Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/habDacGpx6UsPjgFcnpf0xGFp3M.cer
File:                     habDacGpx6UsPjgFcnpf0xGFp3M.cer (raw, json)
Hash identifier:          jb8JBjPPy1LF2tr2BisyHLksrNUaxFDE9h+3YT2/bAw=
Subject key identifier:   85:A6:C3:69:C1:A9:C7:A5:2C:3E:38:05:72:7A:5F:D3:11:85:A7:73
Authority key identifier: C8:C0:FB:87:04:74:C3:E8:4C:AB:83:59:7C:46:A8:62:C4:7F:88:82
Certificate issuer:       /CN=A91A73810000/serialNumber=C8C0FB870474C3E84CAB83597C46A862C47F8882
Certificate serial:       62
Authority info access:    rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yMD7hwR0w-hMq4NZfEaoYsR_iII.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/habDacGpx6UsPjgFcnpf0xGFp3M.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Sat 15 Mar 2025 01:37:17 +0000
Certificate not after:    Sun 15 Mar 2026 01:30:03 +0000
Subordinate resources:    IP: 154.33.0.0/16
                          IP: 154.34.64.0 -- 154.34.255.255
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000
        Validity
            Not Before: Mar 15 01:37:17 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=85A6C369C1A9C7A52C3E3805727A5FD31185A773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f7:55:54:fe:ff:ab:76:bf:26:e1:bd:26:ad:
                    df:b7:bf:7b:08:17:7c:93:50:ba:e4:95:c7:73:23:
                    eb:94:43:5f:33:ba:24:eb:08:ce:d5:d8:6a:41:a5:
                    a2:fa:14:d2:d9:41:5c:ee:d0:ad:d2:bd:60:b6:dd:
                    ea:21:f4:1f:cc:e1:04:84:63:c3:ab:18:05:b7:8f:
                    6f:f7:dc:74:a3:bd:70:ef:1c:78:62:f1:df:d3:13:
                    b1:11:9e:35:66:aa:9e:5e:d4:9c:0d:d1:18:95:e5:
                    0f:53:c9:7c:ba:b2:62:5b:43:ff:89:5b:3c:a6:ad:
                    0c:a7:a2:a9:04:a8:86:68:5e:e4:26:e3:68:8e:40:
                    30:50:4a:7e:37:41:36:a6:77:bd:be:89:35:d0:22:
                    fd:ce:19:3c:d8:99:d1:7a:78:62:ef:da:8e:0d:90:
                    c4:f1:c5:84:f2:d1:92:fa:d6:9f:ae:cc:85:dd:eb:
                    a6:f0:e3:c9:b1:64:cb:24:ac:5d:1b:18:50:76:e9:
                    8e:f3:c0:58:39:51:d6:ad:71:b7:77:94:1a:e6:e0:
                    f7:f4:18:0f:bf:53:ee:89:9e:1e:3e:ee:9c:25:8a:
                    9d:95:f2:24:a0:b1:6b:74:2e:4d:f7:30:39:57:fe:
                    1f:8e:01:84:de:d5:89:39:f9:c8:5e:fa:05:df:d9:
                    9b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:A6:C3:69:C1:A9:C7:A5:2C:3E:38:05:72:7A:5F:D3:11:85:A7:73
            X509v3 Authority Key Identifier:
                keyid:C8:C0:FB:87:04:74:C3:E8:4C:AB:83:59:7C:46:A8:62:C4:7F:88:82

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yMD7hwR0w-hMq4NZfEaoYsR_iII.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yMD7hwR0w-hMq4NZfEaoYsR_iII.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/habDacGpx6UsPjgFcnpf0xGFp3M.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.33.0.0/16
                  154.34.64.0-154.34.255.255

    Signature Algorithm: sha256WithRSAEncryption
         40:f8:96:b9:aa:54:aa:c4:1e:bb:dd:06:5d:ee:3d:3c:7b:0e:
         a3:46:37:a0:c6:09:cc:27:1d:52:ce:da:c3:49:12:d0:17:ea:
         59:df:76:b6:63:66:ce:a6:ff:dd:c3:e8:97:83:c1:8e:8d:76:
         f8:fa:b9:71:9b:79:6a:eb:36:13:3e:55:92:aa:75:73:9e:43:
         37:bf:25:22:e5:30:a7:4e:68:ef:fd:57:a3:ff:62:bc:60:d4:
         f3:2f:eb:69:ba:19:56:2c:54:35:6d:7d:51:47:a9:32:17:6e:
         0f:d1:76:3e:53:ff:d7:01:9e:07:01:6c:db:3b:1b:03:d5:08:
         80:81:6e:c6:95:09:e2:cb:91:82:97:4b:df:c0:96:68:8a:7c:
         ac:e6:bc:30:a6:a6:a1:93:99:0c:3c:3c:81:24:b5:28:92:be:
         12:1e:b4:85:5e:24:f2:09:71:bf:f5:02:c6:bb:62:77:ce:4d:
         c9:e0:c1:94:d0:5f:19:56:c4:a6:3d:d1:5c:f1:fd:fa:82:d4:
         53:ba:b8:f9:09:a4:42:31:31:bd:c7:59:84:99:c9:af:60:41:
         25:40:94:33:cb:7e:22:8d:8c:bc:a5:79:27:b9:0f:a1:bb:4e:
         f9:f9:c8:04:a8:16:ed:d0:b2:c2:b0:d7:f7:c7:bc:06:84:c4:
         4e:73:76:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:22:41 2025 by rpki-client