Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.cer
File:                     83FA427FFAE02D80047A8B5F44D938E2CA6DB609.cer (raw, json)
Hash identifier:          ++ewoAtXRTxhSFgySMC2dtT5PL6Fj4Vmzx8Q1VdBLKk=
Subject key identifier:   83:FA:42:7F:FA:E0:2D:80:04:7A:8B:5F:44:D9:38:E2:CA:6D:B6:09
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       2EFEAFD8226DDBE8EB016DE626BA17E2FB529851
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Mon 30 Sep 2024 15:03:08 +0000
Certificate not after:    Mon 29 Sep 2025 15:08:08 +0000
Subordinate resources:    IP: 103.227.4.0/23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:fe:af:d8:22:6d:db:e8:eb:01:6d:e6:26:ba:17:e2:fb:52:98:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Sep 30 15:03:08 2024 GMT
            Not After : Sep 29 15:08:08 2025 GMT
        Subject: CN=83FA427FFAE02D80047A8B5F44D938E2CA6DB609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:19:1a:e6:19:22:89:d5:dc:9b:7d:dd:c2:3e:
                    f1:59:3b:16:06:c6:0e:c7:b8:89:41:ed:77:7e:9b:
                    00:b1:5e:61:eb:63:78:17:ed:19:ba:4f:c9:45:aa:
                    98:32:5c:11:e3:ee:97:cb:72:f1:4b:be:57:9a:1c:
                    53:75:48:71:35:f1:ff:c4:ad:08:7a:88:f9:64:f8:
                    49:9c:c2:90:1c:0c:d1:0d:ba:c0:9d:bf:17:4d:7d:
                    3e:e1:d5:c7:3a:4f:02:16:dc:70:8a:c5:b7:39:2a:
                    44:01:df:1f:c9:16:73:bf:12:f4:83:7e:b6:d5:42:
                    39:bd:7f:a4:db:f5:64:e7:f5:47:c5:27:23:15:c0:
                    53:10:c1:c4:41:e4:db:01:16:a4:f1:4a:16:de:ae:
                    b3:62:f5:3c:f1:03:21:8e:1e:a7:5b:79:b6:b0:94:
                    33:52:3b:03:66:48:29:58:28:74:d6:71:7a:36:08:
                    1c:13:58:a7:70:df:02:7d:ff:db:44:90:3f:84:c8:
                    80:cd:9c:b3:53:d8:90:9c:59:09:46:4b:e0:f7:ba:
                    69:14:f1:32:6d:bd:01:1d:08:90:6e:c8:88:43:7b:
                    fd:ce:82:42:9f:ae:a5:e3:7b:c4:38:5f:1f:6b:19:
                    ac:c3:51:2d:66:a9:c0:dd:9a:41:b6:d4:0f:35:1b:
                    6d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                83:FA:42:7F:FA:E0:2D:80:04:7A:8B:5F:44:D9:38:E2:CA:6D:B6:09
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.227.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:c2:3e:36:d8:3a:7c:fa:b6:73:e9:d1:69:7f:85:ec:98:5b:
         8b:77:f2:67:f9:39:82:71:ff:82:b8:92:4f:f0:c8:aa:a7:cd:
         f5:cf:ca:4c:a4:2d:e6:45:01:1a:e0:6c:92:ca:d1:e7:61:78:
         5a:ee:ea:d6:8f:92:b1:ec:6e:00:b0:70:18:bd:86:98:40:b2:
         cf:23:2d:70:7e:bf:0f:df:1b:7d:59:ba:10:7d:ea:ae:ce:9d:
         d2:42:c3:c0:9a:d3:2a:4b:cb:c6:28:e9:ca:a8:00:06:1a:db:
         35:97:26:b0:1e:f3:67:83:b1:f7:6f:d0:0e:7b:0c:94:17:d0:
         1b:48:cc:38:57:2f:19:de:03:a5:7c:65:71:c2:b9:53:bd:71:
         c6:41:c7:92:8c:ce:87:b8:e5:97:34:53:5a:04:96:1e:b2:c5:
         3f:7c:e3:31:80:f3:4b:ea:d3:02:aa:d3:1d:85:08:d9:aa:46:
         c1:8a:ab:05:cc:a6:26:5d:bb:5d:d1:b1:8f:32:62:9d:9d:a8:
         66:6d:85:b4:78:14:ca:18:76:39:8e:9a:16:c1:36:b5:94:7d:
         8a:0d:e6:b7:b1:ed:15:44:84:34:5c:71:16:73:fe:39:90:16:
         0a:4f:ca:b5:29:e9:18:5f:e6:32:31:22:f1:2a:d0:21:ab:66:
         e0:0f:4c:bb
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIULv6v2CJt2+jrAW3mJroX4vtSmFEwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDkzMDE1MDMwOFoX
DTI1MDkyOTE1MDgwOFowMzExMC8GA1UEAxMoODNGQTQyN0ZGQUUwMkQ4MDA0N0E4
QjVGNDREOTM4RTJDQTZEQjYwOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMIZGuYZIonV3Jt93cI+8Vk7FgbGDse4iUHtd36bALFeYetjeBftGbpPyUWq
mDJcEePul8ty8Uu+V5ocU3VIcTXx/8StCHqI+WT4SZzCkBwM0Q26wJ2/F019PuHV
xzpPAhbccIrFtzkqRAHfH8kWc78S9IN+ttVCOb1/pNv1ZOf1R8UnIxXAUxDBxEHk
2wEWpPFKFt6us2L1PPEDIY4ep1t5trCUM1I7A2ZIKVgodNZxejYIHBNYp3DfAn3/
20SQP4TIgM2cs1PYkJxZCUZL4Pe6aRTxMm29AR0IkG7IiEN7/c6CQp+upeN7xDhf
H2sZrMNRLWapwN2aQbbUDzUbbXECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFIP6Qn/64C2ABHqLX0TZOOLKbbYJMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by9hZTdiOTQ3Ni03ZTM4LTRjNTAtYTYyNC1iMjQ0M2M3MGJiNGQvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FlN2I5NDc2
LTdlMzgtNGM1MC1hNjI0LWIyNDQzYzcwYmI0ZC8wLzgzRkE0MjdGRkFFMDJEODAw
NDdBOEI1RjQ0RDkzOEUyQ0E2REI2MDkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAFn4wQwDQYJKoZIhvcNAQELBQADggEBAGvCPjbYOnz6tnPp0Wl/heyYW4t38mf5
OYJx/4K4kk/wyKqnzfXPykykLeZFARrgbJLK0edheFru6taPkrHsbgCwcBi9hphA
ss8jLXB+vw/fG31ZuhB96q7OndJCw8Ca0ypLy8Yo6cqoAAYa2zWXJrAe82eDsfdv
0A57DJQX0BtIzDhXLxneA6V8ZXHCuVO9ccZBx5KMzoe45Zc0U1oElh6yxT984zGA
80vq0wKq0x2FCNmqRsGKqwXMpiZdu13RsY8yYp2dqGZthbR4FMoYdjmOmhbBNrWU
fYoN5rex7RVEhDRccRZz/jmQFgpPyrUp6Rhf5jIxIvEq0CGrZuAPTLs=
-----END CERTIFICATE-----