Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yg05s6GDeXO9EyafKwasmyc4gg0.cer
File:                     Yg05s6GDeXO9EyafKwasmyc4gg0.cer (raw, json)
Hash identifier:          fw1F+VDFYIDWJ4hHlMcRSCK4oe9AVLHYJbrSZc+qzAk=
Subject key identifier:   62:0D:39:B3:A1:83:79:73:BD:13:26:9F:2B:06:AC:9B:27:38:82:0D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       022C86
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 30 Jan 2025 15:48:01 +0000
Certificate not after:    Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources:    AS: 18381
                          AS: 153368 -- 153369
                          IP: 43.250.52.0/22
                          IP: 103.41.176.0/22
                          IP: 2406:4fc0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142470 (0x22c86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan 30 15:48:01 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=A91A6F68/serialNumber=620D39B3A1837973BD13269F2B06AC9B2738820D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:31:5a:fc:07:14:96:e9:65:d2:8f:8d:29:7c:
                    a7:cb:7b:2f:78:22:54:97:3e:64:fd:bc:4a:1c:6a:
                    98:85:05:5b:52:84:c4:6d:25:bf:d9:e6:4b:2c:e1:
                    8f:19:2f:64:f2:18:c6:14:77:a3:b8:88:d7:4a:4b:
                    d7:07:3b:f2:13:61:be:03:fc:c2:4f:5a:09:49:db:
                    df:cf:83:b5:0a:6a:cb:5f:c4:6f:3f:1d:f0:97:59:
                    2a:eb:ac:5f:a5:c2:dc:6a:16:c4:cb:1c:57:af:fd:
                    14:75:62:11:55:f2:b4:5c:4f:ca:16:fc:fc:90:aa:
                    b5:7f:33:0e:d0:5f:f2:70:c1:28:a3:fc:49:61:ee:
                    8e:82:66:3f:2d:70:bc:5b:96:61:d0:2a:bc:6a:6d:
                    7f:95:4e:3c:46:da:f6:af:c1:1f:6f:11:85:24:95:
                    4c:23:3d:ea:35:0e:36:7a:e5:54:2d:b6:14:fa:27:
                    85:4e:05:9c:81:0d:b5:9d:aa:23:c6:a2:e1:22:55:
                    ea:6e:67:23:df:8f:33:22:a2:34:00:e4:94:46:54:
                    76:e8:89:4e:0b:c9:b5:04:7a:e7:aa:5e:7e:46:42:
                    5b:69:5b:de:e3:08:7d:36:68:d7:cf:a0:41:2a:1e:
                    51:d9:64:15:3d:16:db:eb:29:a3:7f:d3:9b:12:6a:
                    7f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:0D:39:B3:A1:83:79:73:BD:13:26:9F:2B:06:AC:9B:27:38:82:0D
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  18381
                  153368-153369

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.250.52.0/22
                  103.41.176.0/22
                IPv6:
                  2406:4fc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         d9:67:cc:a4:01:6d:2a:c9:bc:61:dd:87:d3:a7:d7:ab:3e:fb:
         9d:5a:62:76:3f:66:b9:82:4a:51:32:18:f4:8b:f9:39:fa:9c:
         2b:56:0b:18:f8:1e:44:7d:5a:1b:5a:cc:03:5b:f6:f8:9d:46:
         34:5a:9f:52:72:ea:12:14:d9:41:34:88:fb:49:f5:bd:89:6c:
         b5:cd:b6:cd:f5:e3:9d:6a:c7:70:77:88:8f:59:e3:f8:b1:ca:
         77:4e:1e:b1:e4:25:7f:16:b0:9a:47:62:2a:fe:fd:00:ed:6c:
         1c:5f:f9:ec:20:f3:af:18:52:1a:e9:32:4d:55:67:39:48:20:
         38:ae:8f:cf:42:a5:48:6b:46:37:e8:8d:77:8c:d6:28:01:fe:
         50:15:14:ff:85:c5:48:a9:79:1a:94:e8:99:53:78:78:42:c6:
         c6:23:50:94:46:0a:6f:0e:0e:bb:13:4c:29:74:bd:b4:4c:3a:
         2d:a3:cf:c2:18:b6:b7:fd:0d:23:6d:5a:38:a5:4e:d0:81:9a:
         cf:85:0f:91:ab:88:99:13:b3:e4:b3:72:e8:4a:fa:7f:a0:2e:
         12:b2:c7:ef:0f:7a:a2:c3:4e:7c:89:a4:9a:f1:72:e9:b1:69:
         54:d7:60:20:83:7f:8b:de:50:f4:bd:16:9e:7c:21:0c:a0:eb:
         07:25:4d:5f
-----BEGIN CERTIFICATE-----
MIIGOjCCBSKgAwIBAgIDAiyGMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDEzMDE1NDgwMVoXDTI1MTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQTZGNjgxMTAvBgNVBAUTKDYyMEQzOUIzQTE4Mzc5NzNCRDEzMjY5
RjJCMDZBQzlCMjczODgyMEQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDIMVr8BxSW6WXSj40pfKfLey94IlSXPmT9vEocapiFBVtShMRtJb/Z5kss4Y8Z
L2TyGMYUd6O4iNdKS9cHO/ITYb4D/MJPWglJ29/Pg7UKastfxG8/HfCXWSrrrF+l
wtxqFsTLHFev/RR1YhFV8rRcT8oW/PyQqrV/Mw7QX/JwwSij/Elh7o6CZj8tcLxb
lmHQKrxqbX+VTjxG2vavwR9vEYUklUwjPeo1DjZ65VQtthT6J4VOBZyBDbWdqiPG
ouEiVepuZyPfjzMiojQA5JRGVHboiU4LybUEeueqXn5GQltpW97jCH02aNfPoEEq
HlHZZBU9FtvrKaN/05sSan8TAgMBAAGjggMvMIIDKzAdBgNVHQ4EFgQUYg05s6GD
eXO9EyafKwasmyc4gg0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUE2RjY4LzkyRTI1OTYyREYyMTExRUY4MzNGNEYyQ0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFBNkY2OC85MkUyNTk2MkRGMjExMUVGODMzRjRGMkNDNEY5QUUwMi9ZZzA1czZH
RGVYTzlFeWFmS3dhc215YzRnZzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQgBAf8EFjAU
oBIwEAICR80wCgIDAlcYAgMCVxkwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwD
BAIr+jQDBAJnKbAwDQQCAAIwBwMFACQGT8AwDQYJKoZIhvcNAQELBQADggEBANln
zKQBbSrJvGHdh9On16s++51aYnY/ZrmCSlEyGPSL+Tn6nCtWCxj4HkR9WhtazANb
9vidRjRan1Jy6hIU2UE0iPtJ9b2JbLXNts31451qx3B3iI9Z4/ixyndOHrHkJX8W
sJpHYir+/QDtbBxf+ewg868YUhrpMk1VZzlIIDiuj89CpUhrRjfojXeM1igB/lAV
FP+FxUipeRqU6JlTeHhCxsYjUJRGCm8ODrsTTCl0vbRMOi2jz8IYtrf9DSNtWjil
TtCBms+FD5GriJkTs+SzcuhK+n+gLhKyx+8PeqLDTnyJpJrxcumxaVTXYCCDf4ve
UPS9Fp58IQyg6wclTV8=
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:50:57 2025 by rpki-client