Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV8F3RJr_zNr7yKB7MeKpWsGoCM.cer
File:                     bV8F3RJr_zNr7yKB7MeKpWsGoCM.cer (raw, json)
Hash identifier:          274AG9wUMcG6Q8iiIuKzKFYKuypu3jX8qiVSqJ1smL0=
Subject key identifier:   6D:5F:05:DD:12:6B:FF:33:6B:EF:22:81:EC:C7:8A:A5:6B:06:A0:23
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       022CCA
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A917A220/00EE08D6412811EA8E5E4B83C4F9AE02/bV8F3RJr_zNr7yKB7MeKpWsGoCM.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A917A220/00EE08D6412811EA8E5E4B83C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 30 Jan 2025 19:26:48 +0000
Certificate not after:    Mon 02 Jun 2025 00:00:00 +0000
Subordinate resources:    AS: 138465
                          IP: 2404:540::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142538 (0x22cca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan 30 19:26:48 2025 GMT
            Not After : Jun  2 00:00:00 2025 GMT
        Subject: CN=A917A220/serialNumber=6D5F05DD126BFF336BEF2281ECC78AA56B06A023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0f:c5:3c:77:c2:2d:60:1a:ee:29:a2:3a:c1:
                    8c:bf:53:b0:f9:d0:d1:6b:c4:2a:af:cc:35:99:df:
                    61:98:81:ac:ba:f8:0e:91:19:f1:89:9d:5c:4a:c9:
                    a5:37:02:5e:ef:f2:c1:69:41:4b:da:1b:11:47:9f:
                    d1:c9:af:a0:52:fb:35:d8:01:7a:a2:10:40:48:e4:
                    47:f4:11:72:a4:f2:81:6b:de:0e:61:bb:77:5a:3b:
                    9b:8e:30:b4:8a:ad:48:36:cc:5f:d9:e6:cb:06:40:
                    f2:b1:ba:a9:70:5b:53:a1:09:92:c4:dc:fd:3a:44:
                    97:7c:56:12:77:3b:f4:42:ea:9d:09:09:3d:ac:63:
                    a9:c9:1d:a8:d6:ec:f7:7c:af:02:2d:f0:6c:13:87:
                    56:84:fc:aa:7e:dd:bf:ab:f6:e0:be:0a:e7:ca:09:
                    c6:cb:4a:a3:bd:cb:42:66:ad:c3:2a:54:54:69:0b:
                    82:37:5a:77:f6:f8:ee:5c:2c:d2:99:59:5b:42:3f:
                    43:16:14:29:50:bd:0d:5b:f9:62:81:70:4a:be:a0:
                    68:04:23:09:ef:09:a4:e2:4c:14:e5:ad:44:a9:a7:
                    b5:b0:bf:b7:cf:14:4d:b7:35:b9:7d:d4:23:47:8f:
                    26:2b:c3:30:c8:67:39:61:b6:4a:33:a2:6c:39:16:
                    eb:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:5F:05:DD:12:6B:FF:33:6B:EF:22:81:EC:C7:8A:A5:6B:06:A0:23
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917A220/00EE08D6412811EA8E5E4B83C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917A220/00EE08D6412811EA8E5E4B83C4F9AE02/bV8F3RJr_zNr7yKB7MeKpWsGoCM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  138465

