Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer
File:                     9VIt4xOETpbj6_OANOygm-KqCtU.cer (raw, json)
Hash identifier:          roVkmjlwf5ep70zxFgkjQZG14a7sbWZ2Cy0obFO6Gco=
Subject key identifier:   F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01A526
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 25 May 2023 16:20:54 +0000
Certificate not after:    Tue 30 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 149791
                          IP: 103.186.118.0/23
                          IP: 2400:70e0::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107814 (0x1a526)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May 25 16:20:54 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=A916B837/serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:95:3e:5b:dc:9d:fc:e6:70:4e:c9:d2:da:07:
                    c2:72:fa:e5:da:fd:e0:35:b8:3d:e4:61:a2:2b:3a:
                    36:39:23:aa:fd:9f:a3:24:e2:f3:eb:cc:e3:38:49:
                    58:47:3f:0d:6e:fd:94:11:8c:c3:2a:6a:83:fc:4d:
                    79:ce:34:a2:cb:7c:3f:5b:b3:df:67:da:bb:c5:3e:
                    6a:5e:2a:7a:12:2b:19:4d:a1:d8:71:4f:10:4a:f1:
                    43:5a:a5:35:f3:a5:eb:65:2c:62:04:c8:53:21:09:
                    f0:1e:99:4b:e1:a4:29:22:bf:08:0f:ac:64:71:74:
                    96:fc:df:c6:2b:7d:d0:d8:d4:f7:8e:15:bb:68:dd:
                    db:7d:ec:42:2a:be:a3:0e:68:85:f9:cf:bd:cd:b6:
                    bd:97:4a:b4:ef:39:34:a4:78:bf:ff:c8:ec:21:79:
                    25:4e:71:86:72:fe:f9:ce:db:be:28:1d:8e:43:f9:
                    d3:66:26:95:be:2c:ce:bb:e6:40:28:a7:51:be:b6:
                    50:85:da:e3:3c:94:53:60:7c:62:9e:3a:74:da:25:
                    62:e6:5b:16:ec:23:eb:be:49:46:de:b8:52:39:cb:
                    d2:1e:36:7d:de:54:09:a2:53:37:36:98:5f:d7:5d:
                    6b:3a:0b:ea:87:f1:d2:11:aa:2f:6f:73:af:4b:86:
                    f1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  149791

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.118.0/23
                IPv6:
                  2400:70e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:c6:e9:34:16:67:02:e7:66:a1:08:33:3a:cd:ba:a0:49:b6:
         a7:c0:9e:75:c7:21:04:dd:63:3f:47:84:fe:33:6b:d8:cb:3c:
         0d:ba:cc:f0:17:23:fb:1f:85:09:fb:d0:cf:14:34:7c:06:84:
         39:7f:be:2f:f9:2d:e0:1a:31:79:60:57:93:b9:f3:d7:c4:04:
         35:72:c8:4c:c4:1a:36:dd:fe:a8:c0:08:c0:6a:9a:f5:4a:74:
         fa:b7:00:49:89:f0:0d:66:70:56:2d:b3:95:84:da:b4:4c:db:
         70:08:97:4e:bc:68:4f:ee:c7:bb:08:9b:59:49:24:0d:09:f9:
         6e:1a:12:c2:23:6a:c9:bb:95:c1:81:69:5c:fa:a3:37:a8:12:
         11:3a:5e:b3:60:21:17:62:65:a8:63:a1:58:7e:3d:0f:17:8a:
         d7:af:e9:3d:14:ae:36:40:9e:7d:87:b1:d3:c9:ad:f8:75:4e:
         36:cb:cc:bf:44:a6:05:0f:01:de:60:49:47:1a:6e:5d:74:1c:
         d4:44:57:2a:52:e8:f6:08:8c:db:4d:77:65:a7:7a:be:83:2c:
         51:5f:4a:6a:09:e2:9d:1a:65:0f:74:2c:73:68:9a:5c:1a:cf:
         9b:e5:ae:4e:25:61:22:2b:59:80:0c:a8:e2:2b:bd:41:28:a2:
         87:d7:0f:45
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAaUmMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMDUyNTE2MjA1NFoXDTI0MDczMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNkI4MzcxMTAvBgNVBAUTKEY1NTIyREUzMTM4NDRFOTZFM0VCRjM4
MDM0RUNBMDlCRTJBQTBBRDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCylT5b3J385nBOydLaB8Jy+uXa/eA1uD3kYaIrOjY5I6r9n6Mk4vPrzOM4SVhH
Pw1u/ZQRjMMqaoP8TXnONKLLfD9bs99n2rvFPmpeKnoSKxlNodhxTxBK8UNapTXz
petlLGIEyFMhCfAemUvhpCkivwgPrGRxdJb838YrfdDY1PeOFbto3dt97EIqvqMO
aIX5z73Ntr2XSrTvOTSkeL//yOwheSVOcYZy/vnO274oHY5D+dNmJpW+LM675kAo
p1G+tlCF2uM8lFNgfGKeOnTaJWLmWxbsI+u+SUbeuFI5y9IeNn3eVAmiUzc2mF/X
XWs6C+qH8dIRqi9vc69LhvEJAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQU9VIt4xOE
Tpbj6/OANOygm+KqCtUwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTZCODM3LzlEOTBBQjYyQzE1QTExRUNBNDRGNTM2MEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE2QjgzNy85RDkwQUI2MkMxNUExMUVDQTQ0RjUzNjBDNEY5QUUwMi85Vkl0NHhP
RVRwYmo2X09BTk95Z20tS3FDdFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAkkfMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZ7p2MA0EAgAC
MAcDBQAkAHDgMA0GCSqGSIb3DQEBCwUAA4IBAQBUxuk0FmcC52ahCDM6zbqgSban
wJ51xyEE3WM/R4T+M2vYyzwNuszwFyP7H4UJ+9DPFDR8BoQ5f74v+S3gGjF5YFeT
ufPXxAQ1cshMxBo23f6owAjAapr1SnT6twBJifANZnBWLbOVhNq0TNtwCJdOvGhP
7se7CJtZSSQNCfluGhLCI2rJu5XBgWlc+qM3qBIROl6zYCEXYmWoY6FYfj0PF4rX
r+k9FK42QJ59h7HTya34dU42y8y/RKYFDwHeYElHGm5ddBzURFcqUuj2CIzbTXdl
p3q+gyxRX0pqCeKdGmUPdCxzaJpcGs+b5a5OJWEiK1mADKjiK71BKKKH1w9F
-----END CERTIFICATE-----
Generated at Thu May 9 07:42:38 2024 by rpki-client on console-ams.rpki-client.org