Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/WrbcQJGkDlVO8gor5_DgpEeFFm4.cer
File:                     WrbcQJGkDlVO8gor5_DgpEeFFm4.cer (raw, json)
Hash identifier:          zBlTFCN+bNfGKUVA51YJO0EimylzLXA8Yvb+E6qwfYQ=
Subject key identifier:   5A:B6:DC:40:91:A4:0E:55:4E:F2:0A:2B:E7:F0:E0:A4:47:85:16:6E
Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2
Certificate issuer:       /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2
Certificate serial:       0E14
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2712/WrbcQJGkDlVO8gor5_DgpEeFFm4.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2712/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Wed 15 Jan 2025 01:35:36 +0000
Certificate not after:    Thu 15 Jan 2026 01:30:03 +0000
Subordinate resources:    IP: 192.26.93.0/24
                          IP: 192.47.162.0 -- 192.47.165.255
                          IP: 192.47.174.0 -- 192.47.179.255
                          IP: 192.172.237.0/24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3604 (0xe14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2
        Validity
            Not Before: Jan 15 01:35:36 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=5AB6DC4091A40E554EF20A2BE7F0E0A44785166E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:57:c6:f9:5b:58:43:85:e0:43:68:60:6b:79:
                    2c:3a:c0:3d:3f:e2:af:91:74:a5:f4:3a:0f:1e:10:
                    94:7f:09:e6:dd:b5:34:53:bc:dc:47:b0:db:1a:f5:
                    dc:71:e2:b6:61:93:26:7d:96:a1:78:51:27:98:73:
                    dd:ff:7a:fb:20:e4:e5:09:f4:7d:c7:1d:a5:0c:8b:
                    59:41:f9:09:7b:35:03:e9:76:21:dc:5d:57:e9:3d:
                    6e:21:fd:f5:91:5e:5f:b1:7f:cf:ea:f0:32:6b:42:
                    62:33:4b:a8:a0:8b:63:d4:3d:e5:d5:70:96:b3:17:
                    fd:91:54:c9:6c:c5:b4:d3:25:3e:70:a9:47:a3:6f:
                    24:ff:02:ae:1f:2b:56:f9:05:34:b0:65:a6:5c:e1:
                    d5:23:20:b8:06:fe:31:f2:23:e1:da:4d:68:fa:80:
                    68:af:e8:c5:f3:f2:29:5c:02:a8:df:4f:00:02:c6:
                    11:f3:57:d3:5b:e1:d6:36:7e:80:00:41:18:48:a8:
                    d3:00:7d:b4:7f:14:2d:90:31:ad:d3:1a:2f:37:b9:
                    e6:4a:6b:84:87:70:63:d8:ae:96:51:ea:b2:ca:47:
                    6c:72:8c:a0:45:ef:7a:ee:05:73:90:c5:bf:ff:09:
                    ec:06:46:c3:72:b5:87:79:19:ae:dd:06:cf:76:3c:
                    17:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:B6:DC:40:91:A4:0E:55:4E:F2:0A:2B:E7:F0:E0:A4:47:85:16:6E
            X509v3 Authority Key Identifier:
                keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2712/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2712/WrbcQJGkDlVO8gor5_DgpEeFFm4.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.26.93.0/24
                  192.47.162.0-192.47.165.255
                  192.47.174.0-192.47.179.255
                  192.172.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:27:98:92:c5:a0:44:15:69:58:62:52:72:18:e9:2d:24:16:
