Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/zgXnGt3sD442G7VasQP1PThWxgo.cer
File:                     zgXnGt3sD442G7VasQP1PThWxgo.cer (raw, json)
Hash identifier:          r95TLdklSMaP3JRypsh8ICrVL5s7WvDLKyMzF5b6Tc4=
Subject key identifier:   CE:05:E7:1A:DD:EC:0F:8E:36:1B:B5:5A:B1:03:F5:3D:38:56:C6:0A
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       46FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Sat 15 Mar 2025 01:32:32 +0000
Certificate not after:    Sun 15 Mar 2026 01:30:03 +0000
Subordinate resources:    IP: 103.152.138.0/23
                          IP: 120.88.16.0/20
                          IP: 202.247.192.0/18
                          IP: 203.223.48.0/20
                          IP: 210.56.160.0/19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18172 (0x46fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000
        Validity
            Not Before: Mar 15 01:32:32 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=CE05E71ADDEC0F8E361BB55AB103F53D3856C60A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0e:88:e4:4b:fa:ea:2c:9c:84:7b:a3:15:6d:
                    83:c6:dd:50:09:10:e9:2c:50:1f:49:ac:12:18:e9:
                    f9:ae:76:2f:21:55:ed:74:a9:61:ec:f8:8e:c2:f9:
                    39:70:6c:6c:18:88:51:51:27:76:39:95:d5:f2:27:
                    31:12:a0:01:d1:62:12:e6:c2:16:1d:cc:7b:f2:60:
                    2d:18:3e:1a:9c:45:73:e8:f3:91:b2:a7:f2:2b:57:
                    04:bf:de:70:78:08:90:2d:75:4d:d1:a7:fc:9f:2a:
                    a3:71:75:b8:a8:a2:bd:9b:ac:7f:0b:99:b5:5c:08:
                    55:4e:25:c2:cf:e6:2c:bf:2a:2a:39:7d:aa:1e:99:
                    47:99:ed:b7:53:9a:51:42:a7:a8:d4:af:52:d4:f1:
                    e3:91:22:0e:0e:bd:7e:36:2f:99:d3:15:77:62:e0:
                    d1:40:a2:c3:29:3e:07:62:03:50:9f:44:34:25:56:
                    fa:34:22:19:df:a8:b1:36:1d:fe:54:b9:ed:2b:c7:
                    26:2e:2c:59:75:d1:22:56:17:ff:44:82:be:4a:6a:
                    eb:f1:ea:07:ee:ac:41:37:bb:e3:1c:eb:0e:ef:a8:
                    a0:2b:63:e7:96:bd:d8:fb:d3:69:e6:1a:d4:40:01:
                    7d:3f:7d:8e:f7:9d:9a:ed:6a:b8:f0:fa:59:33:a3:
                    df:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:05:E7:1A:DD:EC:0F:8E:36:1B:B5:5A:B1:03:F5:3D:38:56:C6:0A
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.138.0/23
                  120.88.16.0/20
                  202.247.192.0/18
                  203.223.48.0/20
                  210.56.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         13:f0:af:47:7e:24:eb:b7:ff:8e:86:8a:49:4b:c5:3d:d7:24:
         a1:6c:3d:17:8a:b9:e3:f3:25:ca:0e:50:8f:31:6f:0d:53:fa:
         cb:4d:e0:68:79:a0:99:c3:ed:96:48:09:65:bd:6b:a7:2d:ae:
         fd:b6:1a:d8:30:a5:8d:ca:bb:d2:02:13:83:59:e5:b1:f6:00:
         6b:9f:78:fc:16:cd:73:84:00:e6:67:c2:ec:a5:54:7a:96:6f:
         99:13:4e:77:98:58:e2:ce:31:fb:1e:f4:df:c8:d9:cf:ef:ae:
         2e:52:cc:74:15:a4:1a:c7:47:f9:a6:68:03:8f:e3:90:e0:21:
         32:00:90:41:72:a2:ff:c1:05:ea:60:a1:c7:c2:5e:30:85:9a:
         1f:86:2a:7a:2a:02:20:2b:7b:32:2b:10:fb:bf:3c:0e:0d:28:
         2b:b2:f3:2c:9d:b8:47:4b:44:ea:6c:bf:10:7e:e2:58:82:20:
         d7:17:4d:20:bb:de:01:f2:95:ef:bb:f5:86:6f:2b:83:41:10:
         e3:81:8a:5e:35:44:c6:e2:95:ac:71:9b:09:32:0c:c9:f9:ad:
         20:fe:de:e2:3f:01:1c:54:6d:bc:f2:dd:a0:75:c6:73:16:c8:
         66:28:43:97:97:73:53:83:9a:49:c9:22:b8:ec:7a:d1:2b:22:
         4f:c3:1e:8b
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgICRvwwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC
NTIwREFBQzdEQThGMB4XDTI1MDMxNTAxMzIzMloXDTI2MDMxNTAxMzAwM1owMzEx
MC8GA1UEAxMoQ0UwNUU3MUFEREVDMEY4RTM2MUJCNTVBQjEwM0Y1M0QzODU2QzYw
QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANcOiORL+uosnIR7oxVt
g8bdUAkQ6SxQH0msEhjp+a52LyFV7XSpYez4jsL5OXBsbBiIUVEndjmV1fInMRKg
AdFiEubCFh3Me/JgLRg+GpxFc+jzkbKn8itXBL/ecHgIkC11TdGn/J8qo3F1uKii
vZusfwuZtVwIVU4lws/mLL8qKjl9qh6ZR5ntt1OaUUKnqNSvUtTx45EiDg69fjYv
mdMVd2Lg0UCiwyk+B2IDUJ9ENCVW+jQiGd+osTYd/lS57SvHJi4sWXXRIlYX/0SC
vkpq6/HqB+6sQTe74xzrDu+ooCtj55a92PvTaeYa1EABfT99jvedmu1quPD6WTOj
33ECAwEAAaOCApwwggKYMB0GA1UdDgQWBBTOBeca3ewPjjYbtVqxA/U9OFbGCjAf
BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0
b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa
dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j
Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0
NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G
A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH9BggrBgEFBQcBCwSB8DCB
7TBBBggrBgEFBQcwBYY1cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw
L2FwL0E5MUE3MzgxMDAwMC8zMy8wYAYIKwYBBQUHMAqGVHJzeW5jOi8vcnBraS1y
ZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMzMvemdYbkd0M3NE
NDQyRzdWYXNRUDFQVGhXeGdvLm1mdDBGBggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtp
LXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAvYXAvbm90aWZpY2F0aW9uLnhtbDA3
BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAWeYigMEBHhYEAMEBsr3wAMEBMvf
MAMEBdI4oDANBgkqhkiG9w0BAQsFAAOCAQEAE/CvR34k67f/joaKSUvFPdckoWw9
F4q54/Mlyg5QjzFvDVP6y03gaHmgmcPtlkgJZb1rpy2u/bYa2DCljcq70gITg1nl
sfYAa594/BbNc4QA5mfC7KVUepZvmRNOd5hY4s4x+x7038jZz++uLlLMdBWkGsdH
+aZoA4/jkOAhMgCQQXKi/8EF6mChx8JeMIWaH4YqeioCICt7MisQ+788Dg0oK7Lz
LJ24R0tE6my/EH7iWIIg1xdNILveAfKV77v1hm8rg0EQ44GKXjVExuKVrHGbCTIM
yfmtIP7e4j8BHFRtvPLdoHXGcxbIZihDl5dzU4OaSckiuOx60SsiT8Meiw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:22:19 2025 by rpki-client