Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/gfOCJfnuXvSu7h6MyztmbBvxbSc.cer
File:                     gfOCJfnuXvSu7h6MyztmbBvxbSc.cer (raw, json)
Hash identifier:          ukRNaYUW2Fa2acsH+DeI5b1Ec57zhkb/wd4e7mny3YA=
Subject key identifier:   81:F3:82:25:F9:EE:5E:F4:AE:EE:1E:8C:CB:3B:66:6C:1B:F1:6D:27
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       5161
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5648/gfOCJfnuXvSu7h6MyztmbBvxbSc.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5648/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Sun 15 Jun 2025 01:35:54 +0000
Certificate not after:    Mon 15 Jun 2026 01:30:02 +0000
Subordinate resources:    IP: 43.228.174.0/24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20833 (0x5161)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Jun 15 01:35:54 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=81F38225F9EE5EF4AEEE1E8CCB3B666C1BF16D27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:84:1c:c3:ad:98:48:f3:55:91:25:f4:55:1b:
                    38:10:9e:92:28:ad:10:78:f3:4d:c0:a8:8b:9d:31:
                    22:df:c3:25:a6:9d:21:0d:39:dd:18:19:36:4d:36:
                    e7:a3:eb:d7:99:1e:c4:f5:80:5f:be:e3:6c:88:c7:
                    d8:a6:43:05:87:21:4e:dc:da:5e:5d:ff:4f:41:30:
                    36:13:e8:87:63:2c:99:eb:de:a7:8c:be:3b:a8:b9:
                    9d:51:38:a8:34:5f:36:f1:5a:8b:2c:8b:d6:25:aa:
                    7c:bb:1a:a1:83:ab:67:3d:c1:a8:c3:e7:0e:aa:f9:
                    d7:85:fa:b1:97:2c:4a:e2:be:fe:a2:4e:5b:4a:f0:
                    68:71:c8:42:32:eb:c3:8e:d4:f9:6e:04:67:64:e8:
                    e2:01:67:b9:fb:7e:b9:69:43:7b:aa:31:73:a6:de:
                    e2:03:0a:c9:89:4f:4a:db:fd:dd:c4:12:a3:88:3c:
                    95:a8:b7:96:7c:38:a0:06:15:3a:ae:9d:88:c1:d7:
                    21:c8:e3:fc:cf:dd:8c:d0:ca:4b:c3:73:72:2b:d1:
                    8a:0e:3f:7a:46:0c:00:d2:8a:f7:68:85:ab:e4:ec:
                    db:ce:a5:46:a4:33:79:7a:66:f9:40:e2:c6:2f:30:
                    11:45:33:e2:5f:a5:1d:9f:de:e0:fd:8d:05:43:57:
                    09:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:F3:82:25:F9:EE:5E:F4:AE:EE:1E:8C:CB:3B:66:6C:1B:F1:6D:27
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5648/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5648/gfOCJfnuXvSu7h6MyztmbBvxbSc.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.228.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:49:d3:42:6c:7b:94:cc:ee:3d:02:de:06:cb:93:9b:b9:80:
         04:f7:52:12:d9:10:45:cd:48:b1:7b:9e:fd:4e:67:8c:86:b0:
         4a:c4:9c:96:5a:2e:36:62:61:88:52:01:40:81:4c:f1:e2:5d:
         cb:fe:a3:17:60:d7:23:8e:ac:ed:fe:ce:c5:99:61:0c:8c:77:
         4d:46:b3:d6:5b:fa:01:cd:be:5d:df:89:ff:1e:e8:27:62:a4:
         aa:af:65:54:58:27:b1:d7:a4:19:bf:38:d6:81:99:ec:30:bf:
         14:11:7a:c0:99:f0:64:c5:bc:13:07:73:88:27:5b:d1:6a:2a:
         3f:8c:76:59:cf:22:42:5b:0c:f0:47:af:44:d6:1b:56:e7:8d:
         e5:5b:e8:0f:c1:24:65:77:8d:e8:e7:a1:4c:1a:08:25:be:47:
         5e:8c:4e:fb:23:6c:36:f4:db:8b:38:a9:5d:f7:8c:52:ca:6e:
         0c:a4:93:7d:64:77:2a:5a:d6:93:7c:50:e8:46:c9:e5:4b:b2:
         55:b7:f4:42:33:3e:27:40:c9:63:5a:2d:ec:dc:52:87:bc:a9:
         ca:84:65:3d:a2:c6:0a:51:3a:4c:7a:66:88:cd:ed:d7:71:e3:
         88:33:61:8e:1b:9e:1c:e9:81:b0:40:25:c7:4f:ef:2d:08:e0:
         74:8d:3f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 09:36:11 2025 by rpki-client