Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/iKxYJ-pQhsWFNVOABbEqUfzR8PA.cer
File:                     iKxYJ-pQhsWFNVOABbEqUfzR8PA.cer (raw, json)
Hash identifier:          cmdF0Y6So9DmZaUkpYuR9eEbjMZQyE/jEZ3DPrrVv5Q=
Subject key identifier:   88:AC:58:27:EA:50:86:C5:85:35:53:80:05:B1:2A:51:FC:D1:F0:F0
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       5B6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30194/iKxYJ-pQhsWFNVOABbEqUfzR8PA.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30194/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Wed 15 Oct 2025 01:41:30 +0000
Certificate not after:    Thu 15 Oct 2026 01:30:02 +0000
Subordinate resources:    IP: 2401:5300::/32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23403 (0x5b6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Oct 15 01:41:30 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=88AC5827EA5086C58535538005B12A51FCD1F0F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8b:2d:f8:2c:41:44:8b:d5:26:b1:03:a5:ed:
                    7e:f2:d7:1d:50:56:c5:f9:4d:3a:14:32:42:2a:bf:
                    87:e8:af:33:ef:71:cb:a6:c6:33:77:aa:a5:46:b6:
                    ee:8f:3e:02:45:1c:d7:cb:37:c9:51:42:6f:b1:6a:
                    27:01:b5:28:b8:25:76:6b:1b:08:ee:49:af:b6:9d:
                    88:e0:7e:b1:d7:cb:7e:cc:d2:60:08:8c:4d:7a:fd:
                    ef:24:4d:de:ae:58:71:19:96:b3:37:5b:d7:bb:45:
                    1f:4d:12:4c:cd:0b:a0:b8:c1:34:06:05:6f:1c:78:
                    2f:18:61:6f:60:63:5f:12:fb:9b:b4:24:18:a3:1e:
                    6f:da:5d:26:bd:95:70:ef:dc:9d:40:f5:6d:b9:b2:
                    b8:19:23:2b:0f:2a:c3:9e:03:28:57:c6:d0:9e:57:
                    46:4a:8e:ea:7a:3a:41:de:52:4c:f0:7b:16:ff:ac:
                    f4:3f:f8:c4:82:ca:fe:94:dc:80:ab:c5:27:33:3a:
                    04:a9:ec:a5:c0:eb:89:f0:ff:2d:8a:39:b3:7f:5c:
                    60:49:aa:5f:2a:84:ee:46:e2:ad:e3:b6:03:43:ff:
                    39:99:09:48:1b:c1:ad:93:24:0f:52:7d:5a:23:2a:
                    36:f5:a2:d6:48:ff:b5:f9:cf:32:7e:0b:2c:f8:bc:
                    94:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:AC:58:27:EA:50:86:C5:85:35:53:80:05:B1:2A:51:FC:D1:F0:F0
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30194/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30194/iKxYJ-pQhsWFNVOABbEqUfzR8PA.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:5300::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:be:05:5a:68:d8:4a:b8:aa:67:b2:65:b8:35:ab:b0:2d:f2:
         76:aa:26:55:02:9c:b3:67:cc:d3:43:46:d9:06:a1:ba:a1:be:
         26:6d:89:c5:24:78:04:9b:03:3b:38:d2:3f:42:29:db:59:1b:
         64:44:dc:3e:50:ca:e9:f8:3c:8d:3c:42:c0:d4:4e:dc:40:29:
         5d:00:82:e3:99:3c:a2:0d:16:59:f2:3d:19:66:52:92:28:f3:
         45:8b:cb:49:76:59:7a:3e:7b:3f:c7:6d:c5:24:38:76:88:b2:
         5b:bc:ad:43:ab:52:16:b1:e8:e6:14:dc:b0:b0:14:56:25:de:
         58:eb:28:3e:32:c8:3e:d9:eb:3f:25:3e:47:06:cb:89:f5:93:
         7a:b0:bb:2f:11:64:d8:ff:d7:a8:5e:a5:48:67:a0:6c:64:71:
         ba:52:b8:1a:ee:d5:4b:fb:11:f6:0c:d5:d4:37:6a:da:68:68:
         64:84:43:98:03:b5:57:67:8a:46:e9:6d:40:a6:d2:49:f6:c9:
         06:ca:44:2f:b8:b5:1d:cd:fd:cd:a2:0a:5a:95:c7:3b:ad:39:
         9e:8c:c1:6d:0e:8f:f7:8f:f7:54:67:b2:1e:06:35:23:36:46:
         67:be:df:7d:a7:f6:d7:21:5f:77:b1:cf:1d:a1:53:82:7d:9c:
         d4:0d:4b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:26:13 2025 by rpki-client