Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.cer
File:                     WQ0nhfMG6JFKHf6bJ9V8a4n82pM.cer (raw, json)
Hash identifier:          D0YSzJue+zFaoPrnizFdI2qrmAPxhLm78ZVr6hC6N2Y=
Subject key identifier:   59:0D:27:85:F3:06:E8:91:4A:1D:FE:9B:27:D5:7C:6B:89:FC:DA:93
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01DB64
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 30 Jan 2024 14:56:58 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 134499
                          IP: 103.161.66.0/23
                          IP: 2001:df5:bb80::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121700 (0x1db64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan 30 14:56:58 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=A91376D4/serialNumber=590D2785F306E8914A1DFE9B27D57C6B89FCDA93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:34:04:43:a1:e0:5e:04:ea:08:b7:ab:3f:99:
                    50:85:61:3e:89:56:d5:78:c9:92:77:fe:67:d9:0d:
                    90:02:0a:de:ea:9f:1c:f0:c1:d4:94:77:7c:ff:2e:
                    4e:c5:e1:ed:6a:fb:57:c1:e8:10:be:c6:7a:c2:da:
                    85:d6:13:a2:02:da:41:58:cd:0c:45:d9:b1:ed:96:
                    61:63:0c:e8:fb:ad:36:3c:75:9c:f9:e3:a7:95:7f:
                    84:eb:ed:06:1b:49:ca:4c:41:98:5d:5d:31:38:46:
                    2d:da:d0:04:a7:f2:80:cd:e4:f5:f2:9d:bc:ac:f9:
                    cb:f0:5b:00:ea:f5:0c:d0:76:fa:97:35:94:87:8b:
                    0e:b1:63:c9:dd:7c:f8:35:8e:26:b1:dd:b5:d6:4c:
                    79:1d:c7:ae:5e:19:a6:4f:71:a4:12:07:9e:eb:8e:
                    79:a6:a4:0f:94:5d:13:0d:dd:f4:8b:64:a1:95:14:
                    2d:80:1d:73:e6:5c:84:cc:d1:c6:f7:f6:2c:f0:63:
                    ca:74:f1:67:86:d7:5d:21:cf:f1:cb:2b:15:19:50:
                    24:39:3a:1b:82:58:33:24:cf:e3:f6:ea:2c:33:18:
                    61:73:2f:d2:30:c4:d9:a4:7e:bc:b3:49:1d:71:ce:
                    49:b5:06:dc:d5:7f:b4:d7:6c:9e:d2:cd:ce:be:e9:
                    ba:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:0D:27:85:F3:06:E8:91:4A:1D:FE:9B:27:D5:7C:6B:89:FC:DA:93
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  134499

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.66.0/23
                IPv6:
                  2001:df5:bb80::/48

    Signature Algorithm: sha256WithRSAEncryption
         ac:12:27:f8:e4:50:d2:be:af:38:b8:fa:5f:e3:cb:68:85:c2:
         27:1a:ff:7b:6c:fa:da:99:76:f7:f1:8e:0f:90:f0:e1:9f:95:
         22:7c:15:a3:90:a0:1e:8d:b5:10:e0:24:b4:00:cf:64:e3:c0:
         68:25:6d:5c:7f:ec:58:54:d6:13:1d:5c:1e:2e:17:88:45:ec:
         61:8e:5c:1d:06:c8:70:18:f6:35:6d:6e:28:ca:78:9c:18:b9:
         e1:a7:8f:87:bc:11:91:f6:31:70:50:e1:72:d9:34:99:4a:26:
         39:60:e8:6f:73:a1:c8:f3:8f:3e:ff:ee:4c:9c:40:7f:5e:98:
         04:fb:5e:aa:c8:0e:ab:a1:92:4e:c9:f8:ff:30:c3:86:3f:ad:
         94:1e:d5:03:60:c2:fe:fc:2b:c3:77:64:1f:cc:1e:c9:6e:6a:
         54:a5:84:7f:7b:33:7a:e6:32:82:e4:63:e8:05:5b:2b:94:61:
         9c:fe:1c:4c:af:0c:62:75:11:55:72:d0:09:c4:df:bd:18:82:
         93:94:8d:1b:15:8f:04:12:1b:e1:9f:b9:2a:71:08:9c:19:b1:
         06:51:76:b7:5b:56:a6:8d:f0:19:b5:ed:c6:16:56:45:b8:e5:
         ec:b4:b8:28:cc:5f:c9:a7:f6:15:e4:4d:bc:8b:0a:78:67:9c:
         ed:26:82:1c
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAdtkMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDEzMDE0NTY1OFoXDTI1MDMzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMzc2RDQxMTAvBgNVBAUTKDU5MEQyNzg1RjMwNkU4OTE0QTFERkU5
QjI3RDU3QzZCODlGQ0RBOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDRNARDoeBeBOoIt6s/mVCFYT6JVtV4yZJ3/mfZDZACCt7qnxzwwdSUd3z/Lk7F
4e1q+1fB6BC+xnrC2oXWE6IC2kFYzQxF2bHtlmFjDOj7rTY8dZz546eVf4Tr7QYb
ScpMQZhdXTE4Ri3a0ASn8oDN5PXynbys+cvwWwDq9QzQdvqXNZSHiw6xY8ndfPg1
jiax3bXWTHkdx65eGaZPcaQSB57rjnmmpA+UXRMN3fSLZKGVFC2AHXPmXITM0cb3
9izwY8p08WeG110hz/HLKxUZUCQ5OhuCWDMkz+P26iwzGGFzL9IwxNmkfryzSR1x
zkm1BtzVf7TXbJ7Szc6+6brbAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUWQ0nhfMG
6JFKHf6bJ9V8a4n82pMwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTM3NkQ0LzhFMzI2ODNBNEYzMzExRUJCRjQ5RTM1N0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEzNzZENC84RTMyNjgzQTRGMzMxMUVCQkY0OUUzNTdDNEY5QUUwMi9XUTBuaGZN
RzZKRktIZjZiSjlWOGE0bjgycE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAg1jMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ6FCMA8EAgAC
MAkDBwAgAQ31u4AwDQYJKoZIhvcNAQELBQADggEBAKwSJ/jkUNK+rzi4+l/jy2iF
wica/3ts+tqZdvfxjg+Q8OGflSJ8FaOQoB6NtRDgJLQAz2TjwGglbVx/7FhU1hMd
XB4uF4hF7GGOXB0GyHAY9jVtbijKeJwYueGnj4e8EZH2MXBQ4XLZNJlKJjlg6G9z
ocjzjz7/7kycQH9emAT7XqrIDquhkk7J+P8ww4Y/rZQe1QNgwv78K8N3ZB/MHslu
alSlhH97M3rmMoLkY+gFWyuUYZz+HEyvDGJ1EVVy0AnE370YgpOUjRsVjwQSG+Gf
uSpxCJwZsQZRdrdbVqaN8Bm17cYWVkW45ey0uCjMX8mn9hXkTbyLCnhnnO0mghw=
-----END CERTIFICATE-----