Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/habDacGpx6UsPjgFcnpf0xGFp3M.cer
File:                     habDacGpx6UsPjgFcnpf0xGFp3M.cer (raw, json)
Hash identifier:          8LcCYfbPYirFAzx/CA75MTPLk/pWUIn6r/zVDT2joBs=
Subject key identifier:   85:A6:C3:69:C1:A9:C7:A5:2C:3E:38:05:72:7A:5F:D3:11:85:A7:73
Authority key identifier: C8:C0:FB:87:04:74:C3:E8:4C:AB:83:59:7C:46:A8:62:C4:7F:88:82
Certificate issuer:       /CN=A91A73810000/serialNumber=C8C0FB870474C3E84CAB83597C46A862C47F8882
Certificate serial:       5C
Authority info access:    rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yMD7hwR0w-hMq4NZfEaoYsR_iII.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/habDacGpx6UsPjgFcnpf0xGFp3M.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Wed 15 Jan 2025 01:34:39 +0000
Certificate not after:    Thu 15 Jan 2026 01:30:03 +0000
Subordinate resources:    IP: 154.33.0.0/16
                          IP: 154.34.64.0 -- 154.34.255.255
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000/serialNumber=C8C0FB870474C3E84CAB83597C46A862C47F8882
        Validity
            Not Before: Jan 15 01:34:39 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=85A6C369C1A9C7A52C3E3805727A5FD31185A773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f7:55:54:fe:ff:ab:76:bf:26:e1:bd:26:ad:
                    df:b7:bf:7b:08:17:7c:93:50:ba:e4:95:c7:73:23:
                    eb:94:43:5f:33:ba:24:eb:08:ce:d5:d8:6a:41:a5:
                    a2:fa:14:d2:d9:41:5c:ee:d0:ad:d2:bd:60:b6:dd:
                    ea:21:f4:1f:cc:e1:04:84:63:c3:ab:18:05:b7:8f:
                    6f:f7:dc:74:a3:bd:70:ef:1c:78:62:f1:df:d3:13:
                    b1:11:9e:35:66:aa:9e:5e:d4:9c:0d:d1:18:95:e5:
                    0f:53:c9:7c:ba:b2:62:5b:43:ff:89:5b:3c:a6:ad:
                    0c:a7:a2:a9:04:a8:86:68:5e:e4:26:e3:68:8e:40:
                    30:50:4a:7e:37:41:36:a6:77:bd:be:89:35:d0:22:
                    fd:ce:19:3c:d8:99:d1:7a:78:62:ef:da:8e:0d:90:
                    c4:f1:c5:84:f2:d1:92:fa:d6:9f:ae:cc:85:dd:eb:
                    a6:f0:e3:c9:b1:64:cb:24:ac:5d:1b:18:50:76:e9:
                    8e:f3:c0:58:39:51:d6:ad:71:b7:77:94:1a:e6:e0:
                    f7:f4:18:0f:bf:53:ee:89:9e:1e:3e:ee:9c:25:8a:
                    9d:95:f2:24:a0:b1:6b:74:2e:4d:f7:30:39:57:fe:
                    1f:8e:01:84:de:d5:89:39:f9:c8:5e:fa:05:df:d9:
                    9b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:A6:C3:69:C1:A9:C7:A5:2C:3E:38:05:72:7A:5F:D3:11:85:A7:73
            X509v3 Authority Key Identifier:
                keyid:C8:C0:FB:87:04:74:C3:E8:4C:AB:83:59:7C:46:A8:62:C4:7F:88:82

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yMD7hwR0w-hMq4NZfEaoYsR_iII.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yMD7hwR0w-hMq4NZfEaoYsR_iII.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/habDacGpx6UsPjgFcnpf0xGFp3M.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.33.0.0/16
                  154.34.64.0-154.34.255.255

    Signature Algorithm: sha256WithRSAEncryption
         42:ba:c5:d3:5d:cb:18:28:a4:20:df:00:01:c3:5e:1d:81:1c:
