Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QL0lotYDGHPlXfzdrTpI97z4jIs.cer
File:                     QL0lotYDGHPlXfzdrTpI97z4jIs.cer (raw, json)
Hash identifier:          thVKYnfBDTQjvlk3lrS7KyeDNFDdfOPNGTMRTGHYves=
Subject key identifier:   40:BD:25:A2:D6:03:18:73:E5:5D:FC:DD:AD:3A:48:F7:BC:F8:8C:8B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01C6F5
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 30 Oct 2023 16:55:41 +0000
Certificate not after:    Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 137023
                          IP: 103.102.27.0/24
                          IP: 103.130.11.0/24
                          IP: 103.131.180.0/23
                          IP: 2401:dec0::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116469 (0x1c6f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct 30 16:55:41 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=A9194A58/serialNumber=40BD25A2D6031873E55DFCDDAD3A48F7BCF88C8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:46:72:85:e5:84:b8:0f:b3:39:ba:2b:53:a0:
                    8f:7b:6d:c2:87:c2:df:c2:fb:f0:49:30:00:dd:80:
                    52:61:61:f0:cc:3c:41:93:e2:b1:93:b2:0c:78:d9:
                    fa:02:23:bb:a3:90:d3:4b:f5:1b:14:1b:b1:39:d7:
                    11:aa:36:65:6a:d4:f6:74:08:d9:fc:62:06:e0:29:
                    e1:52:ea:0e:bf:8b:d5:70:bc:df:2c:5f:e4:f5:b8:
                    1e:ba:45:5b:d3:f6:8e:d4:4c:ff:e5:d7:df:37:6a:
                    f3:1c:89:db:3f:26:d4:4c:0e:92:cd:63:e2:ae:6f:
                    2d:98:e3:4a:22:e8:8c:33:62:69:ba:9d:01:79:d8:
                    ed:23:77:13:be:ad:a0:a7:c3:ba:3f:10:c8:98:62:
                    2e:9e:b6:4a:bd:4b:75:e8:2b:8c:43:bb:ca:59:59:
                    15:4b:3b:d2:3b:c2:63:90:63:f2:92:c0:20:d1:a3:
                    6d:b9:5c:72:72:bb:da:a0:48:4e:bf:88:e2:ab:64:
                    90:33:30:ae:8c:5a:82:77:59:e4:d6:18:0f:1c:cf:
                    a2:c4:74:5b:8c:26:91:4d:ca:24:c1:fa:19:4b:67:
                    24:f8:21:05:5b:20:6a:13:42:b6:7d:1b:25:ba:2e:
                    bc:de:02:d4:58:0b:05:d4:7a:ef:1f:87:c1:ed:71:
                    df:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:BD:25:A2:D6:03:18:73:E5:5D:FC:DD:AD:3A:48:F7:BC:F8:8C:8B
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137023

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.102.27.0/24
                  103.130.11.0/24
                  103.131.180.0/23
                IPv6:
                  2401:dec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:c5:07:49:57:f1:a7:6d:78:c0:f0:50:1b:02:b1:a9:89:66:
         5f:71:7e:c7:db:32:ea:96:c3:1a:9b:ca:4e:e0:d7:71:e3:4e:
         8f:34:70:45:e3:d7:9e:47:15:39:ac:3b:31:47:01:e9:fd:d9:
         c6:86:3d:c1:c7:7f:33:cd:d6:f5:16:d3:57:9c:85:20:b8:77:
         58:7d:2a:30:d2:d2:b7:b7:67:1b:2a:7b:1a:b2:2d:7a:a5:3d:
         7c:22:99:22:e1:77:4e:0e:b9:6b:0c:de:0d:fb:1a:51:48:26:
         26:52:97:52:4d:a3:8d:98:9c:e1:a8:98:93:1c:8c:70:63:17:
         cf:e0:f6:1f:2f:c8:f4:2a:ce:5a:78:3b:63:3c:61:7a:71:f9:
         69:e1:0f:fb:97:ca:52:7b:45:d6:78:b9:13:61:cb:98:d6:90:
         82:98:7a:e8:d2:87:72:3b:53:4a:0e:58:16:58:6b:56:7c:cb:
         75:7d:38:21:47:c5:16:df:2d:72:87:d8:72:a1:13:13:34:50:
         d2:c2:c6:9d:05:6f:0c:5b:ba:a5:77:3a:56:28:4d:24:6b:29:
         56:ba:18:1d:ad:d9:6c:8a:37:91:2f:bd:bc:1e:0e:07:bc:bd:
         a7:d5:5f:f1:a1:eb:2c:e5:38:26:99:77:91:d0:46:16:e8:66:
         6a:b0:5a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:09:32 2024 by rpki-client on console-ams.rpki-client.org