Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eX36GIOfh9ExDpypw0EKvraDnnQ.cer
File:                     eX36GIOfh9ExDpypw0EKvraDnnQ.cer (raw, json)
Hash identifier:          k8qBYi7XIDSu/LT2hLc68geyFsLXqtsiaTrS/8x29B8=
Subject key identifier:   79:7D:FA:18:83:9F:87:D1:31:0E:9C:A9:C3:41:0A:BE:B6:83:9E:74
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       022D36
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 31 Jan 2025 14:49:08 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 149309
                          IP: 103.178.190.0/23
                          IP: 2001:df0:3cc0::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142646 (0x22d36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan 31 14:49:08 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=A9167F52/serialNumber=797DFA18839F87D1310E9CA9C3410ABEB6839E74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d6:29:3d:2b:f6:dc:fb:c1:0b:91:f3:6c:3c:
                    67:87:c2:2b:98:d0:84:34:98:24:f6:e5:0b:e2:c6:
                    a5:7b:ec:3f:a0:05:fe:f9:72:7b:4a:26:1a:72:76:
                    bb:e3:9a:53:d9:42:74:50:09:fe:cc:a4:1d:d9:11:
                    5f:1d:7a:21:d4:5d:7c:11:63:bd:ce:27:bf:b2:29:
                    eb:e5:57:ac:bf:09:10:cc:1d:d4:ff:f7:63:fd:da:
                    b1:56:e8:7a:e6:fd:6f:80:15:1b:66:cb:ea:06:76:
                    61:fd:d3:76:6e:4d:48:40:57:79:8d:77:91:07:27:
                    ab:0d:dd:b7:80:39:e7:7f:29:20:62:f3:09:8e:8c:
                    1d:ef:73:07:ce:7c:d9:ac:6c:9e:97:19:ac:0f:0f:
                    62:26:b1:d3:1d:e3:bb:a5:2f:ca:7b:6c:c9:2f:55:
                    4d:0f:5e:bd:bb:75:d9:82:45:30:34:e0:8b:4f:44:
                    c9:12:79:57:cc:ef:f2:79:0f:c6:18:35:1a:32:86:
                    f1:53:45:19:bf:0e:44:4c:f4:a2:bb:eb:b7:ea:ca:
                    9e:49:c9:4b:35:14:88:af:ef:37:17:c0:b8:29:dd:
                    13:95:15:e9:00:51:b7:bd:d7:09:48:c6:6d:d6:0f:
                    5d:75:c3:21:67:c6:9d:ba:80:c0:77:bd:d2:d1:0b:
                    03:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:7D:FA:18:83:9F:87:D1:31:0E:9C:A9:C3:41:0A:BE:B6:83:9E:74
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  149309

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.190.0/23
                IPv6:
                  2001:df0:3cc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         b7:1e:a2:64:73:42:90:47:63:2a:21:ea:59:38:63:a2:32:46:
         53:66:c7:0d:42:82:b4:60:7e:0c:2d:c0:0a:5c:44:27:e3:a7:
         1b:dd:b5:19:9b:b0:d6:4c:19:c7:b3:e0:a0:fe:d3:16:31:1c:
         64:80:99:6b:bd:61:63:ee:f1:4d:87:32:54:f8:bd:be:89:61:
         0d:89:fa:db:64:b2:66:47:e0:7f:44:db:36:31:d5:b6:5d:00:
         a0:a8:97:0c:be:e7:cd:86:b0:71:6d:5b:84:83:bc:6a:4c:c3:
         2d:b7:d8:82:d2:cd:ad:70:c1:6b:68:f2:d2:f7:bb:97:6a:64:
         2b:a1:50:a5:21:9f:53:22:88:91:24:55:4d:c3:4a:63:4e:5f:
         1c:8b:3a:c9:50:eb:63:f0:fa:70:c3:d4:6c:8f:d2:40:5f:0b:
         c6:32:d1:e6:3d:b7:51:da:16:ac:45:be:e3:42:15:6c:7a:94:
         53:f7:da:c4:f0:15:7b:19:d9:32:9b:8a:db:84:32:fd:90:02:
         f2:56:02:ad:0d:1e:b2:de:9f:ec:8d:57:39:5b:6c:e7:59:80:
         09:13:0b:93:99:3f:86:74:51:9e:7e:21:bd:a3:72:94:d7:0c:
         bb:60:73:ac:6d:2f:18:88:e5:51:4f:e8:89:9e:1f:19:c8:eb:
         81:34:04:96
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----