Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/z17jVSLaMWQu4wlAjJpJHGSgXPs.cer
File:                     z17jVSLaMWQu4wlAjJpJHGSgXPs.cer (raw, json)
Hash identifier:          QrlcQqC0TxbBR8o6lBrZRpAOT1y6g15wnDnKH4YtmwQ=
Subject key identifier:   CF:5E:E3:55:22:DA:31:64:2E:E3:09:40:8C:9A:49:1C:64:A0:5C:FB
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       476F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/284/z17jVSLaMWQu4wlAjJpJHGSgXPs.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/284/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Sat 15 Mar 2025 01:34:57 +0000
Certificate not after:    Sun 15 Mar 2026 01:30:03 +0000
Subordinate resources:    IP: 27.34.168.0/21
                          IP: 182.50.172.0/22
                          IP: 202.51.48.0/21
                          IP: 203.111.240.0/21
                          IP: 211.128.96.0/20
                          IP: 220.152.120.0/21
                          IP: 220.213.224.0/20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18287 (0x476f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000
        Validity
            Not Before: Mar 15 01:34:57 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=CF5EE35522DA31642EE309408C9A491C64A05CFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2d:41:46:ef:98:5a:66:f1:fd:18:4b:29:25:
                    d7:f5:7f:9a:aa:b4:83:10:37:98:d4:7e:45:29:b0:
                    0e:f8:b8:f1:63:30:2a:c5:0f:02:d6:06:16:be:bb:
                    a0:d7:30:b0:3d:3c:f9:33:79:9e:04:41:57:98:31:
                    3c:b9:2c:fe:0d:b9:d0:71:20:cc:bc:a8:a6:57:6d:
                    b0:99:ca:3e:66:00:a8:a3:c8:b5:bc:0d:ad:75:ad:
                    03:c5:ca:2d:b9:dd:cb:ed:3f:34:cb:04:ba:bd:c3:
                    e0:93:1b:ce:20:f7:e5:c3:48:b1:21:cb:a0:51:bb:
                    86:cb:83:c0:31:be:5d:34:b7:00:ab:a5:a9:d2:3b:
                    75:a3:75:c3:d6:29:4a:13:ff:b7:51:3d:a2:4e:a0:
                    fe:bf:f4:11:50:42:d5:d3:b5:81:ed:5e:76:54:a9:
                    d6:b7:a2:17:0d:ff:8f:f8:13:98:ce:3d:03:f9:b6:
                    48:c0:1b:02:5f:3a:07:39:ff:3c:46:d1:d4:06:cd:
                    6a:b0:a6:ad:94:3c:1a:5a:c5:be:66:b8:71:60:27:
                    a6:25:63:ea:5d:04:03:ee:71:ac:cf:b1:71:63:d8:
                    55:05:35:76:39:ba:21:3b:19:86:ce:d1:34:ce:62:
                    d5:ae:3b:95:c8:72:de:ff:97:ed:ff:73:df:e2:01:
                    2e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:5E:E3:55:22:DA:31:64:2E:E3:09:40:8C:9A:49:1C:64:A0:5C:FB
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/284/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/284/z17jVSLaMWQu4wlAjJpJHGSgXPs.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.34.168.0/21
                  182.50.172.0/22
                  202.51.48.0/21
                  203.111.240.0/21
                  211.128.96.0/20
                  220.152.120.0/21
                  220.213.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0b:f9:93:c7:27:3b:d9:ab:2e:6f:02:e5:cc:ff:e2:9f:d7:d2:
         7c:ae:52:60:46:54:5c:b9:7c:be:d3:99:e3:dc:71:ab:e3:cf:
         ce:b7:f7:54:a9:a0:40:4c:5b:e5:ff:64:8c:cd:22:55:b4:c3:
         f1:6a:dc:46:91:ca:36:b7:3f:1c:ae:89:a3:fd:6d:40:c4:b4:
         91:14:c5:9a:5d:f7:13:25:93:07:ee:df:a9:99:16:ad:86:60:
         d5:af:81:a7:e4:5e:61:b6:bf:d5:29:18:9d:02:15:95:58:28:
         47:de:66:f6:88:1e:06:18:f8:68:71:9f:c3:fd:7a:89:26:a7:
         44:9b:38:55:23:91:60:19:48:74:7b:03:9f:05:08:1d:ba:24:
         03:1c:83:85:ce:87:b0:f5:67:18:4c:ea:54:92:c7:1b:41:cb:
         43:c2:87:e3:38:65:7f:d5:3f:30:7e:ed:5c:b7:54:0a:de:0c:
         dc:48:8f:ee:29:34:cb:7b:db:20:f6:ab:a1:5b:47:26:fc:5f:
         16:67:5d:2a:5d:c5:df:81:2b:8d:c8:61:96:16:1b:6e:a5:73:
         91:df:ea:4d:a3:94:07:8a:e0:c3:b1:fc:6c:62:da:6a:52:4a:
         09:e7:00:ff:5b:b0:94:85:37:95:25:a9:63:a4:11:6c:69:60:
         7d:ad:d3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:19:37 2025 by rpki-client