         9b:27:d1:19:d3:ad:fd:5e:fd:ce:1b:31:d9:84:eb:5b:db:36:
         43:79:8d:49:c2:7f:04:c1:1f:b5:ec:17:e4:73:14:60:20:9f:
         47:04:8f:d5:19:1f:15:34:d8:6f:6d:35:7f:e2:ac:99:c0:42:
         be:b1:29:96:67:40:b0:34:9e:b3:d5:69:6b:38:49:33:98:b8:
         ad:69:d2:00:40:d0:fa:85:ec:de:29:06:af:b2:02:e2:83:1f:
         ae:17:23:96:28:68:6c:d6:35:ae:5b:56:21:5c:4e:18:c2:7b:
         cb:1f:47:5d:11:a9:9a:20:86:fb:44:d6:07:d8:89:af:7d:1d:
         a3:c5:de:a1:01:7f:33:85:dd:14:de:09:3f:32:3d:e8:a2:58:
         cb:ff:9f:a3:c5:56:05:1d:a5:ee:fc:b9:10:a8:2d:76:b3:30:
         a9:37:1a:6a:27:35:27:0d:f3:64:60:61:64:40:55:a3:e8:fb:
         98:a1:f0:f6:a8:b4:cc:71:d6:03:95:6c:f5:21:b3:62:f0:d1:
         57:c5:a0:96:d6:7c:18:b8:85:d5:69:25:2e:57:08:b4:06:bf:
         40:09:22:8a:79:f1:7c:a8:05:58:70:c1:91:b6:77:51:61:60:
         ce:c9:c5:4a
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIBXDANBgkqhkiG9w0BAQsFADBKMRUwEwYDVQQDEwxBOTFB
NzM4MTAwMDAxMTAvBgNVBAUTKEM4QzBGQjg3MDQ3NEMzRTg0Q0FCODM1OTdDNDZB
ODYyQzQ3Rjg4ODIwHhcNMjUwMTE1MDEzNDM5WhcNMjYwMTE1MDEzMDAzWjAzMTEw
LwYDVQQDEyg4NUE2QzM2OUMxQTlDN0E1MkMzRTM4MDU3MjdBNUZEMzExODVBNzcz
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fdVVP7/q3a/JuG9Jq3f
t797CBd8k1C65JXHcyPrlENfM7ok6wjO1dhqQaWi+hTS2UFc7tCt0r1gtt3qIfQf
zOEEhGPDqxgFt49v99x0o71w7xx4YvHf0xOxEZ41ZqqeXtScDdEYleUPU8l8urJi
W0P/iVs8pq0Mp6KpBKiGaF7kJuNojkAwUEp+N0E2pne9vok10CL9zhk82JnRenhi
79qODZDE8cWE8tGS+tafrsyF3eum8OPJsWTLJKxdGxhQdumO88BYOVHWrXG3d5Qa
5uD39BgPv1PuiZ4ePu6cJYqdlfIkoLFrdC5N9zA5V/4fjgGE3tWJOfnIXvoF39mb
rQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIWmw2nBqcelLD44BXJ6X9MRhadzMB8G
A1UdIwQYMBaAFMjA+4cEdMPoTKuDWXxGqGLEf4iCMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwYgYDVR0fBFswWTBXoFWgU4ZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRv
cnkubmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC95TUQ3aHdSMHctaE1xNE5aZkVh
b1lzUl9pSUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6
Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJG
ODc3QzcyRkQxRkYyL3lNRDdod1Iwdy1oTXE0TlpmRWFvWXNSX2lJSS5jZXIwDwYD
VR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwggEBBggrBgEFBQcBCwSB9DCB
8TBDBggrBgEFBQcwBYY3cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw
L2FwL0E5MUE3MzgxMDAwMC8xMjAzLzBiBggrBgEFBQcwCoZWcnN5bmM6Ly9ycGtp
LXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8xMjAzL2hhYkRh
Y0dweDZVc1BqZ0ZjbnBmMHhHRnAzTS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8v
cnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlvbi54
bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDAwCaITALAwQGmiJAAwMAmiIw
DQYJKoZIhvcNAQELBQADggEBAEK6xdNdyxgopCDfAAHDXh2BHJsn0RnTrf1e/c4b
MdmE61vbNkN5jUnCfwTBH7XsF+RzFGAgn0cEj9UZHxU02G9tNX/irJnAQr6xKZZn
QLA0nrPVaWs4STOYuK1p0gBA0PqF7N4pBq+yAuKDH64XI5YoaGzWNa5bViFcThjC
e8sfR10RqZoghvtE1gfYia99HaPF3qEBfzOF3RTeCT8yPeiiWMv/n6PFVgUdpe78
uRCoLXazMKk3GmonNScN82RgYWRAVaPo+5ih8PaotMxx1gOVbPUhs2Lw0VfFoJbW
fBi4hdVpJS5XCLQGv0AJIop58XyoBVhwwZG2d1FhYM7JxUo=
-----END CERTIFICATE-----
Generated at Wed Apr 30 14:51:35 2025 by rpki-client