Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LUK_n_o04UF-5rzIl9pVQVPO6uU.cer
File:                     LUK_n_o04UF-5rzIl9pVQVPO6uU.cer (raw, json)
Hash identifier:          WRNgIZcI/BLeDcWIuiLrAfIjv+49yBImnj4WHAAQ92E=
Subject key identifier:   2D:42:BF:9F:FA:34:E1:41:7E:E6:BC:C8:97:DA:55:41:53:CE:EA:E5
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01B0D3
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 18 Jul 2023 14:50:13 +0000
Certificate not after:    Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources:    AS: 9751
                          IP: 103.117.168.0/22
                          IP: 2403:2140::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110803 (0x1b0d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 18 14:50:13 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=A915F0EF/serialNumber=2D42BF9FFA34E1417EE6BCC897DA554153CEEAE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:bb:b7:96:e0:fe:ef:22:07:ab:0b:6e:62:05:
                    f0:e9:b5:b4:61:55:35:26:c4:81:c2:4b:39:2e:3b:
                    5c:eb:0c:44:d5:55:c8:66:51:58:1f:f1:b5:59:9e:
                    12:97:6c:01:87:43:4e:fb:36:03:d6:c6:7d:e3:d0:
                    c7:40:d1:74:65:28:ba:1b:74:09:02:d8:98:a3:07:
                    6d:2d:3b:72:71:87:df:ba:24:46:66:22:a7:73:e0:
                    21:6d:c9:25:dc:3b:cc:28:54:42:89:fd:3a:24:df:
                    2d:1f:ab:c4:51:65:21:31:d6:0c:4f:91:a5:55:28:
                    c8:a4:ed:5c:72:5a:5d:08:00:82:5b:c4:c9:a0:9b:
                    d8:41:83:06:db:ce:3a:0a:ae:21:11:3e:84:3f:89:
                    a3:b5:69:83:15:34:aa:c1:d4:e8:0b:64:5d:3c:a9:
                    55:fb:d7:a5:fe:a1:31:08:6d:27:dc:e2:f7:72:f4:
                    f2:f2:7a:98:8e:38:1a:6f:00:c7:45:92:3c:73:e5:
                    35:bd:8c:39:e2:4e:c1:3e:40:64:ed:bf:ec:0e:15:
                    08:ad:c1:6e:f8:ee:d2:9e:d8:d0:09:6e:a8:12:6f:
                    d5:c2:6f:de:20:76:9d:70:2a:9d:c0:56:bb:ce:73:
                    06:4c:49:e7:2f:7c:cd:50:64:e7:b5:54:3b:f7:3a:
                    77:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:42:BF:9F:FA:34:E1:41:7E:E6:BC:C8:97:DA:55:41:53:CE:EA:E5
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  9751

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.168.0/22
                IPv6:
                  2403:2140::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:16:cc:33:6a:9a:6a:40:a6:32:f8:9f:34:a0:9f:59:0a:bc:
         10:77:98:ca:fa:69:8c:23:80:4a:94:6e:a8:72:57:af:99:de:
         4d:86:6d:27:52:36:8f:6b:2c:1e:79:cc:6b:cb:51:c7:83:8a:
         27:6b:b1:bf:ea:06:a5:00:b3:59:80:30:f3:87:3a:ea:69:ac:
         0c:28:bd:37:e1:7a:c6:32:6a:f1:5a:b7:4b:ba:2f:a6:68:20:
         3c:81:d7:dd:ee:a6:ac:2e:99:1a:0b:2b:7d:1f:2e:a0:8d:d4:
         2f:84:01:cb:bf:7d:b9:b6:4c:92:f4:ec:7e:f3:a6:f1:3b:89:
         63:8d:e1:27:c9:5e:c9:26:6e:b6:ae:ef:fa:a0:66:c3:cc:09:
         9b:a4:e1:6a:3d:75:f3:c7:ea:97:1c:b8:27:8d:91:17:19:e7:
         b8:4a:d2:3a:01:5b:18:2f:46:5b:6c:2a:ae:cd:93:10:fe:2a:
         09:40:17:fd:d0:e4:bb:0f:89:d0:6d:11:b2:9d:8d:bb:87:dc:
         b3:71:c8:dc:8e:68:a2:5d:e4:7b:de:a2:28:2f:00:cd:6a:89:
         b4:0e:e7:a2:4e:55:f4:a2:aa:7e:f1:44:52:55:16:cc:55:95:
         f5:0a:91:6b:1b:ad:ab:dd:87:e5:0d:d1:32:52:66:e7:9c:bf:
         2a:04:a6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----