Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/02236913B46A9003C0645E6CC858EA54D6D7F4AC.cer
File:                     02236913B46A9003C0645E6CC858EA54D6D7F4AC.cer (raw, json)
Hash identifier:          NxBIftMm6rzrhIKKHIomNovPgipbu6Qoqd2V+YsyOH0=
Subject key identifier:   02:23:69:13:B4:6A:90:03:C0:64:5E:6C:C8:58:EA:54:D6:D7:F4:AC
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       57CF8F197CA206D4F8EDEAE899A9103BA14ACFF3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Tue 21 Jan 2025 11:57:54 +0000
Certificate not after:    Tue 20 Jan 2026 12:02:54 +0000
Subordinate resources:    IP: 103.83.176.0/23
                          IP: 2001:df7:f200::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:cf:8f:19:7c:a2:06:d4:f8:ed:ea:e8:99:a9:10:3b:a1:4a:cf:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000
        Validity
            Not Before: Jan 21 11:57:54 2025 GMT
            Not After : Jan 20 12:02:54 2026 GMT
        Subject: CN=02236913B46A9003C0645E6CC858EA54D6D7F4AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2f:95:9f:ad:ce:18:94:d3:db:e6:f2:dc:eb:
                    e4:8a:1a:86:20:34:cb:40:31:59:fe:5f:0f:05:33:
                    a1:0f:a3:14:7a:51:92:d1:18:73:5e:e1:3d:1b:66:
                    6b:f2:f4:f4:b5:62:f5:25:0d:58:d6:64:6a:50:1a:
                    59:cf:e1:c7:d9:56:2b:36:b7:d1:b1:60:2d:cc:94:
                    c9:d9:82:55:3a:0c:a4:0a:9e:91:02:da:74:7b:c0:
                    6c:fe:ca:e0:76:03:ff:d7:c7:ab:f4:42:26:b9:38:
                    d2:39:16:a6:ce:53:54:ea:53:0c:d8:9e:53:46:fe:
                    3f:f4:52:0b:6e:b0:d9:df:23:bc:5d:54:1c:c2:8f:
                    0e:f0:bf:f7:4e:65:24:bc:e4:19:59:9c:46:83:75:
                    1d:ec:e3:a7:35:28:69:fb:cb:c2:71:86:c4:fb:fe:
                    8a:67:63:89:8c:1f:6c:ab:d2:8a:e5:90:58:08:5d:
                    c9:5a:0f:56:e8:86:44:1e:42:ba:7f:34:24:88:5d:
                    a5:59:9a:41:72:a9:e7:30:1d:98:cd:c8:c0:5e:41:
                    53:95:e0:94:d2:c6:73:c4:a4:27:d5:e4:41:c5:07:
                    2e:cc:be:36:13:f5:df:bd:3e:e3:ba:73:fa:ee:d4:
                    7d:a4:a9:92:a0:ca:fd:eb:1e:15:f8:c4:3d:33:9d:
                    60:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                02:23:69:13:B4:6A:90:03:C0:64:5E:6C:C8:58:EA:54:D6:D7:F4:AC
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.176.0/23
                IPv6:
                  2001:df7:f200::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:89:7c:fd:a4:70:1a:32:e8:d1:0f:ff:43:d9:5f:f8:44:d5:
         35:06:30:f5:af:4f:62:94:2a:4d:f6:39:6b:09:40:89:60:2b:
         95:5c:2e:04:c1:20:24:d6:37:80:d1:65:7b:5d:a5:af:2e:74:
         21:f9:ac:a8:bf:a4:3a:33:58:a8:aa:95:1d:fe:c6:93:6e:2d:
         4c:94:de:c2:a3:00:b9:6e:31:4f:19:99:cf:db:97:70:64:80:
         df:f1:57:04:dd:94:3c:d8:99:ac:55:4e:5a:ab:6c:70:1e:a2:
         f5:b8:a2:71:9e:49:fb:f4:bc:a2:69:f4:1b:c1:e6:1b:1e:df:
         56:08:03:c5:65:4e:bc:be:21:da:87:7b:27:31:47:df:55:17:
         eb:ad:ae:49:92:6d:97:4f:3e:53:a8:c8:95:9d:48:43:4f:c8:
         e1:9f:e8:92:5c:a5:e9:1c:7a:8c:5e:16:79:de:d4:25:24:4e:
         6f:d2:36:16:ee:3f:45:e6:d0:11:8f:26:9e:87:03:d4:7f:71:
         da:a2:5b:2c:30:33:39:d7:45:31:61:9b:14:50:3e:c2:3c:70:
         6b:d6:2a:54:0e:ed:d2:9a:b1:23:24:fb:47:bc:b8:9e:05:5b:
         d6:04:a9:1e:aa:f0:18:72:be:d9:5f:2c:cb:8d:dd:08:0c:b7:
         d5:5d:c2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:11:51 2025 by rpki-client