Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1pAPHjEm5gnvTxoPuFXrTeTjoYo.cer
File:                     1pAPHjEm5gnvTxoPuFXrTeTjoYo.cer (raw, json)
Hash identifier:          8Fmy98jYJhhn56//bT2SKjOYRBZ6Lq3sNO9SShWQAiA=
Subject key identifier:   D6:90:0F:1E:31:26:E6:09:EF:4F:1A:0F:B8:55:EB:4D:E4:E3:A1:8A
Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2
Certificate issuer:       /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2
Certificate serial:       0DED
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/1pAPHjEm5gnvTxoPuFXrTeTjoYo.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Wed 15 Jan 2025 01:31:52 +0000
Certificate not after:    Thu 15 Jan 2026 01:30:03 +0000
Subordinate resources:    IP: 157.70.224.0/20
                          IP: 157.120.64.0 -- 157.120.111.255
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3565 (0xded)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2
        Validity
            Not Before: Jan 15 01:31:52 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=D6900F1E3126E609EF4F1A0FB855EB4DE4E3A18A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4d:92:16:0e:15:2d:7d:d7:e2:e8:5a:e4:a5:
                    05:c3:5a:1d:04:72:af:cb:5e:d5:d9:71:96:75:ea:
                    f3:1e:9d:d7:33:1c:87:bf:01:cb:d6:5d:70:8a:16:
                    3b:80:55:39:6f:fa:a2:6a:0d:fa:73:08:db:00:b8:
                    91:dd:24:5d:75:0c:11:ea:d0:50:aa:7e:74:73:d0:
                    ff:48:9c:69:1e:85:cf:9c:a5:bd:8e:97:22:56:b7:
                    bb:85:2e:29:67:10:cb:4c:35:4c:29:77:f6:54:f9:
                    08:f0:cc:c6:0f:67:02:9c:39:d6:a1:d7:6b:54:2a:
                    34:4e:a7:62:de:7b:06:92:8b:3b:37:45:d0:32:80:
                    74:b7:e2:e0:89:00:34:81:4a:34:90:f5:75:4e:cf:
                    ce:f7:cc:44:d6:d7:d2:d2:17:26:6a:18:0d:d8:60:
                    2e:2a:6f:f1:fb:65:06:54:b5:8d:f1:58:5f:c0:a3:
                    d5:d3:d4:5f:9f:8f:56:5e:4f:23:be:5c:1e:58:d9:
                    c3:fa:9e:21:79:e8:86:64:39:2f:54:25:d5:f6:ef:
                    1d:58:1b:38:49:98:fe:41:5b:93:9e:83:e7:a4:95:
                    12:fd:25:ff:b6:07:6d:9d:2c:88:12:97:48:28:23:
                    c7:29:59:e1:97:b2:c9:d7:b4:81:3e:7d:84:2c:9d:
                    93:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:90:0F:1E:31:26:E6:09:EF:4F:1A:0F:B8:55:EB:4D:E4:E3:A1:8A
            X509v3 Authority Key Identifier:
                keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/1pAPHjEm5gnvTxoPuFXrTeTjoYo.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.70.224.0/20
                  157.120.64.0-157.120.111.255

    Signature Algorithm: sha256WithRSAEncryption
         87:b9:c5:12:6b:de:9c:fb:85:a3:6b:54:60:9e:79:0f:9f:62:
         66:1f:30:e7:09:92:87:a0:cd:26:79:1b:51:6f:4b:62:09:eb:
         88:6c:f1:0c:45:18:c2:ed:1d:a7:cd:c2:85:46:99:0f:16:a9:
         62:f7:8b:82:ae:ff:5f:b5:ed:6d:37:55:41:73:7b:ee:58:f8:
         8a:f3:18:ab:89:94:99:06:bf:98:4a:e0:c7:4b:32:81:4e:8e:
         f7:a3:83:32:6c:77:9a:6e:c1:8d:11:59:ce:49:5a:d9:a5:be:
         e4:72:9a:07:a8:e4:46:c7:ee:02:5e:ed:9a:df:20:22:bf:76:
         6d:8d:cd:da:f4:92:8b:a2:83:be:2b:ff:32:25:8f:f3:36:99:
         aa:7a:a0:a2:fa:9f:2d:2f:ca:9c:a3:3f:8e:1a:a4:6f:15:fd:
         d0:93:a5:60:f4:5e:f7:79:e7:70:3a:a4:55:2b:c9:73:81:17:
         1b:94:a4:42:45:4b:1e:01:97:d9:3f:97:5a:e4:22:a3:ec:47:
         70:94:34:d5:34:bd:d5:cd:a6:8e:69:89:bd:60:86:0d:bc:74:
         c2:ba:39:3f:a8:3b:08:2f:a1:aa:15:68:68:d3:8e:b6:e6:6e:
         f2:85:4f:5b:52:50:5d:72:8c:81:7e:71:a4:a4:49:f7:40:d4:
         16:50:bb:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:25:05 2025 by rpki-client