Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVO6SZpE5-wQQcYO9_NprGI1eqg.cer
File:                     QVO6SZpE5-wQQcYO9_NprGI1eqg.cer (raw, json)
Hash identifier:          DFyVLz23tSR3NwJS2Enhfm1z2TSJoHDTDXjff/FINDY=
Subject key identifier:   41:53:BA:49:9A:44:E7:EC:10:41:C6:0E:F7:F3:69:AC:62:35:7A:A8
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       022C92
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 30 Jan 2025 16:16:44 +0000
Certificate not after:    Mon 02 Jun 2025 00:00:00 +0000
Subordinate resources:    AS: 152125
                          IP: 36.50.31.0/24
                          IP: 2001:df3:3340::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142482 (0x22c92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan 30 16:16:44 2025 GMT
            Not After : Jun  2 00:00:00 2025 GMT
        Subject: CN=A91423C1/serialNumber=4153BA499A44E7EC1041C60EF7F369AC62357AA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a0:06:30:97:2e:a2:1b:ae:5e:c6:fa:f6:00:
                    45:ad:76:68:ce:08:f8:56:6e:1d:6f:b0:4e:03:c3:
                    0f:0e:40:58:00:fa:df:49:35:2b:1d:fc:98:04:87:
                    5c:51:99:bb:51:e3:43:80:db:2c:a9:4b:f0:5f:f6:
                    db:d7:27:86:6e:ae:ab:18:e3:2a:97:42:de:87:90:
                    b2:02:c1:43:9b:a1:06:29:f1:fc:e5:65:73:d8:a0:
                    50:03:cf:29:ac:d6:5b:41:80:95:91:7f:5c:f6:c3:
                    47:68:a5:34:ad:1c:af:7b:b6:e2:bf:f3:c8:fa:9b:
                    76:92:50:a9:08:51:cf:f2:16:19:e7:30:c8:1f:60:
                    98:b3:91:d7:c4:e6:51:4e:cd:e3:78:84:60:21:5b:
                    4c:d6:55:df:e1:20:26:22:83:02:55:5c:c3:bb:c0:
                    71:11:a2:5b:87:d5:6a:3e:73:61:83:55:02:c4:38:
                    a3:15:26:88:eb:86:f4:26:d9:fc:7a:27:1b:9d:e4:
                    3f:00:3c:87:0e:ed:8b:92:11:cb:bb:e4:1a:42:77:
                    5d:3c:f8:85:01:3a:ab:fa:39:dd:78:e5:69:0d:d3:
                    4d:39:36:fd:5b:14:eb:3d:e7:e4:4d:d5:e7:87:c6:
                    21:6f:9e:7f:db:92:be:37:13:c3:53:99:3b:ad:5f:
                    27:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:53:BA:49:9A:44:E7:EC:10:41:C6:0E:F7:F3:69:AC:62:35:7A:A8
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  152125

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.31.0/24
                IPv6:
                  2001:df3:3340::/48

    Signature Algorithm: sha256WithRSAEncryption
         d2:42:8d:16:69:62:ee:be:e0:c5:14:75:c2:2d:7d:29:2a:fa:
         a4:dd:40:78:8b:8d:2c:0a:a1:41:76:9a:53:60:a8:86:23:9b:
         04:63:1d:21:58:6c:ae:d9:04:1c:9d:76:8e:bf:5e:b1:59:df:
         0c:89:84:a3:6e:98:36:7e:77:24:ad:93:30:41:8d:3d:07:f6:
         8a:80:6c:68:2f:bb:b9:67:a4:1e:75:d4:91:60:62:37:84:3d:
         10:36:16:e9:76:c4:e2:0c:8b:13:4c:af:31:a9:f6:46:d3:5f:
         44:2f:2b:1a:e0:e3:7e:75:9b:a0:64:79:41:d1:55:f9:aa:f2:
         43:fa:0f:b0:44:28:b7:1c:d3:c2:c5:3a:12:4c:7c:36:dc:ae:
         04:10:83:9d:0b:37:1f:e7:f6:a3:e2:7d:76:53:5d:28:91:f5:
         88:8a:c6:db:47:40:f6:48:f4:79:92:76:b6:c2:e6:42:bd:4f:
         fc:bb:02:fa:28:fd:d0:11:be:8f:89:dd:45:d3:e6:61:18:74:
         e0:23:67:7d:64:88:1e:11:8e:67:b0:48:51:34:8a:d4:ab:96:
         6b:79:78:77:b3:9b:e7:26:ea:74:bb:f1:e9:4c:38:0c:da:95:
         20:83:3e:23:eb:ff:b7:66:73:00:77:0c:61:44:90:71:c5:80:
         20:f9:a9:88
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----