Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/FCbDhOKkkoP6dH0HnoPdMrZdfoU.cer
File:                     FCbDhOKkkoP6dH0HnoPdMrZdfoU.cer (raw, json)
Hash identifier:          tW435yil56erfYehe9sUiwqK2ysg8URARBUoive/qJ8=
Subject key identifier:   14:26:C3:84:E2:A4:92:83:FA:74:7D:07:9E:83:DD:32:B6:5D:7E:85
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       4165
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Wed 15 Jan 2025 01:31:08 +0000
Certificate not after:    Thu 15 Jan 2026 01:30:03 +0000
Subordinate resources:    IP: 103.18.60.0/22
                          IP: 202.223.32.0/22
                          IP: 203.81.112.0/20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16741 (0x4165)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Jan 15 01:31:08 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=1426C384E2A49283FA747D079E83DD32B65D7E85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:19:41:da:65:8c:db:3b:bd:d7:f4:28:08:0d:
                    cf:9e:86:9b:84:3b:f2:fd:70:ec:a7:33:e2:bb:f4:
                    d7:1c:bc:61:7f:4c:0f:b4:5d:02:ab:b4:3b:9b:90:
                    f3:11:77:29:f2:88:fe:e3:27:7f:c8:1a:f6:6c:29:
                    d3:44:54:f8:77:57:6f:a0:1c:ab:48:03:08:9e:fe:
                    b3:3d:46:ff:1a:83:07:2f:fb:5c:dc:57:a1:9c:e1:
                    e1:76:fc:b1:ed:4e:c7:23:13:91:8c:f9:e6:39:83:
                    e8:ec:fc:48:b9:8d:ac:cf:4b:eb:1b:14:62:2f:55:
                    3a:27:31:21:90:ed:2a:4f:23:d2:1a:86:38:37:07:
                    02:fc:8d:72:c8:12:50:d5:46:ae:60:a9:50:2e:5b:
                    cb:f0:95:4e:9d:9f:1e:1b:84:14:75:74:74:4e:4e:
                    54:18:55:a6:57:db:8c:6d:5d:70:69:2c:58:ef:98:
                    a6:74:3d:76:85:f4:b6:28:3d:24:0f:a0:fc:e4:9e:
                    4c:a7:68:cf:96:8d:2e:12:e7:d0:e2:e7:72:84:62:
                    31:6e:b4:c4:8c:dc:4d:98:81:d8:cb:c1:a9:bd:00:
                    d6:79:f1:21:19:c6:d6:d8:ea:d0:99:69:dc:e3:e5:
                    0e:c9:e6:1a:6c:3c:2b:f2:52:11:8e:0c:9e:c9:9e:
                    81:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:26:C3:84:E2:A4:92:83:FA:74:7D:07:9E:83:DD:32:B6:5D:7E:85
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.18.60.0/22
                  202.223.32.0/22
                  203.81.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         26:0f:a6:dd:72:b0:c8:b5:3e:0f:09:fa:28:99:fa:94:cb:bd:
         dd:66:73:64:ca:62:ba:75:84:8b:5b:87:89:e7:a5:a8:6f:11:
         90:69:7a:67:28:22:99:3e:ba:47:88:ce:da:36:62:f7:9c:ce:
         75:a1:d4:2d:e6:9d:aa:d3:23:df:06:22:e6:c3:34:ec:a5:61:
         db:78:72:29:e3:6c:3f:65:3b:7a:07:48:0f:ec:a2:43:65:4e:
         5b:a0:03:38:12:20:0f:e0:d1:97:e5:25:f8:16:c8:fc:c3:f2:
         a7:51:af:d6:01:15:4f:63:df:7c:3c:b1:7e:24:99:27:3f:d4:
         df:06:a3:21:f1:e0:22:84:71:7e:50:23:5b:8c:1f:10:40:2f:
         dd:dc:b2:92:c8:16:33:05:51:0d:2a:ca:2b:f7:2b:92:99:28:
         f0:d1:5a:4a:85:a6:44:82:1f:97:b1:a6:f8:8d:e4:0c:f4:8c:
         4d:1b:f2:aa:89:2f:d0:10:19:c0:27:93:04:ea:4a:d2:6b:c2:
         2d:5a:11:99:1f:f4:e6:b6:6e:a4:24:35:cf:f8:4a:07:9b:a0:
         48:80:44:aa:dc:67:28:02:35:1d:0c:4f:88:93:67:86:57:68:
         04:a4:d5:70:1e:12:c0:21:b0:6e:f3:3f:07:a6:95:65:0e:85:
         8d:72:c0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:47:30 2025 by rpki-client