Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/k7zbQzOWxD6rB23Nx69GLCK1AXY.cer
File:                     k7zbQzOWxD6rB23Nx69GLCK1AXY.cer (raw, json)
Hash identifier:          etc0LbI+qODG/cAEGV1EjkAXKcVf9/PJTFqzfnqUpDA=
Subject key identifier:   93:BC:DB:43:33:96:C4:3E:AB:07:6D:CD:C7:AF:46:2C:22:B5:01:76
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       57AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30410/k7zbQzOWxD6rB23Nx69GLCK1AXY.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30410/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Fri 15 Aug 2025 01:42:10 +0000
Certificate not after:    Sat 15 Aug 2026 01:30:02 +0000
Subordinate resources:    IP: 2400:c0a0::/32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 05:10:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22447 (0x57af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Aug 15 01:42:10 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=93BCDB433396C43EAB076DCDC7AF462C22B50176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:33:72:f1:4d:28:39:d8:2a:d8:02:ba:b7:e3:
                    8a:10:14:ee:68:44:8b:35:f7:36:1c:c5:70:43:51:
                    c3:24:00:dc:1a:d6:9f:98:07:be:4d:22:ab:cf:d8:
                    3e:15:f0:4a:55:33:95:fe:ad:24:d6:ae:85:e5:37:
                    4e:68:64:04:89:4c:32:63:7a:ea:c4:19:ef:66:54:
                    ed:63:9c:42:a6:59:6e:b7:1e:29:4d:18:83:ca:63:
                    f9:00:65:ff:16:59:36:05:0a:c2:7b:51:ee:60:3c:
                    16:d4:35:b5:fb:6e:84:bc:90:3f:85:68:19:4e:79:
                    08:24:96:21:46:14:92:ca:2e:e8:5b:de:28:22:ae:
                    90:2e:fd:fd:54:89:3a:79:0e:be:f1:70:53:49:0f:
                    bc:da:71:25:b4:b7:11:84:00:49:86:c3:c2:db:db:
                    ff:dd:9c:fc:98:ac:23:08:7b:f6:f2:a7:7a:b0:2b:
                    89:98:78:f9:a5:3f:41:e5:b2:84:29:69:3c:dc:47:
                    fc:fd:05:bb:b2:29:c5:49:aa:a5:cc:65:78:76:87:
                    d0:86:54:9c:f4:d1:40:27:e6:88:02:17:2f:33:59:
                    d8:b3:eb:1c:2a:de:e5:06:63:25:7b:05:9b:8f:bb:
                    80:32:7f:c7:31:17:c8:e7:27:d9:a2:9a:f3:ef:97:
                    f5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:BC:DB:43:33:96:C4:3E:AB:07:6D:CD:C7:AF:46:2C:22:B5:01:76
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30410/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30410/k7zbQzOWxD6rB23Nx69GLCK1AXY.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:c0a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:5d:52:74:41:66:5c:a0:52:f3:95:7b:f0:8a:c1:9b:36:9d:
         d7:04:3e:80:4f:94:0e:c2:88:3f:27:c4:f2:00:33:0e:17:f1:
         07:a5:d9:02:0f:5f:cd:f8:ce:9d:3d:ac:a7:8a:6d:44:62:7b:
         9a:75:11:95:5c:32:c4:65:40:b9:1c:26:f0:20:98:6c:cd:72:
         29:7a:91:7d:f9:2c:23:fc:d7:1f:1a:e0:24:0b:42:b7:57:56:
         98:ee:6a:24:6c:1e:d0:d9:c4:ae:cc:45:4b:ca:09:6e:df:43:
         b4:9c:dc:29:00:0e:9b:f1:a3:7a:75:9c:39:72:1f:dd:22:e9:
         04:31:e4:73:ca:6c:55:43:7b:87:9e:b8:32:e8:8f:8a:26:68:
         11:7f:8a:d4:0f:b7:97:23:d5:7a:4e:c8:f2:80:dc:1b:ff:b9:
         dc:99:52:4f:95:3a:d2:b3:97:00:8d:f3:c8:e2:b9:a8:32:77:
         fc:d3:6d:f3:8a:e8:96:8a:29:ba:ba:b1:e7:fe:b0:88:b1:2c:
         d4:49:95:0d:2f:47:03:ca:57:30:a6:6e:a2:db:8f:70:2f:7e:
         f3:c4:80:bd:8d:ae:9c:62:ee:b7:7f:fc:96:6f:48:0c:0e:4b:
         2c:ec:a7:38:5a:d1:42:ae:cf:a7:b9:8f:bf:7d:8b:72:fd:d3:
         ee:26:17:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:44:12 2025 by rpki-client