Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/r9gkd6CRsXzaYcVWO8KSDNzXqqU.cer
File:                     r9gkd6CRsXzaYcVWO8KSDNzXqqU.cer (raw, json)
Hash identifier:          ouSATOQQlRbnAM1U8MEkVUccmIFwzdJMe5T/0Y3OyFM=
Subject key identifier:   AF:D8:24:77:A0:91:B1:7C:DA:61:C5:56:3B:C2:92:0C:DC:D7:AA:A5
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       519C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/r9gkd6CRsXzaYcVWO8KSDNzXqqU.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Sun 15 Jun 2025 01:37:32 +0000
Certificate not after:    Mon 15 Jun 2026 01:30:02 +0000
Subordinate resources:    IP: 103.144.122.0/23
                          IP: 133.32.192.0/21
                          IP: 133.226.176.0/21
                          IP: 202.233.72.0/22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20892 (0x519c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Jun 15 01:37:32 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=AFD82477A091B17CDA61C5563BC2920CDCD7AAA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e0:28:97:f3:a5:31:74:98:62:e4:0d:0a:0f:
                    27:80:fc:f7:84:ec:3a:61:41:d3:55:cc:3a:1a:b2:
                    2e:6d:3f:c7:39:f1:57:83:62:fc:e6:ab:4c:98:c9:
                    55:0d:f1:5a:1b:22:1d:04:27:5e:30:aa:85:68:54:
                    d7:b3:14:3e:75:ec:41:f9:f0:d7:b0:ec:fd:84:97:
                    5d:82:4c:83:7e:ce:80:da:d1:58:6f:e0:86:73:73:
                    a1:44:ba:63:dd:e3:04:d9:85:2b:8d:42:96:d7:00:
                    d0:6f:e4:c3:8b:31:f9:f5:ba:5f:ea:88:85:52:c5:
                    cf:3d:82:1e:f8:a8:06:36:90:d7:84:86:89:d5:a2:
                    bd:36:10:c9:94:74:bf:c0:77:68:e9:51:b4:52:ab:
                    c0:cb:bb:24:76:f1:f3:cd:2d:0b:ad:46:71:8a:2d:
                    a7:cd:19:58:f4:00:a3:ea:89:f7:46:cc:6f:b8:47:
                    64:56:1d:9c:34:74:c0:d3:15:8c:6e:43:4b:49:92:
                    3c:93:7f:35:5c:82:cc:56:6d:9c:8c:6b:71:b6:83:
                    5a:fb:e7:86:c4:85:a2:0c:2b:3a:c5:da:0d:5f:b3:
                    72:6e:cf:53:86:6b:6d:dd:c5:2d:15:11:68:52:be:
                    c4:44:32:28:09:1c:db:de:f3:8f:3e:7f:0d:76:ee:
                    03:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:D8:24:77:A0:91:B1:7C:DA:61:C5:56:3B:C2:92:0C:DC:D7:AA:A5
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/r9gkd6CRsXzaYcVWO8KSDNzXqqU.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.122.0/23
                  133.32.192.0/21
                  133.226.176.0/21
                  202.233.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:00:30:8f:6e:60:38:05:6e:2d:b3:ea:9d:f0:0a:84:5e:b4:
         ac:53:60:c6:d9:d7:1e:f5:a3:19:ac:14:de:77:39:22:62:72:
         f4:18:3e:91:5b:e0:39:dc:6d:39:65:d9:4c:cc:20:ca:f7:d4:
         da:ff:f6:e2:e9:75:b8:10:1b:93:da:19:58:8c:de:0b:08:14:
         31:bd:dd:bf:b7:ea:e9:8f:5d:33:11:10:f8:8d:36:49:ec:b8:
         70:c1:be:22:bc:97:38:61:a7:bf:c4:e4:5c:e2:19:ba:b4:f7:
         a3:28:92:9a:29:cd:0a:67:94:e1:ef:1a:89:1e:75:39:4e:9f:
         34:32:8d:5a:d1:d6:b6:91:37:07:1a:40:a8:ef:30:01:ee:55:
         f7:a9:84:84:0a:81:14:b6:a5:ef:17:13:48:b4:1c:d8:34:4b:
         bb:7c:af:07:df:cf:98:f5:06:c7:02:81:53:bd:0f:94:96:94:
         36:91:71:60:c4:82:a6:79:5f:f8:8f:50:1b:dc:c0:79:e9:b1:
         c0:32:22:c3:e9:08:37:81:c6:50:00:69:c0:62:c7:5e:80:69:
         99:37:7a:27:c1:21:9b:34:1b:80:cd:20:d2:21:27:b3:2c:a7:
         0d:7c:40:bd:e8:25:de:b8:ca:18:d7:78:8c:c5:bb:26:16:3a:
         34:03:79:d1
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgICUZwwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC
NTIwREFBQzdEQThGMB4XDTI1MDYxNTAxMzczMloXDTI2MDYxNTAxMzAwMlowMzEx
MC8GA1UEAxMoQUZEODI0NzdBMDkxQjE3Q0RBNjFDNTU2M0JDMjkyMENEQ0Q3QUFB
NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANjgKJfzpTF0mGLkDQoP
J4D894TsOmFB01XMOhqyLm0/xznxV4Ni/OarTJjJVQ3xWhsiHQQnXjCqhWhU17MU
PnXsQfnw17Ds/YSXXYJMg37OgNrRWG/ghnNzoUS6Y93jBNmFK41CltcA0G/kw4sx
+fW6X+qIhVLFzz2CHvioBjaQ14SGidWivTYQyZR0v8B3aOlRtFKrwMu7JHbx880t
C61GcYotp80ZWPQAo+qJ90bMb7hHZFYdnDR0wNMVjG5DS0mSPJN/NVyCzFZtnIxr
cbaDWvvnhsSFogwrOsXaDV+zcm7PU4Zrbd3FLRURaFK+xEQyKAkc297zjz5/DXbu
Az8CAwEAAaOCAp0wggKZMB0GA1UdDgQWBBSv2CR3oJGxfNphxVY7wpIM3NeqpTAf
BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0
b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa
dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j
Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0
NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G
A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw
gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9hcC9BOTFBNzM4MTAwMDAvMjAxMDYvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw
a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMTA2L3I5
Z2tkNkNSc1h6YVljVldPOEtTRE56WHFxVS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz
Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv
bi54bWwwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBAFnkHoDBAOFIMADBAOF
4rADBALK6UgwDQYJKoZIhvcNAQELBQADggEBAJcAMI9uYDgFbi2z6p3wCoRetKxT
YMbZ1x71oxmsFN53OSJicvQYPpFb4DncbTll2UzMIMr31Nr/9uLpdbgQG5PaGViM
3gsIFDG93b+36umPXTMREPiNNknsuHDBviK8lzhhp7/E5FziGbq096MokpopzQpn
lOHvGokedTlOnzQyjVrR1raRNwcaQKjvMAHuVfephIQKgRS2pe8XE0i0HNg0S7t8
rwffz5j1BscCgVO9D5SWlDaRcWDEgqZ5X/iPUBvcwHnpscAyIsPpCDeBxlAAacBi
x16AaZk3eifBIZs0G4DNINIhJ7Mspw18QL3oJd64yhjXeIzFuyYWOjQDedE=
-----END CERTIFICATE-----
Generated at Fri Jul 4 09:36:11 2025 by rpki-client