Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/hTvMypswbARZZY4oio0_3nUbT2s.cer
File:                     hTvMypswbARZZY4oio0_3nUbT2s.cer (raw, json)
Hash identifier:          2gIZpWgD0clxRV3Pns4WXSo7vjXMpG3ElPjOIFHcwxg=
Subject key identifier:   85:3B:CC:CA:9B:30:6C:04:59:65:8E:28:8A:8D:3F:DE:75:1B:4F:6B
Authority key identifier: D1:95:7E:C5:8C:08:F3:5B:AA:6B:FE:77:E4:5A:97:40:BA:47:1F:9E
Certificate issuer:       /CN=A91A73810000/serialNumber=D1957EC58C08F35BAA6BFE77E45A9740BA471F9E
Certificate serial:       01ED
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/hTvMypswbARZZY4oio0_3nUbT2s.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Wed 15 Jan 2025 01:37:44 +0000
Certificate not after:    Thu 15 Jan 2026 01:30:03 +0000
Subordinate resources:    IP: 194.91.0.0/16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 493 (0x1ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000/serialNumber=D1957EC58C08F35BAA6BFE77E45A9740BA471F9E
        Validity
            Not Before: Jan 15 01:37:44 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=853BCCCA9B306C0459658E288A8D3FDE751B4F6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9e:ed:cf:c8:53:34:1f:03:ff:11:67:8c:13:
                    71:8b:1c:7f:60:a9:8f:1f:1b:f0:d6:d4:75:c2:23:
                    77:86:a1:fd:ed:d7:bd:eb:17:5a:0c:0b:3d:96:26:
                    27:d7:55:21:f3:23:fe:8b:99:30:ac:f4:33:7a:53:
                    e8:6d:ea:32:3b:9b:f1:ff:7a:75:63:40:d1:af:23:
                    6a:0c:0f:79:58:81:7a:28:dc:91:1b:86:55:58:08:
                    c0:e5:34:32:b7:d4:c7:16:f3:c2:8d:3b:6e:6f:74:
                    53:cb:27:58:c6:47:e5:39:c5:c7:ba:14:84:8b:d3:
                    cd:31:2d:c6:ff:e4:c8:c0:3a:1d:0d:99:d7:09:55:
                    fe:6f:51:20:be:a7:c9:73:fb:9d:99:d1:85:00:14:
                    3e:71:29:f8:dd:6e:6f:64:d1:c6:d8:c4:c9:da:12:
                    0e:c9:70:02:65:8e:6f:82:f8:09:5a:9b:01:8a:21:
                    50:25:69:6e:dd:c9:a2:b5:f5:d9:fe:ae:6e:34:e6:
                    b1:59:55:27:ae:01:62:91:f1:36:f7:35:fe:3d:33:
                    b4:28:e8:d9:11:8d:b6:04:c1:a0:4e:f2:11:c6:6f:
                    f5:6a:1d:05:8b:4e:2b:ea:23:d1:c9:d8:eb:9b:aa:
                    d6:96:94:c4:a8:3d:91:9a:29:15:de:51:02:d4:77:
                    67:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:3B:CC:CA:9B:30:6C:04:59:65:8E:28:8A:8D:3F:DE:75:1B:4F:6B
            X509v3 Authority Key Identifier:
                keyid:D1:95:7E:C5:8C:08:F3:5B:AA:6B:FE:77:E4:5A:97:40:BA:47:1F:9E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/hTvMypswbARZZY4oio0_3nUbT2s.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.91.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         d7:67:6e:59:2b:e7:18:34:c7:a8:96:6d:f0:27:78:24:a2:6b:
         42:5e:ba:9c:9f:70:f9:59:4e:e0:1d:c4:cb:b9:78:96:fc:38:
         b0:31:ee:c5:e6:61:40:cd:da:ad:d2:d6:54:42:19:66:43:fd:
         1d:2b:a4:7d:ae:ae:30:2f:2a:78:a6:90:44:e7:80:07:1b:e4:
         2d:f3:64:2a:70:0f:6c:68:bd:67:3a:58:95:e3:6f:bb:82:9e:
         b3:77:c2:6f:76:85:61:1f:10:62:0a:a9:fb:61:02:bd:3e:93:
         0f:0f:c5:1c:75:bf:93:cb:e8:da:ae:4e:8a:9a:dd:9c:49:99:
         b4:b9:49:37:8a:7b:4f:e7:3b:de:20:83:a7:d2:90:d8:f0:d7:
         6d:9a:1f:42:3e:d9:08:5e:2e:1a:4e:68:cb:38:24:6b:43:d2:
         7c:8d:19:6e:3f:41:59:fa:fb:84:b1:5f:f3:a4:ec:86:e7:6e:
         44:6b:b6:d4:ae:f3:0f:d5:cb:eb:c5:1c:49:40:ba:85:17:22:
         0a:fb:8f:53:3a:8b:48:38:cb:58:a0:4e:03:4e:ae:c4:49:bc:
         34:4c:b4:ca:39:7b:36:d0:b0:3d:b2:ca:f6:a2:8b:de:1f:62:
         ef:fe:3c:63:8f:d3:d1:5c:42:cd:30:0d:90:07:e1:4c:54:7b:
         bf:4e:61:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 04:10:30 2025 by rpki-client