Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer
File:                     czPiYYsz1lD-GNg_eCVFwj1PWp4.cer (raw, json)
Hash identifier:          l2Xzjw8H8tlgAMIEo0nkR70XEb13EZ2GZLHWuWMOpjg=
Subject key identifier:   73:33:E2:61:8B:33:D6:50:FE:18:D8:3F:78:25:45:C2:3D:4F:5A:9E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       022CB6
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 30 Jan 2025 18:28:38 +0000
Certificate not after:    Mon 02 Jun 2025 00:00:00 +0000
Subordinate resources:    AS: 134841
                          IP: 103.203.92.0/22
                          IP: 2407:2680::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142518 (0x22cb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan 30 18:28:38 2025 GMT
            Not After : Jun  2 00:00:00 2025 GMT
        Subject: CN=A918098B/serialNumber=7333E2618B33D650FE18D83F782545C23D4F5A9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9c:db:df:e8:e9:78:25:52:ee:61:9c:a0:79:
                    b7:6e:56:1c:5d:3c:31:25:d6:7d:02:ed:10:3a:6f:
                    2d:68:1b:83:a4:5e:14:54:9b:77:26:c6:00:15:83:
                    16:4f:29:77:dd:3e:2c:77:58:41:24:ef:05:18:9e:
                    2a:4c:1e:0d:f0:e9:6e:71:a2:e6:23:56:7f:87:11:
                    82:3d:79:70:6d:20:8a:1c:e0:0f:87:4b:5b:e1:13:
                    23:a3:0f:c3:01:63:a8:e2:9e:94:98:f8:a0:c6:24:
                    bb:f7:be:7c:24:1d:93:fd:65:91:38:eb:dc:3a:3c:
                    0e:2d:f3:d9:b1:be:f9:ef:71:68:0a:40:e8:c0:84:
                    c9:a0:fe:f8:c6:aa:31:4b:f6:24:c2:c3:c5:20:f5:
                    04:dd:c0:d4:06:c6:58:bb:be:ec:07:65:a2:40:5f:
                    76:bb:f6:91:ab:7c:a8:1d:af:cd:34:fa:73:d2:64:
                    83:1d:91:76:0b:4b:79:a3:f7:84:3b:5e:71:3a:91:
                    6b:9d:d3:ac:26:17:af:e8:4f:37:03:1e:c7:91:e3:
                    84:49:e5:c9:b1:ae:4b:69:97:e7:95:ef:35:4c:89:
                    55:96:e3:7a:21:04:f5:af:5b:a9:02:3f:3f:61:19:
                    40:ba:14:f9:ee:f3:56:39:0b:77:c0:0e:a7:be:c3:
                    4e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:33:E2:61:8B:33:D6:50:FE:18:D8:3F:78:25:45:C2:3D:4F:5A:9E
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  134841

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.203.92.0/22
                IPv6:
                  2407:2680::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:3a:de:ab:d4:8d:4d:b6:aa:aa:ad:b1:95:46:13:fd:6d:50:
         61:d4:c2:e6:40:59:31:bd:c1:0e:c8:0b:87:90:09:60:a8:99:
         49:36:68:bf:57:98:9a:0e:44:8d:19:49:4c:1a:46:08:52:8c:
         ff:93:1d:46:0d:e2:23:a7:2e:9f:92:2f:88:d9:fb:7b:69:38:
         6d:64:4a:fb:a8:7c:c1:42:4a:57:7f:0c:76:72:8b:50:63:97:
         a1:33:54:4c:49:84:69:8e:30:28:d4:38:68:44:46:08:d2:45:
         79:27:1b:bf:0c:b5:62:89:d0:04:48:2d:5a:6e:0f:9e:9b:3f:
         f7:f1:e0:7a:1c:fb:f8:dc:20:87:a5:4e:74:aa:fd:a2:79:9b:
         2d:9a:5c:2a:bd:2c:e6:fe:80:99:bb:4f:a7:00:cb:ec:68:5a:
         e7:8d:19:b8:29:4c:b9:3d:77:2f:38:b3:fe:4b:b9:01:20:45:
         fd:3a:19:5f:c3:28:b6:e7:d7:2b:5f:50:b7:6d:6c:02:3b:e6:
         5c:8d:80:68:65:7a:24:af:57:fe:3d:85:06:19:bc:af:3b:25:
         5c:83:3f:fd:7d:c5:6c:86:03:f7:a7:73:2f:12:94:07:2a:1b:
         de:81:2b:16:19:ea:73:38:78:cd:1b:c8:e8:18:85:12:d7:0f:
         13:75:3d:1a
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAiy2MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDEzMDE4MjgzOFoXDTI1MDYwMjAwMDAwMFowRjERMA8G
A1UEAxMIQTkxODA5OEIxMTAvBgNVBAUTKDczMzNFMjYxOEIzM0Q2NTBGRTE4RDgz
Rjc4MjU0NUMyM0Q0RjVBOUUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDZnNvf6Ol4JVLuYZygebduVhxdPDEl1n0C7RA6by1oG4OkXhRUm3cmxgAVgxZP
KXfdPix3WEEk7wUYnipMHg3w6W5xouYjVn+HEYI9eXBtIIoc4A+HS1vhEyOjD8MB
Y6jinpSY+KDGJLv3vnwkHZP9ZZE469w6PA4t89mxvvnvcWgKQOjAhMmg/vjGqjFL
9iTCw8Ug9QTdwNQGxli7vuwHZaJAX3a79pGrfKgdr800+nPSZIMdkXYLS3mj94Q7
XnE6kWud06wmF6/oTzcDHseR44RJ5cmxrktpl+eV7zVMiVWW43ohBPWvW6kCPz9h
GUC6FPnu81Y5C3fADqe+w05pAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUczPiYYsz
1lD+GNg/eCVFwj1PWp4wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTgwOThCL0FDREQ0MjU0MDM4QjExRUE5NzFCNDA0MkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE4MDk4Qi9BQ0RENDI1NDAzOEIxMUVBOTcxQjQwNDJDNEY5QUUwMi9jelBpWVlz
ejFsRC1HTmdfZUNWRndqMVBXcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAg65MC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZ8tcMA0EAgAC
MAcDBQAkByaAMA0GCSqGSIb3DQEBCwUAA4IBAQApOt6r1I1NtqqqrbGVRhP9bVBh
1MLmQFkxvcEOyAuHkAlgqJlJNmi/V5iaDkSNGUlMGkYIUoz/kx1GDeIjpy6fki+I
2ft7aThtZEr7qHzBQkpXfwx2cotQY5ehM1RMSYRpjjAo1DhoREYI0kV5Jxu/DLVi
idAESC1abg+emz/38eB6HPv43CCHpU50qv2ieZstmlwqvSzm/oCZu0+nAMvsaFrn
jRm4KUy5PXcvOLP+S7kBIEX9Ohlfwyi259crX1C3bWwCO+ZcjYBoZXokr1f+PYUG
GbyvOyVcgz/9fcVshgP3p3MvEpQHKhvegSsWGepzOHjNG8joGIUS1w8TdT0a
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:34:23 2025 by rpki-client