Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0KoRA8ajmf95V5DZcfj-5xs_sM.cer
File:                     C0KoRA8ajmf95V5DZcfj-5xs_sM.cer (raw, json)
Hash identifier:          8pWBBvJUo1PbhBYi4zkgzbNok/XCuicb2OKYzQW7IYI=
Subject key identifier:   0B:42:A8:44:0F:1A:8E:67:FD:E5:5E:43:65:C7:E3:FB:9C:6C:FE:C3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       023AD8
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 31 Mar 2025 06:53:26 +0000
Certificate not after:    Thu 28 May 2026 00:00:00 +0000
Subordinate resources:    AS: 133404
                          IP: 103.227.15.0/24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 00:59:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146136 (0x23ad8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE
        Validity
            Not Before: Mar 31 06:53:26 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=A91A33AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:0d:75:85:fb:10:28:40:f1:6b:db:48:95:5c:
                    27:87:d5:94:4b:6d:cd:60:41:54:df:91:9f:74:f6:
                    d4:a5:f1:2f:95:df:66:99:d1:84:1c:48:bb:12:0a:
                    2b:09:d2:d5:7b:cc:74:68:bb:11:cd:ce:28:44:b8:
                    c2:ad:ce:9c:81:63:e0:4c:b7:b0:98:2d:22:1f:33:
                    ef:f5:26:ec:c3:3c:e9:6d:ac:55:3a:59:50:dc:b9:
                    ff:a1:de:3d:7c:a2:b7:27:4b:e0:76:2d:02:97:99:
                    5b:29:3e:07:04:9b:ad:3f:a9:7e:db:c9:c8:e8:ed:
                    73:7e:a1:59:0a:2f:c3:c4:45:d0:d3:5e:59:f3:14:
                    5e:cb:c8:6e:4d:08:28:99:d0:cc:49:6c:c9:8e:53:
                    93:8a:31:d3:28:f1:e9:56:c9:92:21:3a:52:15:d1:
                    70:b1:d0:98:6b:6a:24:4d:c6:20:5e:f3:83:b3:2e:
                    eb:f0:0e:74:a3:61:e4:f5:97:97:bb:11:6e:92:57:
                    71:a8:5f:d3:40:a8:08:ae:37:5a:74:d9:80:da:7f:
                    f8:86:b1:19:7d:86:ee:77:3a:b2:b6:f2:53:8b:6b:
                    a0:38:36:c2:62:dc:d8:a0:9e:88:ac:2b:43:19:ef:
                    1f:0a:be:51:41:46:3d:79:ea:f7:eb:4a:52:c4:44:
                    03:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:42:A8:44:0F:1A:8E:67:FD:E5:5E:43:65:C7:E3:FB:9C:6C:FE:C3
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  133404

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.227.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:3e:78:67:cc:d5:5c:9e:49:67:8c:47:5a:4c:1f:d7:66:a1:
         8b:dc:b3:ae:7a:24:d7:73:12:78:b1:a8:e5:bb:66:4f:a0:57:
         51:39:42:ec:76:f4:76:43:d3:3d:71:5a:94:35:e6:ca:9d:dd:
         ee:41:47:86:b9:9c:8b:6b:f7:1b:fd:9b:a1:88:f7:88:44:3b:
         89:6d:c7:a4:65:c7:31:22:76:ac:ec:60:b0:9d:d2:ac:09:74:
         87:d0:21:61:3d:3f:22:3f:bd:20:b5:29:4f:16:3e:32:39:f2:
         77:de:2f:cf:99:a9:13:90:d0:50:f7:ce:a2:04:01:d1:2e:67:
         ad:b4:43:4d:83:f7:ab:12:b1:40:af:77:05:c6:57:23:04:48:
         fa:af:b6:33:3b:a8:c4:8e:e4:81:a1:d6:7e:03:50:3c:b8:c9:
         fc:24:df:40:77:9d:88:6f:2e:50:8b:f0:12:6a:7e:82:8b:12:
         c7:1b:9e:12:46:5b:9a:e3:a8:08:f4:8b:af:31:97:94:e9:54:
         9e:6a:3b:ba:48:4b:e3:10:4b:28:eb:0b:83:d9:a9:b7:8b:2a:
         21:ea:ba:fb:0c:b9:b3:2d:04:36:62:69:11:01:e4:10:d1:be:
         2b:38:76:d2:c4:0a:7e:ab:87:36:6c:94:d8:4b:da:d1:1a:0f:
         64:25:87:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:55:04 2025 by rpki-client