Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer
File:                     c72yoCvL7DyQAPZfcFyW6AgOlzA.cer (raw, json)
Hash identifier:          pg44YxbMSnN1UCClQcW158a9g6bB9ysC7Hv4IXYsHLs=
Subject key identifier:   73:BD:B2:A0:2B:CB:EC:3C:90:00:F6:5F:70:5C:96:E8:08:0E:97:30
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       022674
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:04:18 +0000
Certificate not after:    Thu 01 May 2025 00:00:00 +0000
Subordinate resources:    AS: 152163
                          IP: 36.50.116.0/23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140916 (0x22674)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan  1 01:04:18 2025 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=A91F34BF/serialNumber=73BDB2A02BCBEC3C9000F65F705C96E8080E9730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:74:96:bb:ef:a4:3e:9b:84:21:13:4d:18:8a:
                    0d:8b:a2:c1:1d:21:de:9e:29:52:fd:46:1c:da:3f:
                    3d:8f:d5:31:42:64:1d:98:0e:29:fa:d1:5e:f4:0e:
                    ac:e0:a8:3d:98:fd:4c:13:9e:93:19:54:cd:7b:2c:
                    0a:8e:b2:a8:e1:72:52:d7:a8:c5:7e:71:a5:0d:54:
                    97:f4:a5:e5:14:f5:d0:39:65:99:4b:30:2b:3d:71:
                    d5:81:ee:9d:e9:10:26:2c:0b:e2:c7:77:81:21:d8:
                    00:6a:fc:9e:6f:fe:ce:8d:5c:e6:69:f8:0c:79:96:
                    bd:0a:36:6f:3c:24:ac:9c:fe:60:2d:47:39:fd:c5:
                    c7:dd:6e:f9:97:3b:cc:b3:4b:27:1f:3b:3c:c4:10:
                    3b:8c:00:f8:08:81:af:2f:cb:85:bb:ec:d6:ac:ac:
                    87:ca:e5:44:85:83:a6:58:97:f2:ff:01:2d:98:2f:
                    a0:00:38:40:84:ee:00:1f:e1:70:af:ba:25:41:61:
                    ff:54:f2:18:be:9c:79:86:26:6b:08:29:ce:af:42:
                    20:d7:8a:4b:fa:82:08:3e:42:b0:b1:64:0b:4c:e3:
                    77:70:8b:0c:d5:36:08:f1:2e:e4:35:8c:17:66:2c:
                    14:fd:33:98:8b:b8:8a:95:ad:68:44:bd:af:c1:1d:
                    95:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:BD:B2:A0:2B:CB:EC:3C:90:00:F6:5F:70:5C:96:E8:08:0E:97:30
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  152163

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bf:96:d0:77:d7:f4:37:97:da:2f:5e:e1:99:ad:a9:14:af:6e:
         aa:a9:15:1d:bd:8c:67:eb:60:6c:ad:d7:b2:36:b7:15:4e:3b:
         b8:85:c8:ad:16:72:06:fe:c7:a5:fb:d4:26:02:26:e4:e0:b9:
         e6:25:54:23:7c:1f:67:f0:d5:45:ae:88:67:0c:dc:a4:8b:da:
         5c:2f:0e:69:45:35:ad:ce:8d:16:73:a3:b4:e3:0e:2d:44:62:
         a2:89:89:fc:15:6b:46:49:33:75:81:09:64:41:56:7a:60:ed:
         a5:7f:77:12:f7:d0:13:04:29:db:b0:ed:e3:8c:82:54:c7:47:
         49:ab:89:28:11:35:77:f3:d1:66:fb:47:55:e6:5a:16:59:9f:
         87:c3:91:4d:c5:c4:cc:ab:87:f5:de:9e:0c:2d:9a:f9:f0:c5:
         70:51:b4:86:7a:f3:60:51:ac:c6:be:ad:c2:b0:4e:6e:0d:94:
         fa:1a:28:47:70:e6:67:97:6d:02:7a:60:91:67:b8:31:3e:95:
         e1:99:19:80:38:28:7f:3b:b7:09:c4:6e:ac:4b:64:8b:43:f0:
         bd:96:89:20:28:ba:ec:12:e1:03:01:93:6f:40:0d:2b:a4:bc:
         5d:cb:e4:75:86:d4:e0:40:3e:b1:5b:43:cc:87:29:a1:2e:2c:
         e9:f2:3f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:17:30 2025 by rpki-client