Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
File:                     KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer (raw, json)
Hash identifier:          k8S1YDbIQLsMt0mcyqOJMd4upyEn1TaWEVjGiYtqLEc=
Subject key identifier:   29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       480A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Sat 15 Mar 2025 01:38:05 +0000
Certificate not after:    Sun 15 Mar 2026 01:30:03 +0000
Subordinate resources:    IP: 27.112.124.0/22
                          IP: 49.239.64.0/18
                          IP: 58.138.0.0 -- 58.138.191.255
                          IP: 61.211.96.0/19
                          IP: 101.128.128.0/17
                          IP: 103.2.57.0 -- 103.2.59.255
                          IP: 113.197.128.0/17
                          IP: 116.118.192.0/20
                          IP: 118.151.0.0 -- 118.151.191.255
                          IP: 119.10.192.0/18
                          IP: 121.102.0.0/16
                          IP: 121.200.200.0/21
                          IP: 124.41.0.0 -- 124.41.191.255
                          IP: 124.147.64.0/18
                          IP: 125.30.0.0/16
                          IP: 133.110.0.0/16
                          IP: 133.137.0.0/16
                          IP: 133.142.0.0/16
                          IP: 133.159.0.0/16
                          IP: 133.218.0.0/16
                          IP: 133.236.0.0/16
                          IP: 133.238.8.0 -- 133.238.255.255
                          IP: 150.31.0.0/16
                          IP: 163.49.0.0/16
                          IP: 163.131.0.0/16
                          IP: 163.140.0.0/16
                          IP: 163.218.0.0/16
                          IP: 202.16.104.0/21
                          IP: 202.32.0.0/16
                          IP: 202.48.108.0/23
                          IP: 202.141.192.0/20
                          IP: 202.214.0.0/16
                          IP: 202.221.0.0/16
                          IP: 202.224.128.0/18
                          IP: 202.232.0.0/16
                          IP: 202.238.128.0/17
                          IP: 202.245.133.0/24
                          IP: 202.247.136.0/21
                          IP: 202.247.160.0/19
                          IP: 202.253.115.0/24
                          IP: 203.180.0.0/16
                          IP: 210.128.0.0/16
                          IP: 210.130.0.0/16
                          IP: 210.133.192.0/18
                          IP: 210.138.0.0/16
                          IP: 210.142.128.0/19
                          IP: 210.148.0.0/15
                          IP: 210.173.0.0/19
                          IP: 211.14.32.0/19
                          IP: 218.42.160.0/19
                          IP: 218.228.96.0/19
                          IP: 219.105.0.0/19
                          IP: 219.111.0.0/17
                          IP: 219.119.0.0/16
                          IP: 219.121.160.0/19
                          IP: 219.126.128.0/17
                          IP: 220.100.0.0/16
                          IP: 220.156.0.0 -- 220.156.159.255
                          IP: 220.208.192.0/19
                          IP: 220.210.128.0/18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18442 (0x480a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000
        Validity
            Not Before: Mar 15 01:38:05 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d7:87:9f:aa:a3:5a:09:42:a3:66:6a:a3:4d:
                    40:96:73:80:f2:96:56:78:fc:9f:31:04:7a:71:66:
                    f3:71:2e:24:a5:f0:35:60:a6:75:f2:e5:5f:73:ba:
                    88:97:fb:d1:d1:fa:c5:b9:18:cf:2d:68:51:7d:72:
                    a5:f4:42:11:fe:58:96:54:28:d6:a6:c1:49:2b:28:
                    05:8d:ff:47:d8:40:da:b2:84:2d:5e:02:bb:40:ab:
