Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/nik_w9lEjwBH5M5tDStVP85mgK8.cer
File:                     nik_w9lEjwBH5M5tDStVP85mgK8.cer (raw, json)
Hash identifier:          q8Y+Hp2g4F0KwVyAMvwLYqtrZOcTptNKKuJD4cCVhX8=
Subject key identifier:   9E:29:3F:C3:D9:44:8F:00:47:E4:CE:6D:0D:2B:55:3F:CE:66:80:AF
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       642E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30447/nik_w9lEjwBH5M5tDStVP85mgK8.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30447/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Sun 15 Mar 2026 01:31:41 +0000
Certificate not after:    Mon 15 Mar 2027 01:30:02 +0000
Subordinate resources:    IP: 2402:de0::/32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25646 (0x642e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Mar 15 01:31:41 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=9E293FC3D9448F0047E4CE6D0D2B553FCE6680AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:1a:15:13:74:14:24:37:40:63:90:c6:fb:b4:
                    14:23:2d:77:a8:b6:4d:f9:85:6b:04:81:fa:98:85:
                    55:69:51:5e:67:17:53:b7:0c:f4:04:e5:8b:84:42:
                    b2:83:66:d8:d2:83:8c:63:36:2c:25:e6:87:b1:20:
                    5d:93:85:b0:98:5e:2b:fb:e7:74:d4:c3:4b:4e:f4:
                    11:b2:9f:35:8b:c9:99:f2:14:c9:5c:54:ec:a6:98:
                    df:0a:19:66:e6:e1:bc:b5:44:a2:db:84:c0:8f:97:
                    e4:9e:03:a8:1f:17:86:f2:3a:d4:5d:f2:39:53:48:
                    ad:6e:a1:fa:5a:a2:10:18:46:42:a3:a7:f1:6e:da:
                    52:a1:b6:e1:4d:7d:61:62:1a:99:7f:c6:1e:d5:79:
                    6f:c9:65:7f:bf:3f:cc:67:fd:8c:76:2b:61:19:b7:
                    8a:16:db:e8:a3:3a:30:40:a9:80:09:2d:fc:c4:5f:
                    e6:6b:c7:93:d8:11:32:fa:35:67:8d:1c:ab:3d:ca:
                    b9:bd:2c:d8:05:49:97:29:be:43:eb:de:8e:a4:83:
                    9f:73:dd:2c:1d:aa:01:ec:26:35:58:7c:55:7d:59:
                    e2:c4:31:79:ca:0a:52:f6:8d:f0:43:b7:c9:ae:aa:
                    b9:a8:45:fa:bd:a0:95:32:c5:1b:a9:0f:e9:1b:b8:
                    55:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:29:3F:C3:D9:44:8F:00:47:E4:CE:6D:0D:2B:55:3F:CE:66:80:AF
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30447/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30447/nik_w9lEjwBH5M5tDStVP85mgK8.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:de0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:10:a1:c9:1d:4d:1b:e7:69:5d:ff:84:9c:f9:7b:a4:06:78:
         c2:d0:61:fa:2e:03:7c:e9:97:ea:7c:d3:dc:40:e9:ab:4a:93:
         aa:bc:ef:bf:88:62:f8:aa:1f:c9:62:ce:db:76:8f:54:11:ff:
         bd:02:c8:fb:dd:f1:37:ed:1a:d0:5b:9b:82:4b:24:d3:14:8e:
         23:ae:e0:67:9a:49:c3:4a:5a:60:ef:66:44:e1:7c:91:63:33:
         3b:8b:fd:55:81:e4:64:77:53:cc:6e:31:21:49:5f:b7:64:5a:
         1d:44:eb:42:ec:c8:65:ac:67:ff:f4:ff:f9:38:57:36:a4:64:
         b6:f3:4f:e7:e3:c0:55:bc:a2:a6:f0:2f:5d:c9:6d:18:05:ef:
         11:10:e6:9a:4c:91:90:02:33:24:eb:ad:84:38:2c:89:0e:cf:
         f1:75:69:83:75:88:a4:bd:fc:a4:75:c0:ff:d5:f1:58:8d:e1:
         d7:a6:50:17:ba:c6:a4:fc:39:86:51:1f:26:f4:11:36:90:60:
         ec:b0:3a:fe:33:24:08:5e:2f:58:0c:67:3b:8e:dd:27:06:69:
         28:fa:56:4d:18:2d:62:8e:fa:62:5c:72:4b:62:9f:1e:cc:a0:
         87:64:0c:d0:96:d8:9b:4c:ce:0c:e3:a0:a1:3c:8e:36:a8:95:
         9a:20:c6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:36:22 2026 by rpki-client