Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J38SJEpQvGVO5WP-c5_k63GZZrY.cer
File:                     J38SJEpQvGVO5WP-c5_k63GZZrY.cer (raw, json)
Hash identifier:          MLbmalsxnWE9ZNzhPdijtduBJGqikB+9RDyXp2tO1kU=
Subject key identifier:   27:7F:12:24:4A:50:BC:65:4E:E5:63:FE:73:9F:E4:EB:71:99:66:B6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       022301
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 17 Dec 2024 10:34:45 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 152181
                          IP: 36.50.144.0/23
                          IP: 2001:df3:4ac0::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140033 (0x22301)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec 17 10:34:45 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=A91B89AA/serialNumber=277F12244A50BC654EE563FE739FE4EB719966B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a5:16:1b:3c:aa:b2:33:3e:1a:a0:f7:0b:f6:
                    80:f7:95:d5:29:42:5a:ad:dd:25:f8:24:6f:2b:f0:
                    72:53:9a:c7:f5:e3:c9:08:11:15:ea:ba:bf:85:e0:
                    77:67:7f:48:13:90:42:f9:73:ea:7c:61:c6:f7:ed:
                    f6:f8:c1:52:d4:1a:02:85:56:fb:cb:e1:cc:8a:e4:
                    c0:33:de:3f:91:d2:19:61:7e:be:1c:9a:a4:63:34:
                    83:e7:69:62:cb:45:33:70:6b:74:fe:0b:64:8a:1d:
                    f2:16:40:63:79:16:be:14:a1:4a:66:14:e3:96:71:
                    c2:f1:09:35:fd:67:8f:27:68:ee:7b:20:c6:35:d7:
                    7a:9c:00:b3:53:63:d6:b7:ab:d1:7b:1e:c1:3d:cd:
                    6a:58:87:80:b3:62:85:90:d6:ae:7e:f5:b4:78:d6:
                    34:1c:81:c3:c3:36:53:34:70:d2:7a:33:f2:4a:d1:
                    0e:4a:32:f4:8d:29:67:32:d2:0f:60:4c:67:6b:1b:
                    44:9b:48:13:4b:85:15:a9:05:61:32:db:40:7d:74:
                    6b:11:5c:4e:70:fc:14:c9:27:72:d8:31:e5:7a:4f:
                    da:36:b2:81:0b:42:11:03:57:86:28:9c:42:e0:46:
                    5b:ff:55:5a:89:53:5e:75:99:66:49:f3:8d:f8:c1:
                    f7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:7F:12:24:4A:50:BC:65:4E:E5:63:FE:73:9F:E4:EB:71:99:66:B6
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  152181

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.144.0/23
                IPv6:
                  2001:df3:4ac0::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:6f:28:1b:7a:f6:3a:16:ce:c0:d4:4d:5f:8f:f1:4c:a8:7f:
         e3:31:cb:d6:3c:91:8e:68:b3:ce:94:c6:0d:1e:ee:77:21:af:
         0d:ba:2b:d8:3a:68:35:09:83:13:e6:30:8b:69:f4:7f:74:d6:
         65:a5:51:d5:d7:c4:10:b5:51:80:0e:88:e3:7d:26:65:36:c1:
         ea:44:83:6b:3d:fc:63:88:6b:fc:33:bf:a5:1b:61:f8:3b:b9:
         a9:0d:fb:d6:6b:09:99:16:a2:1c:e1:93:0f:a8:c9:6a:65:b2:
         20:69:47:80:1a:05:50:37:14:1e:c9:28:d6:a5:3f:f2:1f:3f:
         e9:64:68:cc:e7:6c:73:fb:02:bc:e0:8d:73:31:dc:27:3f:41:
         72:4a:c2:1d:1b:e1:2e:ef:d7:44:a9:3a:d5:a3:75:94:a6:c2:
         cb:07:fa:9f:b8:37:8a:90:6c:b8:5a:6e:9a:2b:dc:98:0a:dd:
         e5:ad:8f:ee:52:88:5b:9e:dd:2d:f8:fe:22:c6:a2:d4:b1:eb:
         a4:3c:f0:c8:a6:8b:08:c4:35:68:eb:59:3c:7e:ed:01:10:fd:
         c1:d9:bb:8b:57:49:2d:fb:d1:64:44:bf:46:fa:c9:37:3d:64:
         ae:d2:fe:08:e2:e8:1b:89:2a:6c:f3:4c:be:d4:70:ee:60:b9:
         c8:08:72:53
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----