                    8a:35:c1:32:86:21:c2:94:11:53:75:8d:9e:df:ea:
                    6a:ab:80:3c:4f:a2:39:e1:25:73:1b:9d:20:5a:82:
                    bf:1e:0d:ed:0c:7a:88:c4:b0:fc:bd:1f:80:4a:a0:
                    e4:2f:a2:fe:60:84:f2:b9:94:b8:8e:e5:b9:70:0c:
                    ec:7e:41:64:2f:e8:6a:93:ec:ae:37:3f:58:19:5e:
                    48:a4:b5:95:9b:a8:e9:32:91:70:e7:60:61:32:c7:
                    d2:6e:62:60:11:5e:54:6d:3d:ce:5b:7d:f1:d1:05:
                    61:e2:80:8d:e3:eb:5d:c4:b2:76:e8:e7:fd:20:e0:
                    15:fa:6c:9d:ae:06:3f:32:83:fc:c0:ce:24:32:e1:
                    8e:9f:97:d7:a9:ee:b5:83:d6:ad:5b:1a:eb:30:ec:
                    07:12:9f:81:ec:16:fb:cc:a0:5d:67:ce:cc:9a:9a:
                    52:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.112.124.0/22
                  49.239.64.0/18
                  58.138.0.0-58.138.191.255
                  61.211.96.0/19
                  101.128.128.0/17
                  103.2.57.0-103.2.59.255
                  113.197.128.0/17
                  116.118.192.0/20
                  118.151.0.0-118.151.191.255
                  119.10.192.0/18
                  121.102.0.0/16
                  121.200.200.0/21
                  124.41.0.0-124.41.191.255
                  124.147.64.0/18
                  125.30.0.0/16
                  133.110.0.0/16
                  133.137.0.0/16
                  133.142.0.0/16
                  133.159.0.0/16
                  133.218.0.0/16
                  133.236.0.0/16
                  133.238.8.0-133.238.255.255
                  150.31.0.0/16
                  163.49.0.0/16
                  163.131.0.0/16
                  163.140.0.0/16
                  163.218.0.0/16
                  202.16.104.0/21
                  202.32.0.0/16
                  202.48.108.0/23
                  202.141.192.0/20
                  202.214.0.0/16
                  202.221.0.0/16
                  202.224.128.0/18
                  202.232.0.0/16
                  202.238.128.0/17
                  202.245.133.0/24
                  202.247.136.0/21
                  202.247.160.0/19
                  202.253.115.0/24
                  203.180.0.0/16
                  210.128.0.0/16
                  210.130.0.0/16
                  210.133.192.0/18
                  210.138.0.0/16
                  210.142.128.0/19
                  210.148.0.0/15
                  210.173.0.0/19
                  211.14.32.0/19
                  218.42.160.0/19
                  218.228.96.0/19
                  219.105.0.0/19
                  219.111.0.0/17
                  219.119.0.0/16
                  219.121.160.0/19
                  219.126.128.0/17
                  220.100.0.0/16
                  220.156.0.0-220.156.159.255
                  220.208.192.0/19
                  220.210.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2d:a0:41:ce:b7:bc:70:11:84:64:be:90:f9:d5:88:0d:eb:df:
         72:85:9c:8f:4a:cf:4e:2c:57:32:e3:d3:00:a9:e1:3a:81:88:
         98:64:94:e5:29:11:36:cf:f5:5e:c5:83:44:9e:5f:e8:8d:2d:
         f1:62:9f:b6:c9:09:d1:6d:64:a1:11:f8:b3:f5:b7:72:90:b7:
         73:15:ec:4a:b2:31:8c:b0:86:e7:1f:9b:18:6b:0a:9a:bb:34:
         eb:36:cd:af:89:af:07:81:50:c0:71:23:1c:4b:b4:60:05:2a:
         df:6a:4b:b2:75:54:68:2e:e2:58:ed:9b:34:d1:f5:06:96:5f:
         e5:e3:de:3a:b1:23:ba:66:61:1f:b8:48:80:0a:8e:e1:e9:49:
         31:75:74:a8:ca:a8:23:1f:c0:d4:c2:1c:1d:09:6c:b9:d7:aa:
         00:4f:53:3e:a3:79:01:23:95:6f:c9:82:52:04:b3:3b:b5:90:
         03:15:79:49:ff:8d:9e:64:ad:01:b0:48:5f:ca:ac:d4:6a:50:
         69:14:e7:e8:a8:3f:f3:98:2e:c8:a8:8c:e6:bd:b3:09:7f:b4:
         61:10:f6:94:79:ec:9f:1e:b2:b4:5f:95:d8:70:ab:6c:b9:a4:
         76:73:08:46:76:95:cf:f7:0d:af:3d:6e:d8:9a:88:ba:cb:e3:
         e2:b8:c4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:22:11 2025 by rpki-client