Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer
File:                     qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer (raw, json)
Hash identifier:          Cu+yYeKSWVZoKb7e8DdfkLoAA3Nn2kC2DX5S4xVA6fs=
Subject key identifier:   A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       4748
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Sat 15 Mar 2025 01:34:07 +0000
Certificate not after:    Sun 15 Mar 2026 01:30:03 +0000
Subordinate resources:    IP: 61.122.16.0/22
                          IP: 103.210.108.0/22
                          IP: 133.112.0.0/16
                          IP: 150.41.0.0/16
                          IP: 202.1.208.0/20
                          IP: 202.13.62.0 -- 202.13.79.255
                          IP: 202.210.56.0/22
                          IP: 202.243.188.0/22
                          IP: 203.178.8.0/24
                          IP: 203.178.17.0/24
                          IP: 203.179.64.0/20
                          IP: 210.134.208.0/20
                          IP: 211.1.0.0/19
                          IP: 211.120.240.0/21
                          IP: 218.231.16.0/20
                          IP: 219.101.112.0/20
                          IP: 220.213.240.0/20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18248 (0x4748)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000
        Validity
            Not Before: Mar 15 01:34:07 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=A935D5AD33DC630C4611987140F5E468B7081D11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fc:d5:8d:5f:ee:b9:c8:c1:73:da:a3:53:aa:
                    ec:75:d4:7b:f8:71:36:3e:48:e3:19:ed:3e:8a:e3:
                    2c:c7:62:08:2d:03:dc:91:89:ce:9e:8e:89:84:13:
                    d0:e0:6d:88:53:bd:35:3a:8b:16:5a:5e:80:c9:d1:
                    fd:76:23:f6:a0:7c:d2:a9:6b:12:29:c7:0d:b2:f7:
                    6b:80:56:41:fb:7a:52:63:e2:ba:a8:0a:0e:b5:60:
                    1c:31:7b:da:66:29:03:89:09:66:78:e0:38:b6:61:
                    dd:b5:cd:a9:28:7b:c2:76:9e:2b:9a:55:0f:cd:db:
                    82:0f:c0:2f:d1:e5:0d:4d:e7:23:bd:f2:11:50:cb:
                    bb:3c:23:d6:7a:91:e3:38:e4:21:3f:ec:e7:76:ac:
                    f4:b8:2e:0f:7b:5c:1e:63:7d:1b:ce:1e:95:49:6a:
                    31:2f:eb:7e:7f:6b:72:7a:e8:da:b5:b6:52:54:07:
                    69:ad:89:f4:b9:8a:67:9a:a1:f2:68:bd:74:84:3d:
                    d5:5f:13:21:32:12:dc:cd:6b:3a:c4:cb:6d:4c:d8:
                    e8:2f:71:dd:b6:01:04:9c:9f:53:e3:4a:af:b4:61:
                    e5:93:ee:4e:91:b3:8b:6b:43:5a:f0:b1:bf:fd:b3:
                    6f:b1:79:b2:ac:2c:b5:63:be:0c:16:13:de:bb:80:
                    6f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.122.16.0/22
                  103.210.108.0/22
                  133.112.0.0/16
                  150.41.0.0/16
                  202.1.208.0/20
                  202.13.62.0-202.13.79.255
                  202.210.56.0/22
                  202.243.188.0/22
                  203.178.8.0/24
                  203.178.17.0/24
                  203.179.64.0/20
                  210.134.208.0/20
                  211.1.0.0/19
                  211.120.240.0/21
                  218.231.16.0/20
                  219.101.112.0/20
                  220.213.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8a:a6:89:a7:aa:f8:3b:4b:93:4f:b6:1c:cc:f8:86:7f:7a:22:
         b9:72:45:ac:80:7f:2d:75:66:8f:40:da:c2:4a:b2:1a:04:4d:
         cf:2f:07:a2:7b:06:2c:21:3f:8a:b4:43:96:72:03:52:5a:6c:
         ad:f5:a0:4a:68:23:15:2f:ae:5b:42:03:6b:59:00:de:ff:a0:
         6e:d4:d5:b1:0e:84:de:1e:00:0c:92:46:c0:a0:0c:8b:e8:e2:
         ff:46:2e:7b:c6:f3:b3:bd:77:25:e4:de:93:88:33:98:ab:be:
         21:e6:9f:5a:47:10:58:12:84:86:26:f0:9c:04:fb:1d:04:a2:
         b2:d0:e8:ef:39:68:00:07:85:01:33:82:1f:1d:84:dd:9f:eb:
         e9:75:45:a3:9d:6f:ab:93:02:14:e8:1a:2b:34:48:c3:de:a7:
         8a:a1:ee:a9:9d:11:10:51:9c:5d:51:17:62:df:1d:53:f5:e1:
         2c:ef:0b:d5:95:13:36:e5:9b:9f:c4:9e:4f:18:a7:fd:f7:8e:
         64:90:29:32:bb:22:eb:3e:70:1e:48:17:58:5a:04:16:43:d4:
         05:81:28:94:00:79:58:81:00:b4:6b:1f:7f:d7:b9:6b:79:df:
         37:70:9e:ff:cb:a5:a5:0a:7f:7a:34:1e:91:ca:5a:c5:b5:93:
         63:7d:94:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:24:49 2025 by rpki-client