         00:1a:4a:df:84:93:de:3b:1c:7e:f5:86:38:a8:ee:42:a1:bd:
         2c:c8:bc:8f:5e:4e:f1:d2:07:79:70:d3:12:a3:ac:43:fe:65:
         70:96:b7:d0:f1:e5:8a:92:4e:0a:11:58:b1:e4:ba:3a:bc:bf:
         14:02:7e:fb:21:52:0d:3d:84:ac:2a:05:53:5e:8a:b0:01:8c:
         e3:10:71:fc:a0:87:de:40:5f:b5:d7:b7:c4:29:a1:e4:16:86:
         45:f1:a6:be:65:1f:12:fa:b1:f2:48:e7:f2:52:65:db:69:77:
         44:66:8c:29:f2:f2:53:83:64:70:72:42:91:89:e0:dd:ce:fe:
         31:34:ff:85:08:3d:98:7f:e0:fa:60:4b:73:f1:3a:5f:72:22:
         d1:ab:ea:2b:38:e4:ff:4e:c9:e0:3f:4d:5b:05:de:79:a3:39:
         b3:77:99:a2:fc:4a:2d:cc:05:a2:58:01:73:10:75:51:ed:0a:
         42:b8:1f:62:25:e9:cf:24:34:37:89:36:9f:48:30:e5:36:c1:
         25:24:2c:a1:ad:46:52:e3:0c:2b:47:98:dd:e3:5c:e4:09:86:
         61:cd:24:ef:a0:1c:2e:cd:74:c6:5f:bf:e4:c8:a3:fc:4c:8d:
         d2:4b:db:b2
-----BEGIN CERTIFICATE-----
MIIFpjCCBI6gAwIBAgICDhQwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QTczODEwMDAwMTEwLwYDVQQFEyg2RjY4M0VBRTM5QTE3MzhBRTZDOTNGREYwNDFG
MTE0OEU2NTM0REYyMB4XDTI1MDExNTAxMzUzNloXDTI2MDExNTAxMzAwM1owMzEx
MC8GA1UEAxMoNUFCNkRDNDA5MUE0MEU1NTRFRjIwQTJCRTdGMEUwQTQ0Nzg1MTY2
RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJlXxvlbWEOF4ENoYGt5
LDrAPT/ir5F0pfQ6Dx4QlH8J5t21NFO83Eew2xr13HHitmGTJn2WoXhRJ5hz3f96
+yDk5Qn0fccdpQyLWUH5CXs1A+l2IdxdV+k9biH99ZFeX7F/z+rwMmtCYjNLqKCL
Y9Q95dVwlrMX/ZFUyWzFtNMlPnCpR6NvJP8Crh8rVvkFNLBlplzh1SMguAb+MfIj
4dpNaPqAaK/oxfPyKVwCqN9PAALGEfNX01vh1jZ+gABBGEio0wB9tH8ULZAxrdMa
Lze55kprhIdwY9iullHqsspHbHKMoEXveu4Fc5DFv/8J7AZGw3K1h3kZrt0Gz3Y8
F7MCAwEAAaOCAqswggKnMB0GA1UdDgQWBBRattxAkaQOVU7yCivn8OCkR4UWbjAf
BgNVHSMEGDAWgBRvaD6uOaFziubJP98EHxFI5lNN8jAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0
b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYjJnLXJqbWhjNHJteVRfZkJC
OFJTT1pUVGZJLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j
Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFD
ODgzN0M3MkZEMUZGMi9iMmctcmptaGM0cm15VF9mQkI4UlNPWlRUZkkuY2VyMA8G
A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAQYIKwYBBQUHAQsEgfQw
gfEwQwYIKwYBBQUHMAWGN3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9hcC9BOTFBNzM4MTAwMDAvMjcxMi8wYgYIKwYBBQUHMAqGVnJzeW5jOi8vcnBr
aS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMjcxMi9XcmJj
UUpHa0RsVk84Z29yNV9EZ3BFZUZGbTQubWZ0MEYGCCsGAQUFBzANhjpodHRwczov
L3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24u
eG1sMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQAwBpdMAwDBAHAL6IDBAHA
L6QwDAMEAcAvrgMEAsAvsAMEAMCs7TANBgkqhkiG9w0BAQsFAAOCAQEAlSeYksWg
RBVpWGJSchjpLSQWABpK34ST3jscfvWGOKjuQqG9LMi8j15O8dIHeXDTEqOsQ/5l
cJa30PHlipJOChFYseS6Ory/FAJ++yFSDT2ErCoFU16KsAGM4xBx/KCH3kBftde3
xCmh5BaGRfGmvmUfEvqx8kjn8lJl22l3RGaMKfLyU4NkcHJCkYng3c7+MTT/hQg9
mH/g+mBLc/E6X3Ii0avqKzjk/07J4D9NWwXeeaM5s3eZovxKLcwFolgBcxB1Ue0K
QrgfYiXpzyQ0N4k2n0gw5TbBJSQsoa1GUuMMK0eY3eNc5AmGYc0k76AcLs10xl+/
5Mij/EyN0kvbsg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 10:08:43 2025 by rpki-client