Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer
File:                     40gJvFtFT8eZSH_u2tcCEkAkYjo.cer (raw, json)
Hash identifier:          nXbJ19gFaijoQ+VNpMitsIQ9oJwE/pomsw0AQfpqCDE=
Subject key identifier:   E3:48:09:BC:5B:45:4F:C7:99:48:7F:EE:DA:D7:02:12:40:24:62:3A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       022CC4
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 30 Jan 2025 19:07:15 +0000
Certificate not after:    Mon 02 Jun 2025 00:00:00 +0000
Subordinate resources:    AS: 149862
                          IP: 103.145.182.0/23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142532 (0x22cc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan 30 19:07:15 2025 GMT
            Not After : Jun  2 00:00:00 2025 GMT
        Subject: CN=A91734C9/serialNumber=E34809BC5B454FC799487FEEDAD702124024623A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e1:07:f4:11:3a:91:7b:c7:ea:e5:ec:af:e7:
                    04:da:8b:49:b7:c4:2a:52:2f:9c:6d:e4:18:af:f7:
                    e4:ff:0f:84:11:3e:56:d2:96:a8:af:35:0b:a3:04:
                    1a:80:5a:48:55:f9:3b:82:a9:cf:03:e5:36:34:41:
                    cb:be:f9:5c:b9:3d:87:33:2b:16:46:7e:48:93:a0:
                    ae:bf:e5:a2:b6:f1:6a:f8:2f:66:bb:7b:34:d5:bd:
                    fc:28:5f:9a:ee:ad:87:a0:60:7c:70:76:eb:a8:79:
                    32:ba:c2:00:db:f2:f8:b0:37:4b:f3:65:c4:79:00:
                    41:c3:c9:47:98:b2:c5:82:0e:20:09:f9:2f:60:0f:
                    dc:a4:56:4c:90:ad:9e:24:05:12:81:1c:cf:9e:87:
                    d2:cf:68:15:49:f4:c8:e5:60:34:5d:d6:c0:fb:cc:
                    d4:a4:1f:01:ff:e6:58:5c:29:76:2f:0e:3d:da:b4:
                    fa:89:2c:85:e4:1a:73:5f:3d:40:28:93:28:cf:87:
                    ad:92:4a:d1:ae:3d:45:b1:b4:c8:e1:dc:66:1d:24:
                    72:d7:7e:cb:9f:cc:bf:70:cd:b2:fb:8e:8e:9a:4f:
                    86:bb:69:04:da:80:6f:d3:75:fd:59:24:4a:94:f4:
                    2a:36:7c:30:1d:0b:4d:86:e5:1a:8d:61:06:2d:35:
                    8c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:48:09:BC:5B:45:4F:C7:99:48:7F:EE:DA:D7:02:12:40:24:62:3A
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  149862

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d9:10:18:38:a7:6a:36:08:e1:34:9f:02:5e:64:70:cb:a5:26:
         80:cd:f2:e5:a5:b5:50:13:00:bb:e3:0d:1e:f2:76:5a:74:7e:
         2a:99:35:16:9b:82:6a:58:83:02:2a:3c:f5:aa:a0:2c:0b:42:
         0f:95:55:95:6c:a6:72:33:17:ba:22:69:cc:e0:58:8a:67:99:
         b3:01:ef:7f:61:70:4d:7e:a0:96:d1:e5:df:f2:5c:51:14:a9:
         d3:78:71:74:e3:8a:17:ae:13:d6:df:e4:ac:79:48:91:24:f6:
         04:ff:a3:ea:51:e0:6a:95:92:f5:a4:4d:d4:6a:bb:e7:15:5c:
         d0:4e:a1:85:89:1b:fa:e7:2f:4a:2e:72:bf:7e:1b:5c:9e:d0:
         fb:bb:f6:cc:c1:d7:88:07:d8:3d:90:ca:34:91:98:f3:11:cd:
         dd:fa:ba:23:dc:10:f0:30:c9:87:15:37:38:b5:f0:21:4b:fd:
         66:8e:74:ac:67:09:6f:65:de:89:64:cd:62:7e:31:e5:a8:29:
         6d:32:73:5a:d5:f7:cb:d6:a5:0d:36:ad:ee:3f:e6:e0:65:b5:
         92:66:e7:64:9c:7b:34:3b:44:6a:f0:e5:0c:00:5c:ad:86:a3:
         b3:e2:21:5f:fd:3f:26:98:00:d0:75:7c:a8:de:40:67:3d:eb:
         f9:34:74:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:56:54 2025 by rpki-client