Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/eRH7Oz-4Jf-WYo-8CN0r78rbhpw.cer
File:                     eRH7Oz-4Jf-WYo-8CN0r78rbhpw.cer (raw, json)
Hash identifier:          YNH9o3N/p8NZkB7+Ovp3xTGWq3ceBzJKWI7S+Bi4xsw=
Subject key identifier:   79:11:FB:3B:3F:B8:25:FF:96:62:8F:BC:08:DD:2B:EF:CA:DB:86:9C
Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2
Certificate issuer:       /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2
Certificate serial:       0EF7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20168/eRH7Oz-4Jf-WYo-8CN0r78rbhpw.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20168/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Sat 15 Mar 2025 01:32:48 +0000
Certificate not after:    Sun 15 Mar 2026 01:30:03 +0000
Subordinate resources:    IP: 157.70.240.0/20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3831 (0xef7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000
        Validity
            Not Before: Mar 15 01:32:48 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=7911FB3B3FB825FF96628FBC08DD2BEFCADB869C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b2:41:80:36:fa:0c:6b:c7:49:62:20:a2:5f:
                    56:76:04:29:b3:d4:87:62:9b:df:f2:21:0e:9e:2e:
                    4d:02:80:1a:a0:75:fc:7b:db:1f:1b:88:87:89:3c:
                    ab:1e:dc:f3:f9:3b:b4:e1:e3:7c:f1:3d:b5:3b:b9:
                    b2:1f:fd:b8:c6:f9:2f:f1:fc:16:e6:23:4e:bc:5b:
                    00:d9:47:65:06:af:c2:96:d5:c1:e3:71:0e:b1:7a:
                    db:95:9d:41:12:06:53:76:ea:34:60:ef:a1:3c:e9:
                    72:d1:0f:fd:8c:6b:1a:a0:fd:26:9b:dd:2b:41:b3:
                    18:30:84:61:d6:84:f2:a7:99:24:3d:4f:dc:0a:0a:
                    5c:f5:c4:21:ea:5b:a8:6b:6a:6f:ca:2b:18:61:32:
                    eb:a6:33:74:b7:2b:7a:a3:89:9e:3e:fa:e1:92:5d:
                    f2:54:c3:d0:87:fe:87:0c:41:74:9c:9d:6c:54:02:
                    a7:30:38:b1:9d:5c:76:3f:da:70:71:99:b9:ba:3d:
                    37:4e:0c:13:65:5a:80:63:5e:5b:4c:8e:67:29:83:
                    de:04:33:39:3d:c1:85:99:c2:92:0c:82:4c:f5:55:
                    76:6c:c5:fe:d7:a2:b2:c6:9e:ae:17:b0:14:b6:7d:
                    91:25:d1:2d:00:6e:27:82:8d:2a:1f:2d:76:c3:3a:
                    b9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:11:FB:3B:3F:B8:25:FF:96:62:8F:BC:08:DD:2B:EF:CA:DB:86:9C
            X509v3 Authority Key Identifier:
                keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20168/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20168/eRH7Oz-4Jf-WYo-8CN0r78rbhpw.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.70.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         07:d1:c3:d4:a5:d3:1d:a6:27:4a:02:00:73:dd:99:72:4b:39:
         c8:e6:b1:e0:58:4e:23:f4:7d:d5:1f:12:17:fe:d4:c5:e1:d0:
         08:f9:2b:38:70:b5:ed:df:46:35:32:f7:47:59:f7:3b:1d:c7:
         e4:0a:cc:b9:06:5a:9f:2c:ed:28:d6:64:5e:42:6f:90:aa:e4:
         74:07:f3:2f:95:b2:58:c2:dc:a3:21:f3:c5:8f:fc:de:db:e2:
         57:0b:35:a7:6f:3a:ba:56:b8:b9:95:d7:22:f2:85:89:94:26:
         72:a3:19:fb:f8:d8:2f:63:02:f1:23:ac:8b:6a:bd:44:77:61:
         92:67:61:2c:c0:13:63:a0:c7:cc:8b:1f:ff:7b:07:8c:5b:5a:
         e2:44:39:43:a7:04:ed:22:de:02:70:c8:75:12:d4:69:a1:36:
         95:5a:3b:4b:4a:30:ab:40:bf:ae:c3:c0:f7:76:42:d7:09:ee:
         b5:7f:6d:ce:6b:f9:ce:4b:6f:46:6d:2d:2c:07:fc:af:01:13:
         a3:37:9b:fe:c3:51:84:03:3c:a4:ae:ad:ac:50:fc:39:2e:5a:
         3a:30:a6:42:95:20:8b:56:e2:04:20:10:e5:28:87:88:66:7c:
         4f:17:22:2c:8b:9a:88:7e:9d:0c:7d:f4:55:53:75:0a:d0:5e:
         1a:35:78:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:22:27 2025 by rpki-client