Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLNHSuseCZIUvEtGLIYwF5EiEk.cer
File:                     ZsLNHSuseCZIUvEtGLIYwF5EiEk.cer (raw, json)
Hash identifier:          un/93axk4SfsDDufZpiMExeYSh+FSHzqbxDjSSKZMmc=
Subject key identifier:   66:C2:CD:1D:2B:AC:78:26:48:52:F1:2D:18:B2:18:C0:5E:44:88:49
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01AE23
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/ZsLNHSuseCZIUvEtGLIYwF5EiEk.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 04 Jul 2023 13:25:24 +0000
Certificate not after:    Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources:    AS: 137912
                          IP: 103.117.21.0/24
                          IP: 103.118.123.0/24
                          IP: 103.118.154.0/23
                          IP: 2001:df5:9500::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110115 (0x1ae23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul  4 13:25:24 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=A9123DB1/serialNumber=66C2CD1D2BAC78264852F12D18B218C05E448849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:08:13:1d:39:64:d5:68:b3:16:fe:3c:8f:93:
                    db:89:28:3c:76:04:c3:e1:03:96:e2:27:9b:1c:c0:
                    45:7c:48:47:36:b6:de:06:73:9f:a6:71:b1:12:c1:
                    1f:11:a3:e0:a0:5d:5d:3f:46:97:87:76:aa:f3:40:
                    d5:81:cb:6a:c8:5b:46:76:c1:5f:b9:87:b9:99:ea:
                    96:98:09:0f:e9:e0:bb:22:95:f3:b9:1f:46:4a:ab:
                    3d:92:dd:a3:fe:e2:1e:d1:fc:b8:fd:c4:c4:a2:a3:
                    2f:3b:0c:51:01:e3:4d:f9:63:4f:0c:96:66:31:7e:
                    95:28:89:44:ec:94:92:d0:21:7b:2f:16:3d:65:45:
                    0a:a2:86:bc:cb:b1:cc:70:6f:8e:01:41:6b:2f:bf:
                    74:7e:54:03:ae:06:40:da:e9:a5:ae:16:f0:9c:b0:
                    72:f9:63:b2:d2:56:44:81:58:6d:fc:f5:5e:4c:db:
                    3e:44:5f:07:e2:d7:df:b8:ea:4b:a6:f4:28:90:2b:
                    c5:1f:1f:c8:6d:86:0d:e0:8b:01:09:6d:b3:4f:98:
                    45:0a:92:a6:e2:75:54:fe:54:90:65:59:e4:40:9d:
                    da:31:d5:8c:c9:31:95:f5:24:4e:2d:a7:21:73:14:
                    be:c2:09:f7:92:4b:7b:fe:5b:24:3f:71:b7:25:69:
                    fd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:C2:CD:1D:2B:AC:78:26:48:52:F1:2D:18:B2:18:C0:5E:44:88:49
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/ZsLNHSuseCZIUvEtGLIYwF5EiEk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137912

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.21.0/24
                  103.118.123.0/24
                  103.118.154.0/23
                IPv6:
                  2001:df5:9500::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:dc:bb:1d:8f:28:89:43:f0:27:06:0d:ca:53:a7:cf:ad:28:
         67:7c:ac:8e:e0:15:02:e6:c2:e9:74:53:b5:0d:e2:79:60:ba:
         06:5d:11:03:0c:27:fc:12:fa:11:98:45:3c:81:cb:90:21:45:
         7d:6e:1a:38:9f:2b:bd:d0:6b:81:f5:a5:06:0e:37:01:7a:de:
         f8:22:f5:0e:5a:02:86:e1:26:5d:19:49:b8:7e:b0:96:6b:4b:
         7d:d2:cb:34:43:35:93:ed:20:86:97:0a:49:7f:5b:02:02:2f:
         17:06:fe:f5:3f:ac:21:31:1b:0c:b0:fc:9b:00:af:86:66:87:
         4f:c8:93:95:c8:61:a9:50:4b:4f:45:ae:2b:cb:d5:39:b1:c4:
         8f:33:c6:ec:d4:96:b8:b0:fd:b4:89:83:8a:1f:87:31:7d:d6:
         64:a5:de:bb:98:21:ae:63:8c:fc:69:26:c2:b2:3e:e1:f1:b3:
         58:a4:23:ca:55:3c:2b:e7:20:db:cc:af:4f:16:9e:23:db:15:
         9f:60:db:5a:cb:ff:f7:0b:7e:67:f5:00:65:5a:4a:2c:5d:32:
         20:dd:3a:d6:bb:80:d7:95:d3:e9:5e:24:36:68:f0:1c:a3:d2:
         9e:d0:5f:d2:0e:2a:d2:b4:b0:5b:67:41:e4:b5:77:11:06:08:
         18:f8:e6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 18:14:02 2024 by rpki-client on console-fra.rpki-client.org