Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/uOU8UkS3-adtX535-69h5XsuqTs.cer
File:                     uOU8UkS3-adtX535-69h5XsuqTs.cer (raw, json)
Hash identifier:          IU1EN4eBRXYY7P830OeKAS2JV3GZmjRFk3DWK3lhBdc=
Subject key identifier:   B8:E5:3C:52:44:B7:F9:A7:6D:5F:9D:F9:FB:AF:61:E5:7B:2E:A9:3B
Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2
Certificate issuer:       /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2
Certificate serial:       0FA6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Thu 15 May 2025 01:30:48 +0000
Certificate not after:    Fri 15 May 2026 01:30:03 +0000
Subordinate resources:    IP: 160.246.0.0/16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 May 2025 18:22:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4006 (0xfa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2
        Validity
            Not Before: May 15 01:30:48 2025 GMT
            Not After : May 15 01:30:03 2026 GMT
        Subject: CN=B8E53C5244B7F9A76D5F9DF9FBAF61E57B2EA93B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6c:b2:88:91:4b:3c:68:a0:62:f7:fb:39:88:
                    c9:56:2e:66:f5:32:dd:9a:fc:d1:cc:bd:ec:49:8d:
                    ba:6e:04:b5:5e:bf:91:61:8f:ad:24:d5:db:43:88:
                    33:8a:a5:82:12:e1:72:9e:76:cb:b6:4c:d9:f1:ca:
                    3e:30:b6:bf:6d:b6:2b:28:fe:61:5e:dc:76:6f:b9:
                    8f:d3:0c:67:d6:71:cd:a7:df:82:22:5f:60:56:a2:
                    92:1f:db:b4:01:7e:d1:f7:9f:f4:b3:c1:fe:97:4f:
                    c2:06:c2:2d:4e:4e:3b:77:82:11:a2:6a:e8:f8:90:
                    c2:9a:da:50:73:da:81:e4:cc:1c:dd:24:86:18:50:
                    94:fd:fb:16:f0:63:c0:5d:43:e8:24:57:3b:dd:d5:
                    8e:1b:8a:92:97:7d:2d:3b:fd:63:5f:c3:18:76:3e:
                    f4:9c:b0:9f:72:9d:bc:57:09:ea:8c:d9:6f:af:6a:
                    4a:bc:6b:3b:e6:7a:40:59:48:6c:c2:ca:de:f3:ff:
                    54:2b:68:81:13:1c:f7:67:43:ec:36:f6:1b:10:9a:
                    74:41:77:ef:b6:97:62:44:2b:18:e5:b1:70:11:25:
                    38:17:47:af:0b:b5:57:2a:e1:b2:83:3d:ba:dd:6a:
                    af:f9:80:32:40:d6:fa:c8:bf:6b:62:8c:99:ef:43:
                    27:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:E5:3C:52:44:B7:F9:A7:6D:5F:9D:F9:FB:AF:61:E5:7B:2E:A9:3B
            X509v3 Authority Key Identifier:
                keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.246.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         57:0e:a0:b8:fc:a3:9e:fe:5b:11:40:ff:35:92:58:15:89:b1:
         20:e7:89:c0:e1:2d:11:9d:ed:47:42:74:ee:fa:69:94:b9:7a:
         7b:f5:44:8e:22:d6:ee:a2:c4:0f:70:7f:f8:b8:e6:c5:a5:9c:
         87:bb:af:bf:91:65:ce:bc:a3:e6:bb:db:4e:7b:88:ec:17:30:
         0c:4e:71:43:da:42:98:48:22:88:38:0f:0b:25:40:8c:cf:fd:
         25:0f:6e:48:bc:57:86:2b:84:1a:27:19:38:da:34:c9:55:04:
         f7:32:c0:fe:5b:01:9c:97:38:2d:18:f9:d5:7f:99:ca:20:77:
         60:a7:32:d9:a2:39:73:93:5f:a3:07:0d:2e:8e:b0:b5:0a:82:
         99:44:36:07:8c:4a:64:ce:89:b1:f9:85:56:14:18:6f:de:97:
         e1:d1:59:50:fa:13:f9:05:ef:2a:90:6c:f2:9e:c6:2f:5f:0e:
         65:30:f9:75:ca:4c:d3:8e:39:98:c6:98:f1:16:08:5f:d7:43:
         be:e1:33:b2:b9:56:f6:b5:97:86:91:55:f2:34:30:8d:45:80:
         46:bc:cb:65:50:31:4e:ee:94:fe:ee:cf:02:06:9f:29:a0:06:
         69:54:88:f3:38:35:c2:e0:73:fd:4a:b2:af:cc:92:ab:7d:00:
         e3:b0:c2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 21:32:46 2025 by rpki-client