Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GCeeGIouul_yo6QQrTod5NUfD-U.cer
File:                     GCeeGIouul_yo6QQrTod5NUfD-U.cer (raw, json)
Hash identifier:          MdW0h5x3dPBJ+tLPuM3Z4JixyAGytduaiB0SmDYefqI=
Subject key identifier:   18:27:9E:18:8A:2E:BA:5F:F2:A3:A4:10:AD:3A:1D:E4:D5:1F:0F:E5
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01BA9F
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A919AA66/53257002C90D11EC86B03A56C4F9AE02/GCeeGIouul_yo6QQrTod5NUfD-U.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A919AA66/53257002C90D11EC86B03A56C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 31 Aug 2023 20:15:51 +0000
Certificate not after:    Thu 31 Oct 2024 00:00:00 +0000
Subordinate resources:    AS: 17463
                          IP: 203.12.248.0/24
                          IP: 203.56.92.0/24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113311 (0x1ba9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 31 20:15:51 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=A919AA66/serialNumber=18279E188A2EBA5FF2A3A410AD3A1DE4D51F0FE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b3:f3:58:1d:4a:bb:69:6a:27:ab:90:f1:92:
                    20:79:87:e2:d1:71:7d:2f:38:ff:ef:bd:26:76:4f:
                    29:66:2f:bc:1c:16:33:3f:cc:04:7a:2f:8b:e6:f4:
                    3d:81:61:5d:f3:e5:ed:fd:8a:e0:77:e7:44:41:91:
                    76:cd:7f:05:09:52:bf:8f:f2:64:10:94:b2:78:94:
                    4e:84:69:d9:db:23:92:95:fb:bb:66:19:31:aa:ca:
                    f0:ae:37:02:e8:bd:d8:a3:34:d3:c0:79:fb:2f:e8:
                    ea:f4:b5:1b:ce:57:9d:ca:01:b9:91:80:14:37:7d:
                    db:ce:e7:be:3d:7e:60:a2:53:c8:c2:94:ec:26:55:
                    61:0f:ec:b2:72:2c:70:e8:75:3b:80:f4:85:45:50:
                    ad:35:77:78:19:6d:c0:1a:31:09:f7:e9:13:7b:9f:
                    1b:9b:32:ce:f8:92:81:47:c3:5e:6f:00:5f:90:6b:
                    b2:9a:92:13:71:57:d7:db:28:77:79:b4:b5:91:f4:
                    db:7c:78:6a:2f:8c:d2:73:06:aa:83:b7:d6:26:e7:
                    dc:47:90:c3:d1:70:92:cc:1b:95:05:82:94:56:a4:
                    24:c9:78:63:78:1d:77:b6:14:bf:8a:4f:08:ab:dd:
                    5d:fe:dd:d1:51:3b:22:7d:8a:05:56:53:f2:92:0c:
                    1a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:27:9E:18:8A:2E:BA:5F:F2:A3:A4:10:AD:3A:1D:E4:D5:1F:0F:E5
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919AA66/53257002C90D11EC86B03A56C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919AA66/53257002C90D11EC86B03A56C4F9AE02/GCeeGIouul_yo6QQrTod5NUfD-U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  17463

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.12.248.0/24
                  203.56.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:fb:1f:e5:c9:a3:5e:c0:28:71:38:fd:76:ea:24:8a:5a:df:
         90:d2:ea:24:e3:59:56:e4:9e:73:e7:60:c4:d8:f4:3b:4d:3a:
         35:64:11:d3:f1:f7:ef:d6:ba:16:7c:1d:0b:06:52:06:6b:e7:
         f5:f2:77:3f:de:c7:5f:38:b4:63:12:90:ab:aa:77:19:08:e1:
         36:8d:83:43:ff:8e:94:b4:72:08:6a:7c:eb:33:e5:e7:64:18:
         d2:9f:f9:46:74:3b:37:db:c9:a7:8c:98:b2:58:85:ad:24:13:
         e4:32:4c:25:40:6c:2d:ce:7b:f3:6c:79:1e:f3:31:f1:52:a3:
         a0:e1:ee:39:a6:e7:d8:85:a8:48:a4:21:9b:53:1d:ee:a3:14:
         ed:f2:ca:1d:0b:bd:67:97:55:5c:fa:c1:89:0a:2b:de:ff:d3:
         8d:e4:c1:7f:8b:30:1e:98:fb:8d:15:fb:c1:8a:02:f2:49:bc:
         21:55:36:4b:07:a8:72:8e:b3:ac:ed:66:e9:88:e2:3c:db:eb:
         df:94:7d:51:cc:d2:36:b7:67:94:77:90:47:15:29:6e:01:48:
         a1:ae:3b:a1:f1:27:9f:6c:90:3e:42:2f:e9:ce:ba:86:3b:16:
         66:f9:68:b0:e0:35:18:b3:5b:cc:b8:58:1e:85:e9:1c:28:86:
         6d:94:c3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 21:04:24 2024 by rpki-client on console-fra.rpki-client.org