Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer
File:                     eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer (raw, json)
Hash identifier:          pKt4Bu4TZdEDL44PTxH129PR82mvW5PAdRZAYZCl4Tg=
Subject key identifier:   78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01A056
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 01 May 2023 16:43:17 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 133104
                          IP: 103.152.248.0/23
                          IP: 119.252.176.0/21
                          IP: 2405:c400::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Apr 2024 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106582 (0x1a056)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May  1 16:43:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=A914BFE5/serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ea:17:cb:37:17:49:d3:05:f4:e3:80:9b:29:
                    44:36:ef:5b:19:ba:d2:51:40:71:eb:20:2f:12:43:
                    f0:86:48:d6:33:07:0b:86:a1:6a:07:14:87:0c:29:
                    77:ea:74:ba:0a:8e:01:91:63:45:cd:b9:b2:7c:b9:
                    4c:af:20:d4:cb:a8:33:79:42:9b:f1:38:a0:87:09:
                    6d:6a:6f:84:30:9f:e3:32:41:61:59:b6:b7:09:b6:
                    43:d2:26:8e:61:e6:85:28:37:ba:40:12:5c:44:13:
                    73:8d:a5:55:9a:d8:5e:5d:1a:a2:69:ed:46:60:10:
                    f8:48:50:d7:05:6e:0b:7d:59:44:21:0a:f0:29:61:
                    cf:e9:72:1d:5b:5f:af:fc:b4:c1:44:f7:2c:16:9a:
                    9a:81:90:97:ae:15:a6:dd:b0:5b:16:04:2b:43:48:
                    8a:cb:02:b5:c4:38:66:0c:b1:0d:b1:39:e6:14:a6:
                    d8:cc:b0:a0:d0:b0:82:ea:c7:5f:ac:96:62:ed:df:
                    cf:89:90:fb:b9:2e:86:ad:99:92:6f:c5:7d:f6:c0:
                    51:e7:0a:24:2f:78:59:ab:4d:0a:6c:57:9b:21:a5:
                    34:48:a1:5c:01:6c:66:58:89:cd:b9:40:5b:9d:96:
                    e7:20:44:df:82:9c:a6:36:bc:f9:cd:1a:20:6b:2c:
                    17:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  133104

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.248.0/23
                  119.252.176.0/21
                IPv6:
                  2405:c400::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:e5:11:da:d0:85:32:6b:41:f9:0b:bb:11:65:f6:51:97:22:
         4f:29:11:f1:43:08:11:4d:44:60:4c:92:d8:29:83:8d:a2:17:
         26:10:d1:fb:58:ba:a9:31:65:62:c8:97:82:78:d9:da:37:da:
         8e:19:e0:ee:db:7c:5b:7b:6d:ff:e7:66:d2:95:3b:43:1e:eb:
         d3:5e:f3:48:78:6e:cf:c8:37:28:73:9f:cf:ca:bd:98:81:ef:
         f1:09:09:48:18:34:76:28:dd:ea:f2:82:50:bb:78:2e:37:0c:
         15:5c:5c:15:02:9e:44:04:67:cf:26:26:f1:0f:df:d5:6b:3e:
         36:e4:10:3e:bf:9a:65:e5:c9:6b:f3:48:24:9c:f6:dd:fa:ee:
         6d:9d:93:fa:97:c3:03:0f:55:8e:cc:05:96:b0:97:d2:41:4c:
         6b:a4:34:59:26:80:9f:c3:73:59:bb:fb:c5:49:db:b0:f6:c6:
         53:51:b7:aa:7f:38:b3:9e:ac:c3:c6:56:20:c7:28:de:d9:11:
         3b:0f:9d:d3:3b:e2:b3:1c:2e:3d:52:27:a6:73:d0:49:fe:db:
         ad:d9:2e:11:25:83:14:3b:53:c3:3d:dc:86:af:60:8b:d7:f0:
         1a:16:ea:fc:24:d2:77:c3:f0:a2:7b:c1:a4:2c:dd:3c:18:f0:
         fe:79:99:4c
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIDAaBWMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMDUwMTE2NDMxN1oXDTI0MDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNEJGRTUxMTAvBgNVBAUTKDc4QTk5NzdGRkI0N0FGM0VDMUU5NDZC
QzEwRjgxMzc2OTQ5RUJFQzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCj6hfLNxdJ0wX044CbKUQ271sZutJRQHHrIC8SQ/CGSNYzBwuGoWoHFIcMKXfq
dLoKjgGRY0XNubJ8uUyvINTLqDN5QpvxOKCHCW1qb4Qwn+MyQWFZtrcJtkPSJo5h
5oUoN7pAElxEE3ONpVWa2F5dGqJp7UZgEPhIUNcFbgt9WUQhCvApYc/pch1bX6/8
tMFE9ywWmpqBkJeuFabdsFsWBCtDSIrLArXEOGYMsQ2xOeYUptjMsKDQsILqx1+s
lmLt38+JkPu5LoatmZJvxX32wFHnCiQveFmrTQpsV5shpTRIoVwBbGZYic25QFud
lucgRN+CnKY2vPnNGiBrLBevAgMBAAGjggMkMIIDIDAdBgNVHQ4EFgQUeKmXf/tH
rz7B6Ua8EPgTdpSevsIwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTRCRkU1LzlEQUY0ODZFRERFQjExRUFCMzBFRDkyMUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE0QkZFNS85REFGNDg2RURERUIxMUVBQjMwRUQ5MjFDNEY5QUUwMi9lS21YZl90
SHJ6N0I2VWE4RVBnVGRwU2V2c0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAgfwMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBZ5j4AwQDd/yw
MA0EAgACMAcDBQAkBcQAMA0GCSqGSIb3DQEBCwUAA4IBAQCQ5RHa0IUya0H5C7sR
ZfZRlyJPKRHxQwgRTURgTJLYKYONohcmENH7WLqpMWViyJeCeNnaN9qOGeDu23xb
e23/52bSlTtDHuvTXvNIeG7PyDcoc5/Pyr2Yge/xCQlIGDR2KN3q8oJQu3guNwwV
XFwVAp5EBGfPJibxD9/Vaz425BA+v5pl5clr80gknPbd+u5tnZP6l8MDD1WOzAWW
sJfSQUxrpDRZJoCfw3NZu/vFSduw9sZTUbeqfziznqzDxlYgxyje2RE7D53TO+Kz
HC49Uiemc9BJ/tut2S4RJYMUO1PDPdyGr2CL1/AaFur8JNJ3w/Cie8GkLN08GPD+
eZlM
-----END CERTIFICATE-----
Generated at Fri Mar 29 00:00:49 2024 by rpki-client on console-fra.rpki-client.org