Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer
File:                     dkKgfZrJ0ifqQveebRMcsakg7c4.cer (raw, json)
Hash identifier:          ePCdrt2ncE65CxHKSzbGfMtJCZbEuw2Wj07qyGhpwKQ=
Subject key identifier:   76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       4691
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Sat 15 Mar 2025 01:30:40 +0000
Certificate not after:    Sun 15 Mar 2026 01:30:03 +0000
Subordinate resources:    IP: 103.53.120.0/22
                          IP: 110.92.32.0/19
                          IP: 124.146.64.0/18
                          IP: 202.95.32.0/19
                          IP: 202.208.160.0/19
                          IP: 203.111.192.0/20
                          IP: 203.140.160.0/20
                          IP: 203.145.96.0/20
                          IP: 203.147.112.0/20
                          IP: 210.146.80.0/20
                          IP: 210.237.32.0/19
                          IP: 219.100.8.0/22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18065 (0x4691)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000
        Validity
            Not Before: Mar 15 01:30:40 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3d:20:93:b7:b4:9c:04:07:49:40:0d:9a:07:
                    75:ab:91:ce:e6:3a:84:2f:c4:1f:5f:68:3a:c8:7b:
                    b7:12:1f:98:d2:60:82:7f:4c:24:d7:7f:40:90:84:
                    9c:e8:1d:47:5c:26:13:3a:23:af:2e:8a:47:a4:96:
                    90:dc:df:f7:0f:19:ad:e2:8f:44:64:2f:3a:0c:70:
                    8e:e2:cb:86:21:58:89:a5:20:70:08:02:c2:6f:be:
                    1f:3f:ed:13:ec:c0:69:d9:3c:f4:1a:05:7c:3a:4c:
                    05:70:c5:19:54:ae:27:07:54:a8:af:4f:a7:95:de:
                    75:c0:7f:aa:7c:27:6a:88:9d:9d:fe:f2:4f:47:9c:
                    15:e9:f8:94:c2:ac:6a:30:e0:80:e4:bf:00:78:c1:
                    60:e6:3e:8e:fd:b7:32:e7:03:51:58:12:36:88:53:
                    4a:75:95:ca:45:8a:28:0b:6b:bc:32:2a:6c:06:69:
                    ac:da:43:93:e1:22:2b:9c:af:fb:b1:ff:ba:c4:2e:
                    dc:f0:c0:05:aa:c0:57:1b:c9:99:ea:97:94:14:13:
                    d9:af:8f:c2:b5:c7:34:7b:87:2e:6d:e6:51:36:0d:
                    c2:5e:85:e4:bc:03:d3:c3:2e:e1:5a:e4:14:90:e2:
                    19:4b:65:bc:22:50:bf:74:22:1d:c6:b6:11:73:01:
                    e9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.53.120.0/22
                  110.92.32.0/19
                  124.146.64.0/18
                  202.95.32.0/19
                  202.208.160.0/19
                  203.111.192.0/20
                  203.140.160.0/20
                  203.145.96.0/20
                  203.147.112.0/20
                  210.146.80.0/20
                  210.237.32.0/19
                  219.100.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:c8:6c:b5:b1:f9:e1:60:39:c7:8f:fd:7e:ea:02:66:0d:76:
         4c:8e:21:0a:3f:e1:0b:2c:a3:a2:de:f6:b6:aa:c0:13:ba:0d:
         89:ce:dd:33:44:5e:68:a7:24:d2:63:1e:57:fa:14:32:71:58:
         c4:0f:60:07:c7:75:a1:e0:c1:a4:00:b1:f6:a3:c3:62:d3:de:
         ee:11:0a:2e:ad:f5:4f:ce:51:06:31:73:f7:82:fd:32:dc:c2:
         00:ba:a5:21:a2:0c:a9:92:74:f8:e0:dd:65:77:ee:8e:0c:63:
         2c:11:be:b9:53:4d:46:26:e7:17:00:78:94:25:a7:33:1c:68:
         fd:b1:eb:79:f4:d1:ac:db:d8:47:64:4d:b2:49:0b:63:44:93:
         ee:7d:7c:a9:6d:75:37:52:08:f6:83:00:3f:63:ad:b0:86:ed:
         e3:4e:43:60:b0:f4:7e:c0:d0:6d:40:5f:fc:1a:a5:94:13:cf:
         a2:7d:b3:48:43:24:e5:b6:63:6f:04:a1:c4:b9:2c:9a:e8:62:
         81:5a:e5:f7:b2:fb:7e:e7:37:cd:fa:91:ce:d8:f7:93:c3:a0:
         43:07:b9:05:90:5b:d3:c6:d0:1c:ee:41:cb:ec:f2:5f:cb:40:
         28:6d:f2:1c:c9:6d:94:da:69:2e:1f:ad:56:99:cd:dc:af:9a:
         ab:60:ee:2c
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgICRpEwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC
NTIwREFBQzdEQThGMB4XDTI1MDMxNTAxMzA0MFoXDTI2MDMxNTAxMzAwM1owMzEx
MC8GA1UEAxMoNzY0MkEwN0Q5QUM5RDIyN0VBNDJGNzlFNkQxMzFDQjFBOTIwRURD
RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL49IJO3tJwEB0lADZoH
dauRzuY6hC/EH19oOsh7txIfmNJggn9MJNd/QJCEnOgdR1wmEzojry6KR6SWkNzf
9w8ZreKPRGQvOgxwjuLLhiFYiaUgcAgCwm++Hz/tE+zAadk89BoFfDpMBXDFGVSu
JwdUqK9Pp5XedcB/qnwnaoidnf7yT0ecFen4lMKsajDggOS/AHjBYOY+jv23MucD
UVgSNohTSnWVykWKKAtrvDIqbAZprNpDk+EiK5yv+7H/usQu3PDABarAVxvJmeqX
lBQT2a+PwrXHNHuHLm3mUTYNwl6F5LwD08Mu4VrkFJDiGUtlvCJQv3QiHca2EXMB
6ScCAwEAAaOCAs0wggLJMB0GA1UdDgQWBBR2QqB9msnSJ+pC955tExyxqSDtzjAf
BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0
b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa
dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j
Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0
NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G
A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw
gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9hcC9BOTFBNzM4MTAwMDAvMjAwMzEvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw
a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMDMxL2Rr
S2dmWnJKMGlmcVF2ZWViUk1jc2FrZzdjNC5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz
Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv
bi54bWwwYQYIKwYBBQUHAQcBAf8EUjBQME4EAgABMEgDBAJnNXgDBAVuXCADBAZ8
kkADBAXKXyADBAXK0KADBATLb8ADBATLjKADBATLkWADBATLk3ADBATSklADBAXS
7SADBALbZAgwDQYJKoZIhvcNAQELBQADggEBAE3IbLWx+eFgOceP/X7qAmYNdkyO
IQo/4Qsso6Le9raqwBO6DYnO3TNEXminJNJjHlf6FDJxWMQPYAfHdaHgwaQAsfaj
w2LT3u4RCi6t9U/OUQYxc/eC/TLcwgC6pSGiDKmSdPjg3WV37o4MYywRvrlTTUYm
5xcAeJQlpzMcaP2x63n00azb2EdkTbJJC2NEk+59fKltdTdSCPaDAD9jrbCG7eNO
Q2Cw9H7A0G1AX/wapZQTz6J9s0hDJOW2Y28EocS5LJroYoFa5fey+37nN836kc7Y
95PDoEMHuQWQW9PG0BzuQcvs8l/LQCht8hzJbZTaaS4frVaZzdyvmqtg7iw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:22:18 2025 by rpki-client