Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/I2Ky4-R43LrW9CpFESkM_Dc8JMY.cer
File:                     I2Ky4-R43LrW9CpFESkM_Dc8JMY.cer (raw, json)
Hash identifier:          vaNFhYIYz5ewq0ISF3QuYo5pN0K25Ewoq/HIBelFQUc=
Subject key identifier:   23:62:B2:E3:E4:78:DC:BA:D6:F4:2A:45:11:29:0C:FC:37:3C:24:C6
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       46B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/I2Ky4-R43LrW9CpFESkM_Dc8JMY.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Sat 15 Mar 2025 01:31:19 +0000
Certificate not after:    Sun 15 Mar 2026 01:30:03 +0000
Subordinate resources:    IP: 110.5.120.0/21
                          IP: 118.102.40.0 -- 118.102.63.255
                          IP: 124.246.128.0/17
                          IP: 202.122.192.0/19
                          IP: 202.170.208.0/21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18101 (0x46b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000
        Validity
            Not Before: Mar 15 01:31:19 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=2362B2E3E478DCBAD6F42A4511290CFC373C24C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:d3:43:d7:09:f3:df:46:14:30:d8:c3:5a:a2:
                    60:17:f5:a6:80:be:6c:5f:68:f9:29:d3:30:94:8a:
                    9e:39:ae:16:70:c3:46:65:22:40:0c:57:e4:1c:94:
                    1f:b1:40:0f:b1:5c:14:c4:56:3a:9c:46:99:8f:60:
                    94:77:52:32:c2:2d:36:4f:29:9b:dd:e6:3c:4e:65:
                    18:3f:cc:e7:d1:3f:d1:4c:35:e1:4e:b3:fa:36:06:
                    9f:50:cd:df:cb:dc:05:53:84:69:49:67:c7:30:9e:
                    44:d7:36:88:c6:0a:90:af:22:8b:9c:49:a6:24:a8:
                    48:8c:f9:9f:ee:58:e1:35:c7:73:b0:74:a5:9c:ac:
                    62:97:6c:c9:0e:d1:2f:1d:51:83:ce:d2:68:73:ca:
                    3b:b4:26:99:3a:d7:8c:c8:7a:ca:ea:98:96:10:cc:
                    93:1d:ee:88:bb:ac:18:66:c6:31:d4:28:29:d1:7b:
                    a7:99:64:97:38:e5:8b:35:c7:fd:69:76:f1:aa:cb:
                    df:32:8f:3c:26:a1:d9:33:c9:38:71:d5:aa:77:1e:
                    59:69:df:46:e9:e9:13:71:ad:df:c2:16:2f:55:1d:
                    bc:48:a7:33:8c:f9:cb:96:21:b7:77:6f:76:6a:bb:
                    fa:7b:1a:f0:1d:8a:4f:0a:b3:13:6f:20:85:17:3e:
                    8b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:62:B2:E3:E4:78:DC:BA:D6:F4:2A:45:11:29:0C:FC:37:3C:24:C6
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/I2Ky4-R43LrW9CpFESkM_Dc8JMY.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.5.120.0/21
                  118.102.40.0-118.102.63.255
                  124.246.128.0/17
                  202.122.192.0/19
                  202.170.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         28:8a:02:57:a0:72:ef:ff:75:0e:7b:52:98:07:73:51:67:26:
         6a:08:47:6e:f3:b1:35:4a:ae:dd:f1:52:ea:31:66:0c:76:1e:
         3d:e8:22:1a:a8:4e:7e:0d:51:ef:3b:61:32:fa:45:f2:2f:4f:
         fb:93:e3:8e:b1:e4:ab:de:41:6c:cf:3a:1b:1c:b6:32:46:0e:
         af:d7:74:00:6f:b3:c1:37:a3:67:f5:84:9c:09:16:7a:f1:93:
         95:d4:43:d5:c6:a9:51:a2:75:6e:63:7f:cb:c9:2c:30:15:aa:
         e6:d7:18:ab:8d:9a:1f:a9:22:a5:58:87:75:03:49:07:8f:f8:
         ee:28:22:5e:fd:7c:ab:dd:e1:46:42:10:e3:0d:24:e5:f6:c5:
         2c:23:40:9a:06:d6:31:c1:cf:cc:57:cf:c4:4b:c9:e5:ee:1e:
         ab:ab:8e:7a:f7:6d:4a:66:5d:88:e9:b0:32:1d:04:a3:a4:6b:
         b5:24:4b:ab:99:d8:ad:1a:34:c0:d2:0e:44:d0:cf:f7:e7:24:
         98:17:ca:89:49:1f:89:37:d4:3d:d6:07:a5:98:7f:36:39:cf:
         10:71:a0:25:74:b1:25:55:7f:bb:cf:b2:d5:c5:98:f4:4a:77:
         09:dd:d7:84:17:e8:b5:93:3e:a6:60:5b:03:dd:69:c8:49:03:
         b0:ef:ac:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:14:26 2025 by rpki-client