Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V8WBYb3sTcee9I4gXyuNEgKPCuo.cer
File:                     V8WBYb3sTcee9I4gXyuNEgKPCuo.cer (raw, json)
Hash identifier:          y1JDtUqlxOk5oHLgRCSuNhA+jMqlrpZjJqGMQoBuaEM=
Subject key identifier:   57:C5:81:61:BD:EC:4D:C7:9E:F4:8E:20:5F:2B:8D:12:02:8F:0A:EA
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       022DE1
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/V8WBYb3sTcee9I4gXyuNEgKPCuo.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sun 02 Feb 2025 08:26:44 +0000
Certificate not after:    Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources:    AS: 152849
                          IP: 103.156.24.0/23
                          IP: 183.90.186.0/23
                          IP: 2401:e5a0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142817 (0x22de1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE
        Validity
            Not Before: Feb  2 08:26:44 2025 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=A91BB7DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:05:00:fd:d4:63:3d:76:a4:40:a7:0e:70:d1:
                    bd:f2:b7:47:1d:03:07:3c:2b:4d:49:ce:a0:7c:5b:
                    97:22:f7:56:4b:67:c7:54:78:d4:aa:5a:10:49:4a:
                    be:ad:d8:47:71:31:ed:11:9b:05:57:34:d0:31:44:
                    4e:0f:28:5e:36:dc:fd:cd:f5:f2:21:a7:41:71:2a:
                    7c:7d:c0:e0:98:23:d5:b3:61:66:57:2e:9b:6b:12:
                    53:94:7a:09:82:c0:fe:7c:1d:00:0c:bb:ee:bb:be:
                    69:73:4e:c1:8a:e2:02:15:4d:9a:34:6a:85:c9:62:
                    44:fe:75:4a:dc:6b:5c:2a:69:86:c9:9c:25:fa:36:
                    82:e0:6c:96:7d:b8:89:d8:28:0e:67:d4:00:44:ee:
                    be:ce:e8:1f:0f:67:f9:2f:c7:94:90:ef:ab:aa:ed:
                    98:0a:26:cc:f5:53:37:46:0b:8a:3f:5b:91:68:84:
                    d0:ac:ce:5b:f5:db:d9:3f:b9:49:b2:c3:07:b5:fb:
                    35:e1:4a:ec:ac:ff:a1:39:39:cf:df:2a:05:e6:6e:
                    14:df:67:8b:bd:f4:64:c5:85:23:37:33:fa:42:a0:
                    4f:ed:03:a7:52:2e:87:01:29:92:d6:79:74:c1:41:
                    19:a9:c6:62:81:c3:77:47:14:d6:93:fa:5a:5e:cb:
                    57:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C5:81:61:BD:EC:4D:C7:9E:F4:8E:20:5F:2B:8D:12:02:8F:0A:EA
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/V8WBYb3sTcee9I4gXyuNEgKPCuo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  152849

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.24.0/23
                  183.90.186.0/23
                IPv6:
                  2401:e5a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:60:56:f9:fe:69:7d:b0:05:5c:66:4e:a2:ee:c0:b7:4d:cf:
         6e:9a:18:a6:18:f5:6c:cf:bd:71:e0:84:ea:de:76:9f:ff:8c:
         18:7c:57:4f:b5:87:8c:8b:ef:b0:6e:63:2a:bc:c5:a7:43:8b:
         08:2d:df:11:37:47:a3:ba:ac:0b:ee:09:19:5f:bc:31:77:db:
         5f:08:f6:3d:63:78:37:1b:d2:08:a7:55:97:ab:08:03:76:a4:
         95:60:47:4c:48:52:cb:11:51:95:88:61:69:c1:e1:6a:91:e9:
         02:aa:38:fa:bf:5d:91:09:de:14:7c:a5:e0:3f:75:18:cc:66:
         68:5b:4b:5b:cf:7b:9b:6a:1f:aa:d6:aa:56:74:8d:64:ba:e6:
         3e:a7:e3:d6:f7:82:7e:ae:89:ff:7e:57:ab:7d:9e:ce:e1:5d:
         93:77:33:83:2b:06:52:f1:90:7c:ab:59:62:39:bf:7f:59:e3:
         91:b1:01:36:d6:8a:bf:f7:36:02:30:5c:41:34:99:1d:81:57:
         8c:d1:2d:f7:41:6a:22:71:6a:a4:91:03:59:3b:d2:fe:0e:b2:
         77:50:89:bf:14:42:51:d4:26:9d:31:ef:9d:20:a0:66:b8:5e:
         81:72:66:1d:cd:b3:b4:81:38:18:62:b3:0d:9f:db:b4:fd:79:
         b7:b5:24:1a
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIDAi3hMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDIwMjA4MjY0NFoXDTI1MDgzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQkI3REUxMTAvBgNVBAUTKDU3QzU4MTYxQkRFQzREQzc5RUY0OEUy
MDVGMkI4RDEyMDI4RjBBRUEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDWBQD91GM9dqRApw5w0b3yt0cdAwc8K01JzqB8W5ci91ZLZ8dUeNSqWhBJSr6t
2EdxMe0RmwVXNNAxRE4PKF423P3N9fIhp0FxKnx9wOCYI9WzYWZXLptrElOUegmC
wP58HQAMu+67vmlzTsGK4gIVTZo0aoXJYkT+dUrca1wqaYbJnCX6NoLgbJZ9uInY
KA5n1ABE7r7O6B8PZ/kvx5SQ76uq7ZgKJsz1UzdGC4o/W5FohNCszlv129k/uUmy
wwe1+zXhSuys/6E5Oc/fKgXmbhTfZ4u99GTFhSM3M/pCoE/tA6dSLocBKZLWeXTB
QRmpxmKBw3dHFNaT+lpey1clAgMBAAGjggMkMIIDIDAdBgNVHQ4EFgQUV8WBYb3s
Tcee9I4gXyuNEgKPCuowHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUJCN0RFLzZDRTZCNDA0RTEzRjExRUZBRjE4ODQxRkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFCQjdERS82Q0U2QjQwNEUxM0YxMUVGQUYxODg0MUZDNEY5QUUwMi9WOFdCWWIz
c1RjZWU5STRnWHl1TkVnS1BDdW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlURMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBZ5wYAwQBt1q6
MA0EAgACMAcDBQAkAeWgMA0GCSqGSIb3DQEBCwUAA4IBAQB/YFb5/ml9sAVcZk6i
7sC3Tc9umhimGPVsz71x4ITq3naf/4wYfFdPtYeMi++wbmMqvMWnQ4sILd8RN0ej
uqwL7gkZX7wxd9tfCPY9Y3g3G9IIp1WXqwgDdqSVYEdMSFLLEVGViGFpweFqkekC
qjj6v12RCd4UfKXgP3UYzGZoW0tbz3ubah+q1qpWdI1kuuY+p+PW94J+ron/fler
fZ7O4V2TdzODKwZS8ZB8q1liOb9/WeORsQE21oq/9zYCMFxBNJkdgVeM0S33QWoi
cWqkkQNZO9L+DrJ3UIm/FEJR1CadMe+dIKBmuF6BcmYdzbO0gTgYYrMNn9u0/Xm3
tSQa
-----END CERTIFICATE-----
Generated at Fri Feb 21 10:24:30 2025 by rpki-client