6:50:DC:86:0D:74:11:AC:8A:EB:6C:35:C8:9D:04
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       57CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30180/YYky9kHWUNyGDXQRrIrrbDXInQQ.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30180/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Fri 15 Aug 2025 01:42:57 +0000
Certificate not after:    Sat 15 Aug 2026 01:30:02 +0000
Subordinate resources:    IP: 2407:d600::/32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 05:10:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22476 (0x57cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Aug 15 01:42:57 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=618932F641D650DC860D7411AC8AEB6C35C89D04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:81:36:4e:71:f5:6f:02:0e:78:a4:03:a8:43:
                    00:b4:fe:28:05:32:e4:96:b6:a9:68:37:b1:31:fd:
                    de:ed:f9:7a:6f:d2:a8:ea:d2:bc:d6:ed:31:15:7f:
                    1e:d9:a5:61:bf:18:db:a5:9f:74:a2:ba:a4:5c:c3:
                    18:4e:20:80:7c:a3:2c:49:a2:cf:59:2d:38:a0:a5:
                    b8:a1:de:61:90:0b:ba:da:4f:cd:04:d5:f6:6a:16:
                    ed:78:f1:19:18:0a:46:46:9f:80:21:96:8f:4d:a9:
                    d5:da:6f:2b:cc:58:09:50:64:a8:92:fd:27:34:70:
                    8f:99:a9:a9:ce:71:45:2e:7d:1c:83:7b:ca:4a:a6:
                    7c:1e:ef:41:79:7c:67:a1:82:9a:98:d5:5a:45:d1:
                    16:e9:bb:af:92:c3:33:6a:7b:f5:15:4f:27:3a:ae:
                    6d:0a:38:5b:12:10:d1:7a:82:44:8e:d3:6b:7f:e0:
                    02:d9:92:08:55:1e:0b:e5:76:68:c7:27:f9:bc:9d:
                    a6:de:8a:1d:20:c2:80:13:d1:00:fa:ea:fe:29:61:
                    e9:3d:e7:05:03:5e:3e:f8:e7:59:22:6b:04:cb:2a:
                    9c:b1:3c:67:57:e9:66:99:b2:a5:18:39:7b:9f:4d:
                    2a:b9:7e:db:c0:e3:40:d0:28:f9:89:8d:98:80:8d:
                    d7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:89:32:F6:41:D6:50:DC:86:0D:74:11:AC:8A:EB:6C:35:C8:9D:04
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30180/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30180/YYky9kHWUNyGDXQRrIrrbDXInQQ.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:d600::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:0a:d2:1e:1f:c5:61:ae:25:aa:51:7f:6d:c3:89:8d:ea:52:
         ca:d8:f0:15:4c:83:7f:42:f5:73:b0:95:8f:da:17:ed:5c:43:
         3d:ad:aa:3b:f6:72:ad:d4:c7:33:6b:6e:59:51:30:61:c4:48:
         6e:1c:5e:9f:7a:54:f3:96:78:d2:a5:47:81:6b:e8:af:95:ea:
         23:9c:64:94:64:ce:f8:e0:80:f4:c3:39:27:75:13:79:58:67:
         c8:4d:41:b6:65:2b:cd:7f:43:e4:e3:9c:4d:5c:28:45:13:04:
         6d:34:3a:a0:34:eb:41:d3:22:02:f0:7f:8e:88:1c:54:f4:62:
         5f:b4:f5:52:16:f5:22:35:94:50:97:6a:a9:73:16:4d:0a:4f:
         88:27:ce:9d:15:76:74:f8:cd:86:dd:f0:e0:7c:36:77:27:14:
         d1:e4:8c:0c:89:44:9c:7e:7a:3c:c9:44:02:4d:d8:96:de:a1:
         65:b7:ae:9b:fb:4a:89:2a:89:fd:ea:f1:53:7a:e9:d6:21:76:
         3e:ab:d9:8f:e2:53:18:3c:12:73:7e:8a:a6:b7:b7:3b:58:72:
         4a:14:b2:8b:76:97:24:11:fe:30:0d:cf:bc:c2:be:f7:e0:d0:
         e4:25:de:ac:83:b1:8e:d1:89:43:a3:f6:08:a0:34:c8:72:ab:
         fa:fe:5a:c2
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgICV8wwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC
NTIwREFBQzdEQThGMB4XDTI1MDgxNTAxNDI1N1oXDTI2MDgxNTAxMzAwMlowMzEx
MC8GA1UEAxMoNjE4OTMyRjY0MUQ2NTBEQzg2MEQ3NDExQUM4QUVCNkMzNUM4OUQw
NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJWBNk5x9W8CDnikA6hD
ALT+KAUy5Ja2qWg3sTH93u35em/SqOrSvNbtMRV/HtmlYb8Y26WfdKK6pFzDGE4g
gHyjLEmiz1ktOKCluKHeYZALutpPzQTV9moW7XjxGRgKRkafgCGWj02p1dpvK8xY
CVBkqJL9JzRwj5mpqc5xRS59HIN7ykqmfB7vQXl8Z6GCmpjVWkXRFum7r5LDM2p7
9RVPJzqubQo4WxIQ0XqCRI7Ta3/gAtmSCFUeC+V2aMcn+bydpt6KHSDCgBPRAPrq
/ilh6T3nBQNePvjnWSJrBMsqnLE8Z1fpZpmypRg5e59NKrl+28DjQNAo+YmNmICN
1/ECAwEAAaOCAowwggKIMB0GA1UdDgQWBBRhiTL2QdZQ3IYNdBGsiutsNcidBDAf
BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0
b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa
dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j
Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0
NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G
A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw
gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9hcC9BOTFBNzM4MTAwMDAvMzAxODAvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw
a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMTgwL1lZ
a3k5a0hXVU55R0RYUVJySXJyYkRYSW5RUS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz
Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv
bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkB9YAMA0GCSqGSIb3
DQEBCwUAA4IBAQCACtIeH8VhriWqUX9tw4mN6lLK2PAVTIN/QvVzsJWP2hftXEM9
rao79nKt1Mcza25ZUTBhxEhuHF6felTzlnjSpUeBa+ivleojnGSUZM744ID0wzkn
dRN5WGfITUG2ZSvNf0Pk45xNXChFEwRtNDqgNOtB0yIC8H+OiBxU9GJftPVSFvUi
NZRQl2qpcxZNCk+IJ86dFXZ0+M2G3fDgfDZ3JxTR5IwMiUScfno8yUQCTdiW3qFl
t66b+0qJKon96vFTeunWIXY+q9mP4lMYPBJzfoqmt7c7WHJKFLKLdpckEf4wDc+8
wr734NDkJd6sg7GO0YlDo/YIoDTIcqv6/lrC
-----END CERTIFICATE-----
Generated at Sat Aug 23 07:21:51 2025 by rpki-client