Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOVO1XJQxhJ0fjyiloU-r5GQWfU.cer
File:                     mOVO1XJQxhJ0fjyiloU-r5GQWfU.cer (raw, json)
Hash identifier:          0HZTN1YeWi9oSqsibpYKRL9CUxw3WVF9yndW5OurJf0=
Subject key identifier:   98:E5:4E:D5:72:50:C6:12:74:7E:3C:A2:96:85:3E:AF:91:90:59:F5
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       022194
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9191989/587414D2863B11EDB57E7C35C4F9AE02/mOVO1XJQxhJ0fjyiloU-r5GQWfU.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9191989/587414D2863B11EDB57E7C35C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 09 Dec 2024 16:46:11 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 137238
                          AS: 150698
                          IP: 103.59.170.0/23
                          IP: 2400:cee0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139668 (0x22194)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec  9 16:46:11 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=A9191989/serialNumber=98E54ED57250C612747E3CA296853EAF919059F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b6:f3:1f:da:ee:b2:6f:3e:3f:46:8e:75:77:
                    76:ba:09:71:37:9e:0b:87:a3:21:27:c0:9c:51:fb:
                    05:f1:5d:6c:c3:61:d6:16:14:fe:da:a2:90:41:b5:
                    70:a9:9d:c6:2a:a9:19:be:5c:00:0a:55:57:c4:88:
                    ac:22:26:c5:11:8b:da:9b:69:ca:17:cf:f0:fc:b4:
                    69:29:7a:70:ab:c4:fc:18:23:dc:d9:fd:2a:38:42:
                    86:0f:a7:7c:c9:75:cc:2e:73:e9:5c:7c:f2:74:09:
                    eb:c5:62:92:d3:cf:ad:dd:fe:f4:47:02:2f:fd:7e:
                    eb:3d:c7:b6:ed:50:35:12:86:8b:47:3f:6f:f6:8c:
                    12:c5:ca:d6:fd:95:96:3a:44:63:ed:36:1f:56:1f:
                    1f:ec:3a:5e:24:7b:5e:e8:62:01:5e:b4:a5:7c:e0:
                    c7:97:8a:f0:e0:f0:a6:f7:78:d2:51:3d:4f:e7:a2:
                    bb:c1:f9:bd:75:b7:5f:dd:3b:cd:dc:98:36:08:d8:
                    88:47:4b:17:be:16:ae:97:cc:59:99:20:f6:d6:a2:
                    f7:5c:8d:b4:0a:64:1d:34:b6:82:34:cc:12:ad:6c:
                    b6:61:39:65:bb:9c:be:10:29:bc:77:7d:9d:a3:ed:
                    fb:f3:f8:27:cf:b5:83:07:35:97:38:eb:52:44:3d:
                    3d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E5:4E:D5:72:50:C6:12:74:7E:3C:A2:96:85:3E:AF:91:90:59:F5
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9191989/587414D2863B11EDB57E7C35C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9191989/587414D2863B11EDB57E7C35C4F9AE02/mOVO1XJQxhJ0fjyiloU-r5GQWfU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137238
                  150698

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.59.170.0/23
                IPv6:
                  2400:cee0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c0:07:af:e5:0b:c5:da:ce:61:12:75:fb:22:0e:5e:44:35:82:
         d4:d0:81:b2:69:11:a1:6b:92:bd:e4:9a:88:02:e0:ab:63:22:
         6c:35:ac:fd:f8:77:3b:98:1b:2d:e4:a4:89:d6:58:c7:5e:0e:
         2b:f9:53:8d:9c:82:a3:0f:4f:6e:dd:b9:24:6d:34:6b:5f:8c:
         d8:6c:c9:57:70:a9:32:82:a8:da:22:a3:d4:db:0e:e1:47:4b:
         b6:6d:a8:97:d4:e2:81:4f:55:65:93:4e:d6:09:47:f8:b5:bc:
         f8:d7:d2:ca:82:cb:44:8c:8b:39:54:90:6b:fb:c1:e2:9d:53:
         0e:b9:6a:12:73:82:aa:0e:5c:ce:ae:60:56:54:ba:94:19:dd:
         93:7e:54:f3:c2:2c:6d:c0:fa:20:52:d8:dd:50:6a:cc:45:4a:
         92:b1:23:0a:30:8e:33:d5:3d:17:b0:62:95:3c:07:35:31:f6:
         ea:d1:e5:b5:0a:93:ec:b0:8d:56:1e:b8:8d:89:50:4a:7e:26:
         da:07:dc:1d:53:9a:45:55:a4:ed:18:60:93:aa:e2:7b:d9:98:
         1f:d1:20:eb:fa:f3:ad:87:bc:5e:42:65:91:1b:c2:20:e0:b3:
         43:d9:13:39:34:58:ca:5e:16:1b:ce:da:ae:c4:51:6e:a1:89:
         e6:98:ff:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----