Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/cQ8h-ENs0DYxVkw45JQL2fyj8Rw.cer
File:                     cQ8h-ENs0DYxVkw45JQL2fyj8Rw.cer (raw, json)
Hash identifier:          Laal2qdnVmhNGtJh8yZMPIp34nBYq0fBAhWiHVBxC4w=
Subject key identifier:   71:0F:21:F8:43:6C:D0:36:31:56:4C:38:E4:94:0B:D9:FC:A3:F1:1C
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       5B64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/880/cQ8h-ENs0DYxVkw45JQL2fyj8Rw.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/880/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Wed 15 Oct 2025 01:41:19 +0000
Certificate not after:    Thu 15 Oct 2026 01:30:02 +0000
Subordinate resources:    IP: 103.78.118.0/23
                          IP: 202.71.48.0/20
                          IP: 202.90.208.0/20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 20:26:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23396 (0x5b64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Oct 15 01:41:19 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=710F21F8436CD03631564C38E4940BD9FCA3F11C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:74:9a:61:67:e5:45:8a:b0:14:74:7b:78:c0:
                    c7:d8:82:36:31:08:31:05:1f:9f:09:5d:8d:cb:dd:
                    39:26:a6:0e:27:15:ca:64:6b:c4:25:ac:f9:28:a3:
                    4f:bd:61:13:da:f1:71:0d:fb:b5:e3:70:70:e2:b3:
                    ac:40:fa:12:41:a7:c6:20:4d:60:65:79:8b:41:99:
                    16:43:bc:02:f0:5d:2c:25:7f:6a:18:b5:06:44:00:
                    e0:b9:bb:e3:71:c9:35:14:38:ab:4e:81:7a:3c:43:
                    c7:a2:f7:71:44:c6:36:6c:92:3c:eb:bc:5e:c4:bf:
                    1e:6e:8a:9f:71:8d:cd:2f:6a:34:d2:83:cd:fc:8a:
                    d9:0c:56:35:63:66:0a:01:c3:ed:c4:ba:47:5b:27:
                    95:6b:6e:a4:de:c8:81:2f:7d:9a:21:c9:68:5a:01:
                    2d:c5:48:b5:81:fc:e1:5c:5f:40:2d:a6:d4:91:40:
                    44:fd:de:7a:98:12:e9:78:41:ca:05:e2:29:d5:c9:
                    59:e1:a2:77:8c:4d:72:b3:7f:2b:36:65:9b:2e:b5:
                    77:9f:ee:f8:58:13:b0:25:2d:84:18:19:03:74:8b:
                    d1:bc:18:b2:6e:77:ac:f0:c7:f9:be:01:bc:75:cc:
                    d3:b4:98:57:0d:97:9b:96:19:2a:61:a9:d8:4c:52:
                    c1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:0F:21:F8:43:6C:D0:36:31:56:4C:38:E4:94:0B:D9:FC:A3:F1:1C
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/880/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/880/cQ8h-ENs0DYxVkw45JQL2fyj8Rw.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.78.118.0/23
                  202.71.48.0/20
                  202.90.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         36:48:8a:48:f5:8b:24:6e:59:2e:d5:41:b6:57:0b:fc:38:d7:
         e0:ff:ac:bf:7f:0d:80:45:6d:65:37:72:4d:e2:d9:ae:fa:16:
         2d:09:d3:50:86:f5:9f:3c:6d:69:e3:51:36:ba:a7:66:60:0c:
         3c:31:d1:b7:72:72:53:95:87:6b:46:06:a2:57:68:a3:27:7e:
         74:e6:56:89:7c:22:94:65:f5:2c:8e:9c:60:de:22:c3:73:25:
         9a:12:68:81:c2:2a:ad:4e:cc:65:9d:a5:1a:28:e5:3e:c0:be:
         83:37:b2:7e:99:55:c6:b0:bc:40:bd:d8:f3:37:25:51:27:c3:
         d1:45:14:12:e5:67:89:ff:f6:d6:3a:2a:04:19:27:8e:9d:2a:
         cd:ae:6a:46:26:e6:6d:7e:f5:6e:da:d5:cd:09:34:67:d4:09:
         ef:26:2e:80:4e:ba:25:58:47:a6:69:12:70:93:b9:b0:52:78:
         f0:b8:68:7f:c3:ca:51:29:19:57:77:1b:4d:66:b7:49:39:0e:
         9e:bf:ad:e0:1d:24:26:d9:dd:b5:ef:51:84:c1:47:83:bd:b5:
         00:bb:86:29:81:88:4f:f7:ab:c3:9a:ac:54:3a:5d:13:e7:ba:
         ba:22:2d:d9:00:49:51:42:32:c8:d7:8a:e6:79:35:4a:d6:10:
         c0:61:d7:cd
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgICW2QwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC
NTIwREFBQzdEQThGMB4XDTI1MTAxNTAxNDExOVoXDTI2MTAxNTAxMzAwMlowMzEx
MC8GA1UEAxMoNzEwRjIxRjg0MzZDRDAzNjMxNTY0QzM4RTQ5NDBCRDlGQ0EzRjEx
QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMZ0mmFn5UWKsBR0e3jA
x9iCNjEIMQUfnwldjcvdOSamDicVymRrxCWs+SijT71hE9rxcQ37teNwcOKzrED6
EkGnxiBNYGV5i0GZFkO8AvBdLCV/ahi1BkQA4Lm743HJNRQ4q06BejxDx6L3cUTG
NmySPOu8XsS/Hm6Kn3GNzS9qNNKDzfyK2QxWNWNmCgHD7cS6R1snlWtupN7IgS99
miHJaFoBLcVItYH84VxfQC2m1JFARP3eepgS6XhBygXiKdXJWeGid4xNcrN/KzZl
my61d5/u+FgTsCUthBgZA3SL0bwYsm53rPDH+b4BvHXM07SYVw2Xm5YZKmGp2ExS
wQ8CAwEAAaOCApIwggKOMB0GA1UdDgQWBBRxDyH4Q2zQNjFWTDjklAvZ/KPxHDAf
BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0
b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa
dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j
Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0
NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G
A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB
7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw
L2FwL0E5MUE3MzgxMDAwMC84ODAvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt
cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzg4MC9jUThoLUVO
czBEWXhWa3c0NUpRTDJmeWo4UncubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw
a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s
MCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBZ052AwQEykcwAwQEylrQMA0G
CSqGSIb3DQEBCwUAA4IBAQA2SIpI9Yskblku1UG2Vwv8ONfg/6y/fw2ARW1lN3JN
4tmu+hYtCdNQhvWfPG1p41E2uqdmYAw8MdG3cnJTlYdrRgaiV2ijJ3505laJfCKU
ZfUsjpxg3iLDcyWaEmiBwiqtTsxlnaUaKOU+wL6DN7J+mVXGsLxAvdjzNyVRJ8PR
RRQS5WeJ//bWOioEGSeOnSrNrmpGJuZtfvVu2tXNCTRn1AnvJi6ATrolWEemaRJw
k7mwUnjwuGh/w8pRKRlXdxtNZrdJOQ6ev63gHSQm2d2171GEwUeDvbUAu4YpgYhP
96vDmqxUOl0T57q6Ii3ZAElRQjLI14rmeTVK1hDAYdfN
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:54:05 2025 by rpki-client