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:540::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:19:06:59:c0:78:71:bf:a5:9e:60:ae:04:4b:50:84:cb:9e:
         a1:b0:f6:f6:e1:56:b9:fb:bc:e6:ca:97:60:a0:c7:6a:e2:a5:
         28:f2:e1:58:1d:68:db:e5:22:20:84:0e:12:b7:fd:ff:3f:9d:
         2e:6c:87:56:9a:fc:d0:e8:7d:7a:50:5f:9e:9c:e0:0f:10:6f:
         ba:11:48:7c:c6:2a:65:b1:ed:09:b2:24:6d:22:de:66:5b:2e:
         0c:01:a7:17:55:9d:9a:1c:b9:e8:6b:03:d4:11:78:73:59:3d:
         f2:bc:1a:14:54:da:7d:d6:13:d7:06:0e:25:6d:0c:53:08:ab:
         32:e3:d8:c3:8f:ca:21:16:58:56:e4:75:eb:2c:9b:6d:e6:ab:
         2e:c7:b4:f3:a8:ea:1d:e2:b6:20:01:2d:de:3d:f1:87:8b:13:
         d7:2e:52:53:7d:a1:f3:a2:62:8a:16:a2:64:53:ef:1e:17:a4:
         14:40:03:21:ed:8d:ef:14:ce:a8:5e:14:b5:ad:39:ab:ad:f9:
         9a:f5:9e:d0:74:88:f3:8b:a1:20:f8:e9:aa:ba:2b:a5:5e:d5:
         f0:93:de:4d:51:08:97:14:de:09:e6:48:68:90:a3:05:a7:b3:
         00:d2:1d:6e:90:a0:0a:e0:ec:64:d0:3d:03:09:75:e4:91:60:
         6b:e2:c5:f8
-----BEGIN CERTIFICATE-----
MIIGGzCCBQOgAwIBAgIDAizKMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDEzMDE5MjY0OFoXDTI1MDYwMjAwMDAwMFowRjERMA8G
A1UEAxMIQTkxN0EyMjAxMTAvBgNVBAUTKDZENUYwNUREMTI2QkZGMzM2QkVGMjI4
MUVDQzc4QUE1NkIwNkEwMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDHD8U8d8ItYBruKaI6wYy/U7D50NFrxCqvzDWZ32GYgay6+A6RGfGJnVxKyaU3
Al7v8sFpQUvaGxFHn9HJr6BS+zXYAXqiEEBI5Ef0EXKk8oFr3g5hu3daO5uOMLSK
rUg2zF/Z5ssGQPKxuqlwW1OhCZLE3P06RJd8VhJ3O/RC6p0JCT2sY6nJHajW7Pd8
rwIt8GwTh1aE/Kp+3b+r9uC+CufKCcbLSqO9y0JmrcMqVFRpC4I3Wnf2+O5cLNKZ
WVtCP0MWFClQvQ1b+WKBcEq+oGgEIwnvCaTiTBTlrUSpp7Wwv7fPFE23Nbl91CNH
jyYrwzDIZzlhtkozomw5FutlAgMBAAGjggMQMIIDDDAdBgNVHQ4EFgQUbV8F3RJr
/zNr7yKB7MeKpWsGoCMwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTdBMjIwLzAwRUUwOEQ2NDEyODExRUE4RTVFNEI4M0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE3QTIyMC8wMEVFMDhENjQxMjgxMUVBOEU1RTRCODNDNEY5QUUwMi9iVjhGM1JK
cl96TnI3eUtCN01lS3BXc0dvQ00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhzhMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAQFQDANBgkq
hkiG9w0BAQsFAAOCAQEATRkGWcB4cb+lnmCuBEtQhMueobD29uFWufu85sqXYKDH
auKlKPLhWB1o2+UiIIQOErf9/z+dLmyHVpr80Oh9elBfnpzgDxBvuhFIfMYqZbHt
CbIkbSLeZlsuDAGnF1Wdmhy56GsD1BF4c1k98rwaFFTafdYT1wYOJW0MUwirMuPY
w4/KIRZYVuR16yybbearLse086jqHeK2IAEt3j3xh4sT1y5SU32h86JiihaiZFPv
HhekFEADIe2N7xTOqF4Uta05q635mvWe0HSI84uhIPjpqrorpV7V8JPeTVEIlxTe
CeZIaJCjBaezANIdbpCgCuDsZNA9Awl15JFga+LF+A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:33:35 2025 by rpki-client