Certificate

$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oa5xzag3zu9pzhFNcByGUKCo-qk.cer
File:                     oa5xzag3zu9pzhFNcByGUKCo-qk.cer (raw, json)
Hash identifier:          dYNhs9LeRWo2K0mXxZKAlILsRENdntiRB5667B2fRiM=
Subject key identifier:   A1:AE:71:CD:A8:37:CE:EF:69:CE:11:4D:70:1C:86:50:A0:A8:FA:A9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02D2AD
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://akane.maru.co.jp/repo/1073c6/14/A1AE71CDA837CEEF69CE114D701C8650A0A8FAA9.mft
caRepository:             rsync://akane.maru.co.jp/repo/1073c6/14/
Notify URL:               https://akane.maru.co.jp/oshirase.xml
Certificate not before:   Tue 01 Sep 2026 14:11:04 +0000
Certificate not after:    Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources:    AS: 7719
                          AS: 9663
                          AS: 154486
                          IP: 2001:df5:f4c0::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 15:21:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 185005 (0x2d2ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep  1 14:11:04 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=A91B82CE0000, serialNumber=A1AE71CDA837CEEF69CE114D701C8650A0A8FAA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7e:10:7b:4b:95:9a:71:45:6d:30:5d:90:55:
                    60:8f:54:5d:16:7d:cb:89:99:d8:c4:02:a6:62:59:
                    b2:72:27:6a:d3:fc:6f:91:a3:e2:b6:ba:29:12:22:
                    16:b5:85:db:94:1f:f4:f6:07:5d:96:7b:d8:22:f6:
                    24:ed:90:f4:6a:37:b0:d7:5f:f7:18:c9:ce:d9:2f:
                    86:d3:72:26:77:f3:04:eb:72:c7:8f:7f:d4:49:c8:
                    83:eb:49:eb:38:85:6e:0e:f6:cf:16:05:33:99:9b:
                    fa:23:da:51:e5:44:0a:b3:bf:84:9a:f2:22:0d:ad:
                    74:a5:8d:4a:47:c7:f4:54:5b:46:04:52:31:69:e2:
                    76:65:ca:e1:b8:71:9d:de:8f:17:96:37:0c:14:34:
                    08:4d:c9:f9:a3:5c:33:9c:db:c5:0a:ab:b9:83:32:
                    0f:0a:c5:f6:ce:6b:e4:db:81:4e:ed:da:75:6d:9d:
                    5e:21:de:30:43:4d:27:2c:db:09:eb:c3:f5:3c:fc:
                    e7:fa:af:f9:69:53:25:7b:b4:ee:50:0b:cf:6d:d0:
                    2b:de:ba:42:d6:ec:65:99:d1:b1:7f:26:b2:2b:c0:
                    a6:c1:bf:29:c9:7d:6a:b6:e7:56:ae:26:b4:83:48:
                    13:d6:9d:14:0a:e0:62:57:93:19:44:da:21:92:a2:
                    39:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:AE:71:CD:A8:37:CE:EF:69:CE:11:4D:70:1C:86:50:A0:A8:FA:A9
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://akane.maru.co.jp/repo/1073c6/14/
                RPKI Manifest - URI:rsync://akane.maru.co.jp/repo/1073c6/14/A1AE71CDA837CEEF69CE114D701C8650A0A8FAA9.mft
                RPKI Notify - URI:https://akane.maru.co.jp/oshirase.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  7719
                  9663
                  154486

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:f4c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:ec:65:6f:1b:73:5b:cc:fa:be:f3:65:31:75:2e:d5:f4:e8:
         53:05:02:01:36:8d:25:62:9e:14:f9:5f:25:6b:9b:6f:0c:59:
         78:ac:82:b6:e2:5f:fa:ad:3a:57:ec:0f:4a:a9:99:d1:93:2d:
         17:e6:a1:b5:2e:50:4b:f5:05:a5:7b:95:35:af:c5:d8:1c:94:
         8e:00:46:68:73:1d:60:29:aa:10:e5:49:64:d5:4f:d9:cf:b9:
         01:21:59:96:77:bd:6f:a2:a4:98:ec:84:89:17:a2:3d:ec:2a:
         9b:10:4f:d1:73:af:df:74:64:64:72:cb:b1:a9:4e:62:6d:e5:
         ec:32:08:3b:f9:44:0e:bd:3a:62:c6:8d:77:c5:e6:03:ce:3e:
         90:8f:03:18:2d:ae:73:2e:14:6c:b6:99:e3:18:ff:f0:50:35:
         4d:59:55:12:6f:9f:e1:f1:a4:fd:ef:9b:10:2e:bc:93:db:db:
         b6:05:c5:c9:3a:61:d5:97:29:ab:b9:4d:b9:32:50:e8:98:a6:
         25:59:08:e2:01:0f:35:11:9b:10:1e:00:14:54:d0:9b:f3:ae:
         3d:5f:50:ba:45:09:fa:86:2a:df:69:94:11:6f:f2:dc:c1:01:
         1f:b1:a5:1e:e2:91:d6:fb:d7:6d:fe:28:3a:b2:65:50:18:cb:
         90:c5:e2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:23:36 2026 by rpki-client