Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmruIMmoyx9DEkGPHiBXqoprxPs.cer
File:                     ZmruIMmoyx9DEkGPHiBXqoprxPs.cer (raw, json)
Hash identifier:          dbrf53SEcNNsWvOONrN9MxspK4uoSg4Lm+LpIJysCGY=
Subject key identifier:   66:6A:EE:20:C9:A8:CB:1F:43:12:41:8F:1E:20:57:AA:8A:6B:C4:FB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       022465
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91E9FC0/0E45807C826C11ECBD398B58C4F9AE02/ZmruIMmoyx9DEkGPHiBXqoprxPs.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91E9FC0/0E45807C826C11ECBD398B58C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 24 Dec 2024 00:16:18 +0000
Certificate not after:    Thu 01 May 2025 00:00:00 +0000
Subordinate resources:    AS: 138352
                          IP: 103.180.10.0/24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140389 (0x22465)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec 24 00:16:18 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=A91E9FC0/serialNumber=666AEE20C9A8CB1F4312418F1E2057AA8A6BC4FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:52:b8:31:96:98:0f:20:ce:6c:1d:29:54:9c:
                    1f:be:53:75:82:49:b4:7b:5d:cc:9f:f7:38:bd:ab:
                    88:c7:88:df:5c:d3:29:4f:66:64:e8:a0:52:54:d8:
                    c6:ca:3f:47:fb:6f:b7:66:da:27:44:96:57:98:aa:
                    a0:21:8e:03:25:61:11:d6:96:9d:0a:6c:d0:ac:40:
                    28:9e:3b:a8:48:5c:03:eb:64:52:05:e6:ac:6d:8d:
                    c1:14:e7:cf:36:57:34:56:d0:a0:8d:71:64:49:c1:
                    25:08:58:1e:a1:6e:75:20:17:46:b7:88:e7:c8:2d:
                    c2:ac:0a:ca:5c:68:23:9e:b1:9d:fb:d2:e4:54:17:
                    68:3d:e4:b5:3d:bf:e9:ba:20:d0:f2:f3:04:8a:69:
                    93:06:ca:98:54:c4:85:37:8d:6e:c5:e4:16:71:b1:
                    3f:5c:df:e0:32:95:cf:6f:f8:10:bc:9d:88:a5:99:
                    4a:af:41:85:32:4a:89:cd:8a:44:d6:9e:b4:2e:56:
                    4f:ab:4b:e6:77:d6:57:21:a1:df:5c:68:06:b1:c0:
                    ab:c5:03:dc:38:9e:ad:0c:b9:04:66:bc:01:8f:a4:
                    f5:54:69:30:10:bd:c6:a8:db:aa:55:7e:17:17:fd:
                    0f:5a:10:ef:2b:44:9a:26:c3:79:83:fc:cc:49:50:
                    9a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:6A:EE:20:C9:A8:CB:1F:43:12:41:8F:1E:20:57:AA:8A:6B:C4:FB
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E9FC0/0E45807C826C11ECBD398B58C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E9FC0/0E45807C826C11ECBD398B58C4F9AE02/ZmruIMmoyx9DEkGPHiBXqoprxPs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  138352

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:e5:50:d0:8a:1d:1d:e6:38:59:83:d6:e1:2a:a7:c1:cc:c3:
         5f:19:be:fd:97:8a:86:9c:67:bc:9e:0d:7c:bd:c5:4c:c9:fe:
         18:07:e6:4b:6a:2b:16:37:56:b2:4a:06:ba:3d:80:11:13:d5:
         02:fd:aa:7e:d2:eb:b1:7b:78:2f:6e:8f:b2:74:f1:14:24:a7:
         79:07:3f:02:56:60:a7:3b:3c:95:f8:3e:29:23:d9:88:e6:c8:
         65:87:8e:0c:3d:b5:54:fe:00:21:1e:7c:2e:b0:34:bd:bf:8e:
         19:8f:ae:d2:a2:d3:c6:00:ad:a3:47:78:9b:fa:24:91:a5:0f:
         4b:23:77:7d:e2:61:d4:61:4d:58:ac:0e:f9:01:54:d4:1d:89:
         58:be:a2:38:74:72:c7:7f:84:58:79:d5:69:b5:ae:89:99:24:
         45:e8:86:a5:0a:ea:df:79:9c:ea:f4:91:26:2d:07:60:b8:fb:
         a6:d7:40:0d:9b:6f:cb:5e:5c:6f:0e:f5:a5:e7:b7:8d:f1:ab:
         ec:71:a3:83:cd:ab:8d:79:81:21:e7:ca:9b:19:7e:51:43:e8:
         48:ae:93:5b:e2:4a:c9:b6:04:05:00:08:22:75:77:97:d6:f7:
         89:52:63:ac:5a:a0:25:df:a9:1a:d0:6b:80:82:62:17:98:04:
         c2:1f:b4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:17:56 2025 by rpki-client