Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5mZzaZKKhpmLlTmGh1XmMaIzMM.cer
File:                     X5mZzaZKKhpmLlTmGh1XmMaIzMM.cer (raw, json)
Hash identifier:          b1X5Ce77NCFPiKyfBbGrvOUhV1sHsZbyqVokVb5+Kp4=
Subject key identifier:   5F:99:99:CD:A6:4A:2A:1A:66:2E:54:E6:1A:1D:57:98:C6:88:CC:C3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0222BE
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/X5mZzaZKKhpmLlTmGh1XmMaIzMM.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sat 14 Dec 2024 22:07:23 +0000
Certificate not after:    Wed 28 May 2025 00:00:00 +0000
Subordinate resources:    AS: 137480
                          IP: 103.110.64.0/22
                          IP: 2402:8440::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139966 (0x222be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec 14 22:07:23 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=A91C5413/serialNumber=5F9999CDA64A2A1A662E54E61A1D5798C688CCC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0b:fb:10:0c:ab:a0:81:dc:38:a5:a7:03:36:
                    b4:ac:35:e5:b2:d2:92:84:a1:d1:de:48:56:24:b1:
                    ec:0b:75:1f:f0:69:d1:88:7f:80:d1:06:27:da:b3:
                    5a:50:a5:06:b3:a1:4d:4e:33:40:12:ee:78:27:8c:
                    ca:c9:49:5f:62:cf:12:0f:3f:19:ad:22:24:52:ca:
                    07:cb:9f:66:fd:8c:ea:85:62:2c:e7:f1:48:1a:27:
                    d3:24:4b:43:5b:c7:07:a4:59:94:d6:12:16:99:dd:
                    bb:74:ed:29:9f:b9:4d:e1:3f:75:82:32:93:ea:fb:
                    7f:e4:a1:3c:90:fe:f1:bc:b1:64:85:f3:ef:07:0b:
                    f1:8e:cf:1c:58:b8:95:96:12:db:8e:55:19:83:c8:
                    d6:5b:94:55:b9:2b:a9:b9:82:70:39:60:c6:76:6f:
                    8b:e3:8e:84:5c:af:4c:6e:3e:de:1c:73:63:d3:0a:
                    58:ab:cd:94:c6:55:08:55:3c:1e:f0:8e:8c:a5:6e:
                    76:53:41:41:fa:96:9b:f4:e9:67:5d:df:5b:c9:b2:
                    05:ca:14:5d:f7:a9:d8:b9:48:d2:b8:c3:09:47:4b:
                    2e:58:ef:0a:0e:3e:ea:26:6d:bd:1a:23:4d:0f:bf:
                    b0:ba:3e:9f:f9:b6:01:cd:13:3b:f5:bd:85:99:23:
                    17:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:99:99:CD:A6:4A:2A:1A:66:2E:54:E6:1A:1D:57:98:C6:88:CC:C3
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/X5mZzaZKKhpmLlTmGh1XmMaIzMM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137480

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.64.0/22
                IPv6:
                  2402:8440::/32

    Signature Algorithm: sha256WithRSAEncryption
         bd:bb:61:d1:29:cd:f0:ba:40:82:aa:bb:af:ad:94:d1:26:15:
         83:7e:61:61:8c:03:25:f5:56:1b:bb:48:32:8b:75:0a:41:d5:
         6e:45:7f:08:f8:01:5d:b8:09:6a:21:74:a6:97:0e:e5:f7:15:
         a3:d3:b2:d3:2f:3f:30:24:0e:57:c2:88:4c:34:84:e4:65:8b:
         e0:a8:fa:7d:8d:c7:00:79:fe:a8:e0:2f:f3:cb:b0:75:45:29:
         83:eb:94:e9:18:b1:a9:93:e9:72:4e:da:8b:e7:c0:cd:cf:53:
         b7:2e:b1:e4:b4:b5:e9:f8:b0:06:af:33:c3:d4:68:2a:e5:04:
         53:2a:11:b4:34:04:e3:b5:c0:56:61:f6:38:ab:3e:6d:24:39:
         d9:96:51:13:2f:08:08:c5:d9:be:69:1c:81:63:64:99:ce:97:
         ba:99:b1:fe:bb:bb:be:82:97:af:e7:e3:d5:98:0e:49:70:ce:
         44:d9:90:d0:2f:c0:d0:3b:b7:6c:0d:e0:7a:de:90:f0:d4:f2:
         b9:28:05:02:9b:78:74:1c:53:40:08:b6:e4:08:ac:00:66:38:
         43:38:ee:f0:48:9b:1e:25:35:6f:70:24:15:b2:5c:35:9d:0d:
         6e:e3:00:ca:13:a8:d9:aa:27:9e:60:60:54:cb:b6:c5:05:12:
         da:87:b5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----