Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/4sshHyk-VOhOPL2dIrCIRnW7HGM.cer
File:                     4sshHyk-VOhOPL2dIrCIRnW7HGM.cer (raw, json)
Hash identifier:          NwQkrhCZcKxtXeYJ+BpyVO7IpTmzsvt0Ebd4o0p6mt0=
Subject key identifier:   E2:CB:21:1F:29:3E:54:E8:4E:3C:BD:9D:22:B0:88:46:75:BB:1C:63
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       46AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30406/4sshHyk-VOhOPL2dIrCIRnW7HGM.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30406/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Sat 15 Mar 2025 01:31:07 +0000
Certificate not after:    Sun 15 Mar 2026 01:30:03 +0000
Subordinate resources:    IP: 2400:99a0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18090 (0x46aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000
        Validity
            Not Before: Mar 15 01:31:07 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=E2CB211F293E54E84E3CBD9D22B0884675BB1C63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:9d:26:4b:61:0d:35:dd:4e:85:d3:93:a9:dc:
                    2a:38:a6:2a:6e:5a:ad:07:db:d7:6c:53:75:42:c7:
                    30:cf:61:bb:40:67:5d:6c:40:2b:6f:ed:e6:7f:78:
                    11:dd:1c:2a:cc:c0:53:96:80:27:0d:11:ee:e0:ea:
                    dd:f4:88:02:04:b9:47:39:7e:a2:7e:e9:5c:6b:c4:
                    71:b9:7c:1e:a6:a4:5e:ee:2c:cc:d0:0d:06:0a:ad:
                    22:59:4c:8e:00:95:60:3a:f3:70:7d:0d:64:2a:16:
                    69:0a:e6:4c:8f:0d:e5:b1:7a:4f:df:2c:5a:71:a7:
                    f1:61:22:43:7a:a6:19:a9:8c:c5:96:c2:2f:08:f6:
                    b4:e0:e2:30:8a:d9:c4:57:07:bf:0c:9b:35:c6:74:
                    3d:b0:55:eb:5a:a8:ea:f0:1b:87:82:98:c3:79:a9:
                    82:01:69:c6:89:e8:17:5f:e6:e6:f1:89:f1:14:14:
                    8f:65:5b:81:f5:ce:1e:de:02:eb:58:72:99:01:be:
                    d6:ad:9b:17:74:43:80:60:6e:37:86:f6:7d:d4:45:
                    65:8a:8c:cc:ac:24:27:04:6b:77:96:26:15:f1:80:
                    c7:16:88:35:bc:57:bc:ad:3c:be:10:b9:98:67:d4:
                    49:59:b6:9a:d0:2e:55:f7:61:ef:74:fe:1e:c3:b8:
                    6c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:CB:21:1F:29:3E:54:E8:4E:3C:BD:9D:22:B0:88:46:75:BB:1C:63
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30406/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30406/4sshHyk-VOhOPL2dIrCIRnW7HGM.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:99a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:aa:e6:32:bb:1f:ad:79:f4:24:dd:5f:4a:a8:d2:6a:d3:b0:
         75:fc:dd:35:70:3c:c9:1c:36:e4:96:3e:78:8a:a0:58:ca:44:
         b1:1c:4e:a5:ea:f3:82:51:e9:27:7c:b9:d0:1b:89:c2:74:3a:
         34:b9:0a:52:59:b5:32:23:7d:d4:e8:c3:66:43:a5:5a:8e:0b:
         10:6c:fb:9c:cb:be:62:54:96:47:e8:b0:19:11:1f:79:8f:02:
         8a:da:f4:08:63:c7:13:d3:b8:98:7e:2e:2a:1b:dd:95:2a:5f:
         a2:2e:9b:0e:4d:b0:32:92:8d:94:40:e9:0d:db:8d:d4:c5:76:
         8c:57:18:fe:ce:0d:d9:25:52:2e:79:f1:9a:37:99:97:62:9c:
         60:8c:5a:35:c6:a4:50:26:86:15:26:68:84:83:53:8a:17:f8:
         79:0a:a4:07:c9:f4:86:02:78:cd:01:69:5d:75:08:98:36:0b:
         92:63:1e:5b:bf:c3:b4:ea:79:00:5c:e5:a4:1a:ce:9e:1a:8b:
         67:01:92:42:76:a3:bf:68:66:5b:1c:c6:fd:f5:2f:43:b2:43:
         2c:0b:24:cf:b8:f8:f8:88:67:cf:cb:1a:a1:e8:4f:13:b4:a2:
         7d:b7:71:cb:ca:e4:4a:7a:b9:a5:b1:8a:ef:79:ed:b5:98:8e:
         d5:c1:d9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:14:17 2025 by rpki-client