Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/VQYbe6YRHyML22Hil4HkbQFl6Z4.cer
File:                     VQYbe6YRHyML22Hil4HkbQFl6Z4.cer (raw, json)
Hash identifier:          PSYLrjMPzhhxNp8J0Qa0zflEweG/HkWrci+bJWhHKHQ=
Subject key identifier:   55:06:1B:7B:A6:11:1F:23:0B:DB:61:E2:97:81:E4:6D:01:65:E9:9E
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       4228
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/VQYbe6YRHyML22Hil4HkbQFl6Z4.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Wed 15 Jan 2025 01:35:31 +0000
Certificate not after:    Thu 15 Jan 2026 01:30:03 +0000
Subordinate resources:    IP: 103.40.104.0/22
                          IP: 103.131.120.0/22
                          IP: 210.158.144.0/20
                          IP: 219.100.224.0/22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16936 (0x4228)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Jan 15 01:35:31 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=55061B7BA6111F230BDB61E29781E46D0165E99E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:cf:44:eb:ef:9e:a6:ac:0c:c7:f6:ef:6b:6d:
                    5b:54:b1:fc:dc:34:95:8f:1f:69:87:cb:a8:8a:d4:
                    e4:17:7f:d3:4f:ec:3a:cf:e9:ad:47:49:5e:75:b2:
                    35:37:c1:00:77:71:f2:d5:6b:77:12:db:3d:2c:91:
                    7c:a4:15:e5:76:c9:08:3e:39:c5:b7:7d:00:ea:f9:
                    a5:42:11:da:aa:0c:81:b6:92:ee:91:9f:75:1a:fa:
                    78:6f:82:4b:a9:e0:50:09:42:0c:10:37:5f:28:b4:
                    a7:7d:31:4c:e8:42:0c:b6:be:46:f1:14:ec:7e:69:
                    97:3a:c9:03:86:b6:d2:e2:cf:74:4e:3d:bb:53:84:
                    e2:38:51:0e:e9:db:61:90:36:1a:be:ae:42:e3:af:
                    9d:70:8c:df:e7:6c:74:3d:c6:0c:98:a4:fd:d2:32:
                    95:4b:22:28:7a:51:20:64:67:0b:b3:4f:5e:a6:bc:
                    54:e2:43:27:09:f6:6b:6f:af:b2:6a:40:ea:3d:a1:
                    2e:92:4a:8a:e0:d4:3e:ef:f5:0c:d7:36:46:03:f4:
                    51:58:2c:76:05:a3:8f:55:5b:85:3c:e4:52:db:fa:
                    af:09:fa:59:14:76:0a:10:4b:ab:2d:20:ec:c5:05:
                    18:85:54:8c:27:ca:20:19:01:c1:08:89:5f:cd:1c:
                    34:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:06:1B:7B:A6:11:1F:23:0B:DB:61:E2:97:81:E4:6D:01:65:E9:9E
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/VQYbe6YRHyML22Hil4HkbQFl6Z4.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.40.104.0/22
                  103.131.120.0/22
                  210.158.144.0/20
                  219.100.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:bb:b0:5d:a5:48:84:2b:4c:19:46:ac:b8:2b:b4:85:ab:9f:
         14:8f:ae:70:4d:c2:4d:0f:9c:55:33:1d:e6:fd:1d:eb:ba:5d:
         91:a3:cc:20:a8:86:a2:ed:2e:48:b7:cb:56:25:9e:26:7d:ce:
         11:c6:9b:63:d6:96:a2:7d:52:66:0e:d9:a9:76:47:14:50:e8:
         9d:12:ee:5d:d3:ac:64:2f:5e:75:fd:9a:32:fc:66:72:65:1a:
         e4:a5:2f:15:7c:00:01:96:bd:ea:13:94:bc:41:c5:8e:55:35:
         c0:30:cf:3d:41:2d:03:dc:a1:44:48:a2:af:04:85:a4:57:c2:
         3d:84:0c:b3:c6:38:2b:74:aa:b1:23:8b:67:ad:96:c4:f6:d3:
         ef:36:12:4c:4d:54:97:e5:1e:37:8c:a9:7b:02:1f:c6:a0:df:
         79:09:e3:9c:f4:46:09:83:64:3f:64:37:9f:a1:c3:9a:91:c9:
         24:7d:a1:ff:74:f3:6a:65:6f:2e:1d:4b:0f:60:e1:91:78:1e:
         15:a2:bf:ec:ac:7c:f9:4f:44:91:bb:f6:cc:f6:24:65:7e:12:
         0f:b5:35:17:f4:ec:dc:c5:42:1a:d8:b9:5b:1f:90:0c:fe:71:
         8c:6e:b5:c2:ff:8c:1b:59:3a:f4:b1:85:11:69:ad:c7:34:b8:
         27:f6:a2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:54:11 2025 by rpki-client