Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer
File:                     3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer (raw, json)
Hash identifier:          eBiBdhdmtJ6ajxF6bwD+R7LGtZUWZ1oE2YFBVZuCqGM=
Subject key identifier:   DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02299F
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 16 Jan 2025 03:35:45 +0000
Certificate not after:    Thu 01 May 2025 00:00:00 +0000
Subordinate resources:    AS: 133941
                          IP: 103.49.40.0/22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141727 (0x2299f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan 16 03:35:45 2025 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=A9127EEB/serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:da:b3:28:15:6b:53:67:a7:7b:f0:11:10:45:
                    07:61:b5:8a:37:45:bf:f7:85:e8:de:42:8c:8a:4b:
                    7c:29:a4:d9:c4:58:20:54:4d:e4:3d:3f:11:bd:c9:
                    a5:f5:9f:94:d8:61:82:89:93:f5:58:d9:d1:3d:9e:
                    42:c2:c4:43:7c:2e:ec:d8:bd:93:63:d4:59:30:a0:
                    6f:df:f5:ef:b8:ea:18:a3:c8:cd:11:96:15:d8:98:
                    0c:fe:03:60:59:d4:17:a1:a8:f7:80:10:0b:cc:0b:
                    13:7e:c3:2d:db:8e:c0:bb:a3:35:b4:a4:d9:32:4c:
                    30:3f:7d:08:17:8e:7e:08:11:80:80:fb:d4:c0:05:
                    25:f1:46:c2:5d:60:1e:6c:51:aa:42:d4:b6:a6:45:
                    48:bf:79:12:25:55:31:8e:72:f5:0b:8b:17:a8:02:
                    f5:f0:ca:92:f4:e2:5b:c1:a0:ea:8c:a3:ea:0a:84:
                    1b:2f:3f:3d:81:27:79:67:73:e6:b9:ea:c2:fb:a9:
                    8a:60:15:a9:05:41:8a:77:e7:d3:cc:9e:c2:6c:b8:
                    6c:d8:76:0c:37:8f:08:ee:d6:06:86:11:bc:1c:c2:
                    b6:48:9d:9d:75:7a:5e:c6:40:00:99:14:35:b5:d7:
                    f2:0c:2e:de:6a:a6:58:88:76:f5:52:c6:64:15:5f:
                    1c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  133941

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:a6:f1:c8:ca:a4:50:dc:4f:53:4a:ea:e4:06:73:48:c6:f0:
         dc:7d:74:73:ab:d2:2d:fa:4d:0a:86:f2:a0:6b:e4:d9:42:e4:
         40:ed:ac:0b:c2:42:a9:64:9b:7e:a0:69:8a:8a:3e:e1:30:84:
         0d:3c:d3:d7:32:3a:ef:17:7f:84:f7:71:c1:eb:5a:61:41:a7:
         93:71:3b:35:bb:3a:0a:d6:f6:5f:d3:58:14:b4:00:ea:1c:c3:
         36:1c:3f:8a:a7:f6:f8:5f:96:53:63:95:c2:f1:be:4d:e0:80:
         a5:c4:dd:5f:8c:c7:46:ca:3f:7b:f1:4c:54:09:15:a0:96:15:
         a3:a5:77:a0:8f:29:8e:24:57:8f:e7:78:14:62:0a:91:13:c3:
         4a:11:34:69:94:7c:7d:f2:71:d8:ad:9e:72:24:d2:c4:5e:3d:
         4d:8b:9b:15:c5:d0:f5:2a:5d:04:92:9f:a9:b1:e5:f2:18:a3:
         7f:d6:e7:08:f0:9c:47:91:61:a7:3f:50:69:16:d5:c2:64:a7:
         8b:21:0a:0e:dd:6f:24:86:95:26:e2:d8:bc:cb:40:38:cc:9e:
         3e:05:4f:7e:89:b8:55:64:35:94:1d:01:72:89:78:87:e9:11:
         d3:b3:8d:65:63:64:4f:9e:5d:de:fc:18:30:ad:c3:fa:86:2e:
         0c:86:f5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:25:34 2025 by rpki-client