Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer
File:                     qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer (raw, json)
Hash identifier:          SLTRw89AAiwfgpr1WqHZGtfG+buT695C2nNWx759g5g=
Subject key identifier:   A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       50F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Sun 15 Jun 2025 01:32:46 +0000
Certificate not after:    Mon 15 Jun 2026 01:30:02 +0000
Subordinate resources:    IP: 61.122.16.0/22
                          IP: 103.210.108.0/22
                          IP: 133.112.0.0/16
                          IP: 133.233.0.0/16
                          IP: 150.41.0.0/16
                          IP: 202.1.208.0/20
                          IP: 202.13.62.0 -- 202.13.79.255
                          IP: 202.210.56.0/22
                          IP: 202.243.188.0/22
                          IP: 203.178.8.0/24
                          IP: 203.178.17.0/24
                          IP: 203.179.64.0/20
                          IP: 210.134.208.0/20
                          IP: 211.1.0.0/19
                          IP: 211.120.240.0/21
                          IP: 218.231.16.0/20
                          IP: 219.101.112.0/20
                          IP: 220.213.240.0/20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20721 (0x50f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Jun 15 01:32:46 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=A935D5AD33DC630C4611987140F5E468B7081D11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fc:d5:8d:5f:ee:b9:c8:c1:73:da:a3:53:aa:
                    ec:75:d4:7b:f8:71:36:3e:48:e3:19:ed:3e:8a:e3:
                    2c:c7:62:08:2d:03:dc:91:89:ce:9e:8e:89:84:13:
                    d0:e0:6d:88:53:bd:35:3a:8b:16:5a:5e:80:c9:d1:
                    fd:76:23:f6:a0:7c:d2:a9:6b:12:29:c7:0d:b2:f7:
                    6b:80:56:41:fb:7a:52:63:e2:ba:a8:0a:0e:b5:60:
                    1c:31:7b:da:66:29:03:89:09:66:78:e0:38:b6:61:
                    dd:b5:cd:a9:28:7b:c2:76:9e:2b:9a:55:0f:cd:db:
                    82:0f:c0:2f:d1:e5:0d:4d:e7:23:bd:f2:11:50:cb:
                    bb:3c:23:d6:7a:91:e3:38:e4:21:3f:ec:e7:76:ac:
                    f4:b8:2e:0f:7b:5c:1e:63:7d:1b:ce:1e:95:49:6a:
                    31:2f:eb:7e:7f:6b:72:7a:e8:da:b5:b6:52:54:07:
                    69:ad:89:f4:b9:8a:67:9a:a1:f2:68:bd:74:84:3d:
                    d5:5f:13:21:32:12:dc:cd:6b:3a:c4:cb:6d:4c:d8:
                    e8:2f:71:dd:b6:01:04:9c:9f:53:e3:4a:af:b4:61:
                    e5:93:ee:4e:91:b3:8b:6b:43:5a:f0:b1:bf:fd:b3:
                    6f:b1:79:b2:ac:2c:b5:63:be:0c:16:13:de:bb:80:
                    6f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.122.16.0/22
                  103.210.108.0/22
                  133.112.0.0/16
                  133.233.0.0/16
                  150.41.0.0/16
                  202.1.208.0/20
                  202.13.62.0-202.13.79.255
                  202.210.56.0/22
                  202.243.188.0/22
                  203.178.8.0/24
                  203.178.17.0/24
                  203.179.64.0/20
                  210.134.208.0/20
                  211.1.0.0/19
                  211.120.240.0/21
                  218.231.16.0/20
                  219.101.112.0/20
                  220.213.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         74:70:3c:45:c5:be:b1:fe:cd:05:3f:13:9a:5b:7f:da:20:6e:
         08:04:f0:32:9f:4f:29:08:d5:26:b1:4e:1b:fa:61:08:ad:84:
         04:4b:9c:51:f8:39:60:87:d4:6d:d1:c3:39:ab:52:e3:7e:f0:
         a5:da:e1:5b:ba:1f:39:1f:dc:3d:d3:a8:63:9d:67:b4:89:1e:
         f3:22:ce:38:f8:2a:88:13:78:68:60:10:54:f0:7d:c5:cf:af:
         78:0f:d1:b2:c8:f2:f6:f0:fd:48:9f:ad:80:91:77:1f:e9:88:
         a9:16:3b:82:e2:04:9f:2d:d4:52:aa:33:4f:51:9f:26:d3:53:
         5a:77:ba:8c:4f:6f:16:ff:37:93:2e:45:a9:19:b7:18:ee:a0:
         a4:22:a9:b0:a7:df:99:44:89:ff:24:e3:e2:8b:0f:55:29:12:
         ba:db:ba:fd:f5:20:65:b7:d2:f0:30:b2:af:2d:79:7e:1e:73:
         81:0f:b8:d5:82:ee:27:54:01:97:2b:53:2d:b2:73:5a:6f:e1:
         de:99:02:a4:9b:8c:e7:d0:a5:9b:69:3e:48:08:7a:8f:21:d5:
         0f:8b:3c:8d:ab:b1:00:17:f2:fd:09:b2:e9:cf:0a:fe:8a:e5:
         26:7f:11:40:9b:43:8b:3f:89:5f:e9:7b:f0:eb:21:59:50:a7:
         a0:a1:be:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 09:44:33 2025 by rpki-client