Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wipR7M5tlu_1Mou8JblTGLTB2i4.cer
File:                     wipR7M5tlu_1Mou8JblTGLTB2i4.cer (raw, json)
Hash identifier:          CS+PntVuzcQM3lbMYtRhg7mEOn5nVWksJMomGX2ejoI=
Subject key identifier:   C2:2A:51:EC:CE:6D:96:EF:F5:32:8B:BC:25:B9:53:18:B4:C1:DA:2E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0228D7
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91D74A6/797E9A86D19C11EF83CEAD3CC4F9AE02/wipR7M5tlu_1Mou8JblTGLTB2i4.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91D74A6/797E9A86D19C11EF83CEAD3CC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 13 Jan 2025 10:52:30 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 133752
                          IP: 43.249.36.0/23
                          IP: 103.161.224.0/23
                          IP: 2001:df1:801::/48
                          IP: 2402:a7c1::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141527 (0x228d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan 13 10:52:30 2025 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=A91D74A6/serialNumber=C22A51ECCE6D96EFF5328BBC25B95318B4C1DA2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:23:09:cf:8c:07:09:02:20:b5:6a:55:73:3b:
                    7f:4d:2d:be:8a:ac:2c:c4:a1:3d:86:71:87:f3:78:
                    ae:9b:c5:70:04:6c:e6:5e:6c:7e:04:a7:fd:fa:64:
                    94:79:85:6f:98:d3:b3:ef:46:af:79:c0:c8:2f:a1:
                    05:23:e5:1d:04:6a:27:98:91:bf:3a:5a:7b:8f:6e:
                    12:7c:9d:69:1c:fa:9c:c5:68:4b:56:0a:72:94:37:
                    b7:3a:17:8b:6e:e0:1b:e9:8c:6e:1a:5c:db:18:d9:
                    d0:e2:e8:55:d0:9f:21:f1:13:d1:39:51:08:15:dc:
                    73:57:62:bf:93:9c:ab:67:1a:bb:ec:06:69:57:d0:
                    2c:12:2e:52:4d:a8:2d:58:cb:a5:fb:81:94:2c:bc:
                    17:f6:37:85:5e:fc:97:7b:74:50:26:99:11:cd:4d:
                    cf:a2:70:1e:a0:33:5b:5b:4c:1f:42:b9:f1:d9:eb:
                    13:7c:6a:23:b0:4b:f0:22:e1:d0:b5:d2:4a:ec:7e:
                    90:1e:1a:d5:ab:4a:7c:18:7b:4b:10:8c:e4:60:61:
                    49:2b:91:3b:46:d9:9a:cc:46:f8:04:87:3d:c3:37:
                    43:b4:92:6c:3c:2c:b5:7d:23:e1:67:36:da:64:7f:
                    53:d2:45:39:08:ad:30:29:fa:57:f7:85:9a:f1:48:
                    31:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:2A:51:EC:CE:6D:96:EF:F5:32:8B:BC:25:B9:53:18:B4:C1:DA:2E
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D74A6/797E9A86D19C11EF83CEAD3CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D74A6/797E9A86D19C11EF83CEAD3CC4F9AE02/wipR7M5tlu_1Mou8JblTGLTB2i4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  133752

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.249.36.0/23
                  103.161.224.0/23
                IPv6:
                  2001:df1:801::/48
                  2402:a7c1::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:b7:3e:38:5b:8a:d1:14:40:b6:33:8c:2b:6d:8a:e6:a2:e9:
         47:f1:15:7d:3a:ff:32:c5:88:23:cd:98:17:58:60:e3:79:68:
         12:96:40:78:10:63:4e:cf:49:1a:af:d2:9f:8b:28:54:9e:1f:
         31:5d:f0:3e:40:6f:93:54:71:0a:70:b7:9f:c6:92:72:f7:bb:
         eb:18:d3:0b:96:e9:97:ef:32:e8:21:8c:84:1d:6a:2b:76:bb:
         aa:53:da:fd:dd:8f:c2:5d:46:ee:e5:83:1e:92:02:5b:e2:44:
         5b:39:7c:47:03:64:0d:e6:f1:d3:8c:a7:3d:54:0d:8a:33:7b:
         90:21:5a:9a:fb:b3:2e:d4:89:69:00:07:82:cd:be:23:0e:a7:
         3f:60:62:ba:a2:b5:e2:55:4e:87:e3:44:3a:c0:8f:71:31:6d:
         65:02:c5:2e:13:6a:8b:d1:07:8f:f8:b9:40:2a:64:12:55:85:
         c9:c7:f1:87:98:5e:8b:ca:90:1d:f6:cd:ca:3d:65:4a:04:d7:
         16:74:62:56:ae:78:c5:aa:1b:21:84:4a:f5:ba:e4:84:c0:9e:
         f4:53:19:77:84:04:4a:3d:81:84:67:21:15:d6:1b:9a:2b:a5:
         23:ad:6c:69:45:11:40:19:a3:4c:90:d9:c5:ce:cd:50:e4:60:
         8d:6f:95:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:27:58 2025 by rpki-client