Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K99csyKL7Ic-zuddZ1g1RlOCNJI.cer
File:                     K99csyKL7Ic-zuddZ1g1RlOCNJI.cer (raw, json)
Hash identifier:          9WvvAhilxxHKW/yOmrjsr/2ihz4DfX4I8J91hBP5BoE=
Subject key identifier:   2B:DF:5C:B3:22:8B:EC:87:3E:CE:E7:5D:67:58:35:46:53:82:34:92
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01BC32
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 07 Sep 2023 19:02:29 +0000
Certificate not after:    Thu 31 Oct 2024 00:00:00 +0000
Subordinate resources:    AS: 140930
                          IP: 103.153.154.0/23
                          IP: 2406:4740::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113714 (0x1bc32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep  7 19:02:29 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=A91D8100/serialNumber=2BDF5CB3228BEC873ECEE75D6758354653823492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:54:bf:fd:60:76:54:fe:6a:94:c6:70:dc:ef:
                    43:8f:da:e6:1f:ec:86:63:7e:85:6b:19:9d:db:0e:
                    ae:6f:2e:69:2f:89:93:83:41:43:3b:93:97:64:53:
                    c2:cf:f4:ef:28:bd:98:54:bb:c4:be:3f:8c:0d:39:
                    9d:13:e5:d5:43:de:44:f5:a5:02:b5:9e:65:56:02:
                    ee:d4:07:e8:94:50:9b:ba:76:04:e6:3c:a0:bb:3d:
                    03:b8:b1:60:44:4d:14:cf:c0:bf:44:44:59:9a:52:
                    7f:69:ee:b3:26:bd:b6:d1:83:fa:f5:88:96:b4:30:
                    41:89:4f:d3:73:13:f4:84:29:12:3f:b0:cf:24:3a:
                    17:99:91:56:e9:db:a6:e7:d7:a1:59:36:86:b3:df:
                    c0:b2:5e:06:c5:54:f5:28:96:6f:7f:d8:70:26:fb:
                    34:f7:d2:af:f8:f0:ba:62:f6:d0:3c:2a:51:be:13:
                    ba:44:05:af:1e:70:7c:f9:7b:c5:15:57:b5:6e:e0:
                    bc:6d:68:91:0a:3d:6a:ce:ca:35:e9:d8:fe:7a:fc:
                    cb:f0:68:e0:bb:f7:e2:90:5e:a1:d0:0a:62:2d:4b:
                    14:10:89:fe:b6:94:c9:b1:b7:cf:29:09:47:2b:f1:
                    75:ee:d8:df:c7:ec:88:de:53:d4:53:aa:e5:0b:57:
                    ca:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:DF:5C:B3:22:8B:EC:87:3E:CE:E7:5D:67:58:35:46:53:82:34:92
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  140930

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.154.0/23
                IPv6:
                  2406:4740::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:c3:34:cc:fa:21:d5:ec:40:05:26:4b:ec:05:fe:3d:ca:79:
         77:ab:bd:76:89:36:09:35:c2:6f:1c:ed:a4:d1:dc:32:be:d8:
         86:41:2d:4b:f0:27:39:8f:0e:af:6b:c1:3d:a7:e1:cf:c7:ae:
         e7:f2:b5:55:d7:e4:fc:c6:ca:19:42:f4:02:8e:d4:d6:f0:69:
         0d:49:6f:1a:0c:f1:c4:e2:09:1e:b0:32:67:73:dc:aa:cc:39:
         2e:44:c8:6b:0c:62:7b:a0:89:a3:67:22:a6:a3:8c:e4:30:47:
         26:3d:c6:2e:cc:99:5a:06:84:fc:0b:41:8f:68:09:99:91:cc:
         0f:e1:d3:1c:76:aa:56:2c:5d:68:09:54:df:5f:cd:c2:a1:a9:
         98:8f:6a:f3:46:51:b3:3e:bd:c8:a0:c6:e9:ab:33:c9:7d:9a:
         48:de:a4:db:1f:c0:5e:27:66:87:92:64:a9:e2:82:d3:0e:f1:
         4b:8f:73:ce:9f:33:38:77:50:0e:af:21:bd:89:e3:24:84:36:
         2f:70:4c:88:b9:69:cb:75:54:4b:6f:eb:79:62:40:93:37:95:
         93:a6:65:ca:6f:0a:e3:fe:c6:d9:02:31:29:cc:f8:dc:54:82:
         f4:16:94:9b:80:3d:7b:ed:38:4d:9b:eb:7e:6f:ec:fc:87:ee:
         b4:dd:12:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:21:04 2024 by rpki-client on console-fra.rpki-client.org