Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/cQ8h-ENs0DYxVkw45JQL2fyj8Rw.cer
File:                     cQ8h-ENs0DYxVkw45JQL2fyj8Rw.cer (raw, json)
Hash identifier:          DngXBwYv8HCBcwI1VU68Pz08pCuU1Uj7u1ts6URY8JI=
Subject key identifier:   71:0F:21:F8:43:6C:D0:36:31:56:4C:38:E4:94:0B:D9:FC:A3:F1:1C
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       6CCD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/880/cQ8h-ENs0DYxVkw45JQL2fyj8Rw.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/880/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Wed 15 Jul 2026 01:32:28 +0000
Certificate not after:    Thu 15 Jul 2027 01:30:02 +0000
Subordinate resources:    IP: 103.78.118.0/23
                          IP: 202.71.48.0/20
                          IP: 202.90.208.0/20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27853 (0x6ccd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Jul 15 01:32:28 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=710F21F8436CD03631564C38E4940BD9FCA3F11C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:74:9a:61:67:e5:45:8a:b0:14:74:7b:78:c0:
                    c7:d8:82:36:31:08:31:05:1f:9f:09:5d:8d:cb:dd:
                    39:26:a6:0e:27:15:ca:64:6b:c4:25:ac:f9:28:a3:
                    4f:bd:61:13:da:f1:71:0d:fb:b5:e3:70:70:e2:b3:
                    ac:40:fa:12:41:a7:c6:20:4d:60:65:79:8b:41:99:
                    16:43:bc:02:f0:5d:2c:25:7f:6a:18:b5:06:44:00:
                    e0:b9:bb:e3:71:c9:35:14:38:ab:4e:81:7a:3c:43:
                    c7:a2:f7:71:44:c6:36:6c:92:3c:eb:bc:5e:c4:bf:
                    1e:6e:8a:9f:71:8d:cd:2f:6a:34:d2:83:cd:fc:8a:
                    d9:0c:56:35:63:66:0a:01:c3:ed:c4:ba:47:5b:27:
                    95:6b:6e:a4:de:c8:81:2f:7d:9a:21:c9:68:5a:01:
                    2d:c5:48:b5:81:fc:e1:5c:5f:40:2d:a6:d4:91:40:
                    44:fd:de:7a:98:12:e9:78:41:ca:05:e2:29:d5:c9:
                    59:e1:a2:77:8c:4d:72:b3:7f:2b:36:65:9b:2e:b5:
                    77:9f:ee:f8:58:13:b0:25:2d:84:18:19:03:74:8b:
                    d1:bc:18:b2:6e:77:ac:f0:c7:f9:be:01:bc:75:cc:
                    d3:b4:98:57:0d:97:9b:96:19:2a:61:a9:d8:4c:52:
                    c1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:0F:21:F8:43:6C:D0:36:31:56:4C:38:E4:94:0B:D9:FC:A3:F1:1C
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/880/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/880/cQ8h-ENs0DYxVkw45JQL2fyj8Rw.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.78.118.0/23
                  202.71.48.0/20
                  202.90.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6c:fd:6e:60:50:32:8f:da:2a:41:bd:53:01:2c:1f:38:93:f7:
         eb:62:11:6b:e7:4a:71:9f:9a:ec:07:1e:88:76:28:a0:f1:94:
         62:b4:19:76:78:c0:a2:14:cb:fc:67:73:ba:d3:93:71:ef:91:
         e8:e6:f2:66:0e:bf:50:bd:2c:52:3f:20:49:1b:93:02:1a:24:
         8d:a9:33:5a:21:61:8d:dd:b6:55:6d:b1:5b:e9:28:f0:27:f8:
         9b:5b:80:51:c7:2b:f8:ff:d0:f4:9f:41:2f:70:7a:07:5a:95:
         2a:86:7d:31:0e:09:45:2f:6b:27:a1:4f:07:a0:ef:3a:50:34:
         56:2f:58:0f:bc:7c:6e:ae:ed:48:92:ec:3d:63:5d:95:c3:27:
         55:bd:0c:11:55:82:84:f6:1e:ff:6e:91:b2:10:0b:ae:5a:ef:
         60:63:cd:c0:0d:a1:28:6b:a9:99:2c:25:94:2a:af:f1:88:95:
         36:bd:a6:8d:56:cb:d3:85:7f:ca:c8:10:3e:55:17:27:f5:7e:
         e4:7f:df:30:e2:80:00:c4:66:fc:77:5c:41:89:6c:b5:4c:ce:
         37:42:ad:e5:12:db:56:fd:67:b9:fb:34:04:b3:58:65:a1:56:
         bc:f8:9c:69:55:fe:82:f1:99:0a:d1:0f:81:ba:12:7c:df:0b:
         4a:ba:3a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:16:58 2026 by rpki-client