Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer
File:                     qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer (raw, json)
Hash identifier:          JqSIjKLsMsgwjJc0G5eOA8WhsSB6QlNLtifqId0GLkQ=
Subject key identifier:   A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       643C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Sun 15 Mar 2026 01:32:21 +0000
Certificate not after:    Mon 15 Mar 2027 01:30:02 +0000
Subordinate resources:    IP: 61.122.16.0/22
                          IP: 103.210.108.0/22
                          IP: 133.112.0.0/16
                          IP: 133.233.0.0/16
                          IP: 150.41.0.0/16
                          IP: 202.1.208.0/20
                          IP: 202.13.62.0 -- 202.13.79.255
                          IP: 202.210.56.0/22
                          IP: 202.243.188.0/22
                          IP: 203.178.8.0/24
                          IP: 203.178.17.0/24
                          IP: 203.179.64.0/20
                          IP: 210.134.208.0/20
                          IP: 211.1.0.0/19
                          IP: 211.120.240.0/21
                          IP: 218.231.16.0/20
                          IP: 219.101.112.0/20
                          IP: 220.213.240.0/20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 05:36:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25660 (0x643c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Mar 15 01:32:21 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A935D5AD33DC630C4611987140F5E468B7081D11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fc:d5:8d:5f:ee:b9:c8:c1:73:da:a3:53:aa:
                    ec:75:d4:7b:f8:71:36:3e:48:e3:19:ed:3e:8a:e3:
                    2c:c7:62:08:2d:03:dc:91:89:ce:9e:8e:89:84:13:
                    d0:e0:6d:88:53:bd:35:3a:8b:16:5a:5e:80:c9:d1:
                    fd:76:23:f6:a0:7c:d2:a9:6b:12:29:c7:0d:b2:f7:
                    6b:80:56:41:fb:7a:52:63:e2:ba:a8:0a:0e:b5:60:
                    1c:31:7b:da:66:29:03:89:09:66:78:e0:38:b6:61:
                    dd:b5:cd:a9:28:7b:c2:76:9e:2b:9a:55:0f:cd:db:
                    82:0f:c0:2f:d1:e5:0d:4d:e7:23:bd:f2:11:50:cb:
                    bb:3c:23:d6:7a:91:e3:38:e4:21:3f:ec:e7:76:ac:
                    f4:b8:2e:0f:7b:5c:1e:63:7d:1b:ce:1e:95:49:6a:
                    31:2f:eb:7e:7f:6b:72:7a:e8:da:b5:b6:52:54:07:
                    69:ad:89:f4:b9:8a:67:9a:a1:f2:68:bd:74:84:3d:
                    d5:5f:13:21:32:12:dc:cd:6b:3a:c4:cb:6d:4c:d8:
                    e8:2f:71:dd:b6:01:04:9c:9f:53:e3:4a:af:b4:61:
                    e5:93:ee:4e:91:b3:8b:6b:43:5a:f0:b1:bf:fd:b3:
                    6f:b1:79:b2:ac:2c:b5:63:be:0c:16:13:de:bb:80:
                    6f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.122.16.0/22
                  103.210.108.0/22
                  133.112.0.0/16
                  133.233.0.0/16
                  150.41.0.0/16
                  202.1.208.0/20
                  202.13.62.0-202.13.79.255
                  202.210.56.0/22
                  202.243.188.0/22
                  203.178.8.0/24
                  203.178.17.0/24
                  203.179.64.0/20
                  210.134.208.0/20
                  211.1.0.0/19
                  211.120.240.0/21
                  218.231.16.0/20
                  219.101.112.0/20
                  220.213.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3b:16:e3:d5:2e:4e:29:18:da:97:eb:c7:d0:d5:11:65:f0:23:
         20:ed:ee:7d:ba:c4:55:e5:c3:b4:bb:77:98:c7:26:02:99:b6:
         e0:ce:46:38:11:01:2d:54:96:95:c9:c4:b2:fd:9a:35:e1:13:
         dd:fb:4c:b6:d5:24:fa:c0:67:2b:ac:d9:e9:b2:08:5e:d6:b6:
         0e:35:e4:23:00:a4:f4:8a:99:41:6a:1f:e3:fc:1b:7a:78:f4:
         4f:6c:03:cb:91:ba:49:b9:60:b3:19:cc:12:af:26:14:73:9e:
         20:d8:15:87:09:57:1f:fd:dd:e7:19:e6:43:a4:96:32:2a:d1:
         ef:69:a4:97:23:7d:d5:34:92:fd:35:84:de:3f:80:c6:52:f5:
         00:54:e8:f4:d8:92:fe:35:08:d9:62:48:0a:f2:f0:ea:30:2f:
         92:bf:4b:3c:a2:79:3d:75:2c:c2:f2:f2:5f:83:b0:36:1e:33:
         61:0e:0e:57:19:ad:43:09:e4:4e:95:f3:f5:78:84:38:3b:d6:
         43:57:38:2a:e8:0a:35:40:04:83:97:70:a3:cf:0d:e5:87:e3:
         c6:f4:20:da:bc:6c:3b:92:e1:b9:c5:a2:10:4b:8a:87:10:24:
         fb:00:11:7b:c9:e6:77:cf:ab:ec:36:19:c9:c3:b1:37:2f:6e:
         50:b6:8a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:59 2026 by rpki-client