Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.cer
File:                     bhhL4UYS1aK1PEmHaERQhQ2wLHQ.cer (raw, json)
Hash identifier:          CRJd8Ol1bS94IVi0BT9DncV6YhIuP6jb/vZlManC8NI=
Subject key identifier:   6E:18:4B:E1:46:12:D5:A2:B5:3C:49:87:68:44:50:85:0D:B0:2C:74
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       022CC6
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A916B232/94D4C7403F0D11EBAF1FCE22C4F9AE02/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A916B232/94D4C7403F0D11EBAF1FCE22C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 30 Jan 2025 19:20:14 +0000
Certificate not after:    Mon 02 Jun 2025 00:00:00 +0000
Subordinate resources:    AS: 141462
                          IP: 103.159.186.0/23
                          IP: 2001:df5:8b80::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142534 (0x22cc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan 30 19:20:14 2025 GMT
            Not After : Jun  2 00:00:00 2025 GMT
        Subject: CN=A916B232/serialNumber=6E184BE14612D5A2B53C4987684450850DB02C74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f1:b6:2c:20:2b:0f:77:ed:69:5a:b1:be:c1:
                    91:5f:18:ba:89:b5:22:b1:3e:c7:86:40:82:e4:10:
                    7c:ea:02:0f:13:5b:8e:e5:08:45:2d:52:bd:e5:9f:
                    fc:05:f1:fb:e3:ac:41:6a:22:96:1b:10:4c:19:c7:
                    f7:30:d1:df:89:6b:bc:3d:2f:45:c7:53:81:f4:c3:
                    6b:9e:35:23:d2:5f:f1:44:3c:d3:24:ed:cf:d7:e3:
                    4a:12:60:ad:ea:3b:13:27:8a:46:86:ef:38:d0:27:
                    ce:86:88:37:be:49:a3:7b:49:6d:2a:f9:d7:05:f7:
                    32:21:3b:26:50:96:f3:31:d0:29:72:17:6c:4d:05:
                    92:5e:70:62:e6:03:18:4f:47:fd:12:5b:c3:ab:9e:
                    e5:1a:19:ee:1d:08:06:e1:f1:a5:29:6b:8f:a6:5f:
                    67:78:75:4b:80:04:60:f3:92:e0:91:86:e2:c9:07:
                    ea:72:9c:bb:77:44:ea:68:f7:be:12:0b:ca:c0:41:
                    9b:73:15:7f:08:be:c3:ec:1f:8b:55:9f:7d:32:af:
                    7b:3e:f9:35:d7:05:64:44:21:f9:9f:db:11:7b:51:
                    4d:ec:07:47:6c:45:32:0d:54:ca:e2:9f:0f:7b:3d:
                    9a:5b:8f:08:1d:66:70:8e:b6:46:bb:cf:e2:cc:ca:
                    18:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:18:4B:E1:46:12:D5:A2:B5:3C:49:87:68:44:50:85:0D:B0:2C:74
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916B232/94D4C7403F0D11EBAF1FCE22C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916B232/94D4C7403F0D11EBAF1FCE22C4F9AE02/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  141462

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.186.0/23
                IPv6:
                  2001:df5:8b80::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:b6:93:f8:55:3a:d8:f6:2a:84:0a:7f:27:07:51:38:c9:c5:
         ef:b3:62:7d:da:28:a2:c7:7c:d2:06:f5:75:21:e1:3d:33:c9:
         56:6e:8e:73:7d:7a:af:e9:d9:9f:6b:7f:ca:af:4d:23:c2:7b:
         72:35:f6:c4:8e:99:a2:e3:3e:a2:62:a1:8a:0f:12:6d:67:87:
         71:45:0f:07:62:ca:2f:38:37:34:99:bd:58:7b:51:62:92:c5:
         43:26:a5:f6:37:26:7e:a1:1c:b1:c2:da:c6:f2:43:57:66:b9:
         24:65:a6:88:37:af:21:e8:4c:a6:72:49:76:c1:b0:32:b9:45:
         81:be:4d:eb:26:60:3b:f5:34:1b:5b:ae:f7:fb:8a:b4:61:b3:
         8c:e0:c8:3f:08:69:58:5c:f4:81:c5:d0:c0:58:4d:5c:b5:0f:
         ae:c7:64:f7:32:a1:04:35:9a:98:37:a9:fe:f6:3e:fd:4f:c0:
         03:fd:b9:1f:fb:c0:ea:13:8e:94:79:10:3c:1e:63:7a:43:c0:
         7a:91:06:f0:90:1d:5b:2d:53:47:bc:b7:bd:70:1a:de:72:ae:
         b1:30:84:04:46:23:49:99:4b:db:76:fb:58:de:c5:86:aa:d9:
         18:58:ea:ef:09:f4:c2:1c:4b:99:5a:3a:b7:1b:b1:75:cd:53:
         2f:cc:ac:06
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAizGMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDEzMDE5MjAxNFoXDTI1MDYwMjAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNkIyMzIxMTAvBgNVBAUTKDZFMTg0QkUxNDYxMkQ1QTJCNTNDNDk4
NzY4NDQ1MDg1MERCMDJDNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC18bYsICsPd+1pWrG+wZFfGLqJtSKxPseGQILkEHzqAg8TW47lCEUtUr3ln/wF
8fvjrEFqIpYbEEwZx/cw0d+Ja7w9L0XHU4H0w2ueNSPSX/FEPNMk7c/X40oSYK3q
OxMnikaG7zjQJ86GiDe+SaN7SW0q+dcF9zIhOyZQlvMx0ClyF2xNBZJecGLmAxhP
R/0SW8OrnuUaGe4dCAbh8aUpa4+mX2d4dUuABGDzkuCRhuLJB+pynLt3ROpo974S
C8rAQZtzFX8IvsPsH4tVn30yr3s++TXXBWREIfmf2xF7UU3sB0dsRTINVMrinw97
PZpbjwgdZnCOtka7z+LMyhj/AgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUbhhL4UYS
1aK1PEmHaERQhQ2wLHQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTZCMjMyLzk0RDRDNzQwM0YwRDExRUJBRjFGQ0UyMkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE2QjIzMi85NEQ0Qzc0MDNGMEQxMUVCQUYxRkNFMjJDNEY5QUUwMi9iaGhMNFVZ
UzFhSzFQRW1IYUVSUWhRMndMSFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAiiWMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ5+6MA8EAgAC
MAkDBwAgAQ31i4AwDQYJKoZIhvcNAQELBQADggEBAIO2k/hVOtj2KoQKfycHUTjJ
xe+zYn3aKKLHfNIG9XUh4T0zyVZujnN9eq/p2Z9rf8qvTSPCe3I19sSOmaLjPqJi
oYoPEm1nh3FFDwdiyi84NzSZvVh7UWKSxUMmpfY3Jn6hHLHC2sbyQ1dmuSRlpog3
ryHoTKZySXbBsDK5RYG+TesmYDv1NBtbrvf7irRhs4zgyD8IaVhc9IHF0MBYTVy1
D67HZPcyoQQ1mpg3qf72Pv1PwAP9uR/7wOoTjpR5EDweY3pDwHqRBvCQHVstU0e8
t71wGt5yrrEwhARGI0mZS9t2+1jexYaq2RhY6u8J9MIcS5laOrcbsXXNUy/MrAY=
-----END CERTIFICATE-----