Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybTeSHSWW_87LwRxASJXfm2bHRQ.cer
File:                     ybTeSHSWW_87LwRxASJXfm2bHRQ.cer (raw, json)
Hash identifier:          tbyi5QxDfSmfnPoQ/KzoI/TpHbJ/CnerZf+/LXuqdWU=
Subject key identifier:   C9:B4:DE:48:74:96:5B:FF:3B:2F:04:71:01:22:57:7E:6D:9B:1D:14
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       022CC0
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91B166D/2E7623581B1A11EA97389F77C4F9AE02/ybTeSHSWW_87LwRxASJXfm2bHRQ.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91B166D/2E7623581B1A11EA97389F77C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 30 Jan 2025 18:58:48 +0000
Certificate not after:    Mon 02 Jun 2025 00:00:00 +0000
Subordinate resources:    AS: 138905
                          IP: 103.146.48.0/23
                          IP: 2405:91c0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142528 (0x22cc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan 30 18:58:48 2025 GMT
            Not After : Jun  2 00:00:00 2025 GMT
        Subject: CN=A91B166D/serialNumber=C9B4DE4874965BFF3B2F04710122577E6D9B1D14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:55:de:60:d2:98:12:f9:0c:af:b3:86:db:15:
                    67:86:d0:2b:d6:ce:bd:7c:36:b0:c6:5a:ab:9a:8e:
                    15:86:74:29:af:f5:6f:7a:b9:da:55:cd:a7:35:d1:
                    d6:ba:8d:38:db:d6:6b:3e:ba:81:2f:fa:e5:9f:a9:
                    ee:28:9a:ec:69:b5:8a:72:6b:99:64:b5:66:97:12:
                    10:67:9f:5d:21:4c:1b:3f:19:e7:1d:8b:b2:6a:e8:
                    45:54:95:b1:4a:8d:59:8b:72:3b:80:c8:d1:1b:54:
                    7b:1d:c5:19:b4:ca:3b:20:eb:9a:68:e0:64:5f:1c:
                    7e:f5:5b:a1:16:36:d8:42:f3:03:b2:81:de:ee:e1:
                    af:d5:eb:e3:80:ee:bb:fc:97:ca:38:4c:bd:d6:2b:
                    8e:d2:7a:64:7b:63:99:5c:2b:31:0a:e2:2a:51:20:
                    90:52:e8:04:63:76:0b:56:17:2e:94:56:aa:55:24:
                    0e:ec:d2:6d:af:2d:8c:d8:06:75:75:79:4c:fb:2e:
                    9b:d6:c6:3b:60:36:6d:72:2a:4a:a8:28:12:d5:cd:
                    fb:39:57:8a:dd:fb:38:c9:bf:96:bb:ce:7d:19:03:
                    74:3c:89:ab:5e:11:fe:49:d2:40:dd:77:fb:16:cb:
                    dc:97:8c:ba:00:26:aa:0d:a5:26:73:45:06:43:ad:
                    26:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:B4:DE:48:74:96:5B:FF:3B:2F:04:71:01:22:57:7E:6D:9B:1D:14
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B166D/2E7623581B1A11EA97389F77C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B166D/2E7623581B1A11EA97389F77C4F9AE02/ybTeSHSWW_87LwRxASJXfm2bHRQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  138905

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.48.0/23
                IPv6:
                  2405:91c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c6:0f:09:8e:92:66:05:6c:19:ac:3a:c8:5a:b2:74:9d:09:6e:
         f8:26:bc:f4:32:94:d2:2f:6e:b6:a0:03:f3:de:07:09:08:cf:
         79:f2:c6:52:5c:5d:df:cc:79:03:ab:a5:59:f6:c0:58:0a:81:
         02:7f:14:4f:9c:19:63:ac:2e:09:c8:b6:a8:00:1d:33:4a:64:
         e7:c0:9e:46:9d:65:27:1c:0e:47:55:2d:66:05:98:93:29:b5:
         d5:d0:ac:f3:de:0b:42:63:f2:f9:be:9e:44:24:46:f9:71:0c:
         b2:5d:87:6d:7b:4d:f6:4a:b2:92:9f:6e:4c:7e:f1:94:ce:50:
         1f:fb:02:14:72:ed:58:cf:b8:d8:4e:92:9a:8c:64:9e:24:32:
         dd:8b:ae:bf:b1:48:8f:b1:4d:8d:10:60:bf:49:76:5b:93:09:
         cf:44:4f:9f:6f:0b:2d:e9:40:e1:65:c6:ec:56:39:83:69:d6:
         9b:f5:4b:9a:50:ef:15:02:57:d6:d7:a7:ed:88:a6:75:8f:ee:
         78:c8:1b:c9:6a:ac:82:ff:80:71:6c:b9:a8:68:f1:1b:63:83:
         8e:1b:23:f7:e2:d9:86:1c:c5:fd:69:48:18:b0:ea:93:7d:76:
         ea:32:ae:f9:10:db:6b:d3:e8:5e:67:0a:4a:f2:3b:80:c0:83:
         2e:b0:2a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:34:27 2025 by rpki-client