Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYBzCYrwOW_Y4zCaG5-28-6xeuc.cer
File:                     cYBzCYrwOW_Y4zCaG5-28-6xeuc.cer (raw, json)
Hash identifier:          O+zOJY/wx/fghDdNUn4L1ODNMmgAQqgunW5FSKyBlMI=
Subject key identifier:   71:80:73:09:8A:F0:39:6F:D8:E3:30:9A:1B:9F:B6:F3:EE:B1:7A:E7
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       022CA7
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 30 Jan 2025 17:52:58 +0000
Certificate not after:    Mon 02 Jun 2025 00:00:00 +0000
Subordinate resources:    AS: 55303
                          IP: 103.154.44.0/23
                          IP: 183.182.64.0/20
                          IP: 2401:cf80::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142503 (0x22ca7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan 30 17:52:58 2025 GMT
            Not After : Jun  2 00:00:00 2025 GMT
        Subject: CN=A917174E/serialNumber=718073098AF0396FD8E3309A1B9FB6F3EEB17AE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:76:70:a3:c3:3c:32:ae:1f:ec:1c:e4:e8:fa:
                    14:25:01:fe:92:fa:b6:bc:9d:a3:5b:dc:e1:ad:15:
                    98:5b:33:d9:97:9d:1c:e2:89:05:61:7e:75:d0:4b:
                    8e:93:d3:d2:c1:ae:0b:59:16:c3:20:4d:07:30:77:
                    a6:01:27:2d:a5:fd:92:cf:34:d3:06:b0:a0:1a:b3:
                    a0:1e:07:33:26:d2:e8:0e:af:3e:f9:f1:f5:c9:4c:
                    70:12:b4:8c:52:a7:86:e3:8c:85:cc:98:8f:3b:09:
                    f2:23:8b:d1:d7:ad:1e:41:77:ad:55:c3:d2:af:72:
                    43:3a:cd:b3:2c:b2:c0:56:81:bc:fb:19:99:cb:fb:
                    0a:1c:0e:68:fe:5f:47:c5:bd:0b:e7:fb:8a:6f:59:
                    b6:8b:4b:52:e1:1a:de:8b:ed:63:c7:25:51:b7:4d:
                    13:fb:ec:bd:e8:ce:b0:ab:d2:02:66:ad:88:45:bd:
                    ab:1e:f5:7c:61:af:c9:5a:e3:5c:a8:38:24:d0:9d:
                    a1:d9:79:b1:d0:e0:5d:9b:39:3d:8e:64:49:c3:f7:
                    33:83:61:4c:e3:b0:8b:87:cf:f3:c2:bd:b1:28:16:
                    26:dd:0b:e7:72:8f:43:62:12:4f:25:9f:df:15:12:
                    e1:82:b2:01:ab:95:fb:9b:29:65:3a:29:3e:20:8e:
                    53:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:80:73:09:8A:F0:39:6F:D8:E3:30:9A:1B:9F:B6:F3:EE:B1:7A:E7
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  55303

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.44.0/23
                  183.182.64.0/20
                IPv6:
                  2401:cf80::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:ed:83:c2:d5:93:94:27:54:bc:28:0f:5e:d2:f1:93:de:64:
         d7:a3:bf:63:a9:67:df:1f:a5:61:89:96:93:67:aa:53:e9:ae:
         5b:80:fa:50:e9:43:57:32:12:c6:ed:cf:62:97:cb:f9:67:2f:
         47:d3:a0:4d:f3:8f:47:b6:d8:f4:62:c2:9c:ae:e1:20:5f:e0:
         88:70:c7:f3:13:5e:c5:b5:13:1a:8c:56:50:77:27:6e:87:56:
         18:f5:86:db:c8:90:7c:24:cf:72:b7:c1:b8:6c:34:4b:18:09:
         0b:56:e4:ab:78:c7:a4:26:cf:9e:d0:cb:6a:04:6d:de:a3:7f:
         b1:69:4f:cf:53:19:7e:db:73:5e:a4:76:a2:60:94:b8:be:84:
         af:49:9a:69:e2:13:6c:91:6a:0a:1e:44:6b:4d:03:4e:d8:d0:
         6d:c7:ad:fc:ae:38:2c:6d:24:aa:08:c1:c8:5b:f6:d8:3f:7c:
         30:4e:32:a4:12:b3:31:02:2b:37:a3:98:2f:22:e3:bc:b9:9e:
         f5:dc:96:e9:66:63:f2:93:2d:5c:4e:e0:eb:c9:80:06:81:df:
         00:03:1f:1d:01:cc:40:15:c6:12:c4:9d:d1:5f:2d:d9:dd:0d:
         d6:c7:d4:a0:22:89:2c:71:e1:11:6f:fa:27:87:eb:9b:27:1d:
         ad:11:69:ec
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIDAiynMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDEzMDE3NTI1OFoXDTI1MDYwMjAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNzE3NEUxMTAvBgNVBAUTKDcxODA3MzA5OEFGMDM5NkZEOEUzMzA5
QTFCOUZCNkYzRUVCMTdBRTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCgdnCjwzwyrh/sHOTo+hQlAf6S+ra8naNb3OGtFZhbM9mXnRziiQVhfnXQS46T
09LBrgtZFsMgTQcwd6YBJy2l/ZLPNNMGsKAas6AeBzMm0ugOrz758fXJTHAStIxS
p4bjjIXMmI87CfIji9HXrR5Bd61Vw9KvckM6zbMsssBWgbz7GZnL+wocDmj+X0fF
vQvn+4pvWbaLS1LhGt6L7WPHJVG3TRP77L3ozrCr0gJmrYhFvase9Xxhr8la41yo
OCTQnaHZebHQ4F2bOT2OZEnD9zODYUzjsIuHz/PCvbEoFibdC+dyj0NiEk8ln98V
EuGCsgGrlfubKWU6KT4gjlPDAgMBAAGjggMkMIIDIDAdBgNVHQ4EFgQUcYBzCYrw
OW/Y4zCaG5+28+6xeucwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTcxNzRFLzU0QUExNDlDQUFGNjExRTk5QzVFRTI1OUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE3MTc0RS81NEFBMTQ5Q0FBRjYxMUU5OUM1RUUyNTlDNEY5QUUwMi9jWUJ6Q1ly
d09XX1k0ekNhRzUtMjgtNnhldWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDANgHMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBZ5osAwQEt7ZA
MA0EAgACMAcDBQAkAc+AMA0GCSqGSIb3DQEBCwUAA4IBAQAL7YPC1ZOUJ1S8KA9e
0vGT3mTXo79jqWffH6VhiZaTZ6pT6a5bgPpQ6UNXMhLG7c9il8v5Zy9H06BN849H
ttj0YsKcruEgX+CIcMfzE17FtRMajFZQdyduh1YY9YbbyJB8JM9yt8G4bDRLGAkL
VuSreMekJs+e0MtqBG3eo3+xaU/PUxl+23NepHaiYJS4voSvSZpp4hNskWoKHkRr
TQNO2NBtx638rjgsbSSqCMHIW/bYP3wwTjKkErMxAis3o5gvIuO8uZ713JbpZmPy
ky1cTuDryYAGgd8AAx8dAcxAFcYSxJ3RXy3Z3Q3Wx9SgIoksceERb/onh+ubJx2t
EWns
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:35:15 2025 by rpki-client