Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eLec-CdRhh8nml-lBJMVONrc2vo.cer
File:                     eLec-CdRhh8nml-lBJMVONrc2vo.cer (raw, json)
Hash identifier:          5Ed7szCoJ+yBugBstnVvSeBUz3Gbi+6uOdqR7C9jlfA=
Subject key identifier:   78:B7:9C:F8:27:51:86:1F:27:9A:5F:A5:04:93:15:38:DA:DC:DA:FA
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01C297
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9110650/6596CC72C60111ECA38F3410C4F9AE02/eLec-CdRhh8nml-lBJMVONrc2vo.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9110650/6596CC72C60111ECA38F3410C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sat 07 Oct 2023 12:20:56 +0000
Certificate not after:    Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 133635
                          IP: 43.243.240.0/22
                          IP: 103.39.56.0/22

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115351 (0x1c297)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct  7 12:20:56 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=A9110650/serialNumber=78B79CF82751861F279A5FA504931538DADCDAFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3a:20:f4:6d:71:4d:2c:fe:76:42:55:56:f7:
                    9b:ba:1c:28:b9:7c:b0:34:63:e0:4b:e9:3d:41:0c:
                    52:f1:45:fa:39:d5:3f:66:25:d8:cc:c8:44:33:f5:
                    44:63:41:8e:fb:2a:02:53:9b:f8:0a:b2:b5:a3:b4:
                    bc:be:00:ac:aa:e5:23:9e:8b:fe:95:44:30:8f:e5:
                    06:23:95:41:0c:34:b8:25:24:59:1f:96:0b:f1:6f:
                    dd:d0:10:db:37:db:c3:52:51:9b:dc:2a:11:a4:29:
                    ff:4b:ea:9c:4d:eb:ae:c0:3a:3d:06:d6:9e:2a:10:
                    0e:bb:90:ef:d0:52:96:ad:58:ea:8b:06:6c:0d:69:
                    40:11:da:20:e5:6d:6d:e1:01:09:99:cd:b8:07:90:
                    af:41:7b:f9:12:e8:f3:02:67:dd:2f:ee:ed:05:a7:
                    31:00:c4:a5:ef:48:81:a5:8f:a5:84:30:e3:88:66:
                    62:94:95:9b:28:4d:53:93:a2:90:ba:69:65:3c:93:
                    53:8c:ad:ab:d5:47:40:45:db:6e:fd:a6:49:4b:df:
                    1b:06:ec:7c:a1:4c:77:57:16:81:84:55:ce:53:66:
                    8e:83:7c:13:91:41:34:1e:b2:1b:1f:86:5c:d7:03:
                    08:09:ab:4d:78:eb:73:e0:a4:5a:be:9d:20:b6:be:
                    bf:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:B7:9C:F8:27:51:86:1F:27:9A:5F:A5:04:93:15:38:DA:DC:DA:FA
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9110650/6596CC72C60111ECA38F3410C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9110650/6596CC72C60111ECA38F3410C4F9AE02/eLec-CdRhh8nml-lBJMVONrc2vo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  133635

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.243.240.0/22
                  103.39.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:54:52:69:2e:64:ad:c2:86:f3:b2:e7:24:28:30:29:43:2b:
         6a:18:31:d2:a3:1d:3f:f7:28:a3:58:5c:55:66:bb:9b:3f:6d:
         74:9c:c0:93:74:45:22:1c:79:e0:79:75:f7:9c:70:c1:88:81:
         63:8f:69:57:41:a0:dc:6c:0d:c6:6e:a0:00:b7:48:99:63:ad:
         c8:18:ee:37:d4:58:28:6d:a1:e4:c5:6e:61:d0:2a:a3:73:86:
         97:9b:5f:47:36:22:a7:9e:42:a1:21:4c:f3:5d:27:d7:f8:6d:
         46:b5:f9:ea:ed:f3:a7:91:b2:2b:87:55:ed:26:28:86:37:6a:
         5b:6a:21:ee:ed:f4:9e:13:51:c5:83:e5:62:04:47:ef:5e:c0:
         25:98:37:1b:b3:95:df:22:1c:67:46:43:8e:ea:e7:64:4f:02:
         e1:62:30:99:06:b3:d5:b2:cb:40:24:e4:6c:0e:de:13:71:16:
         57:d5:36:84:11:21:2f:3c:ae:b5:e2:5e:78:ad:57:b1:7a:d7:
         b2:e9:cb:4b:58:6e:29:a5:d7:08:46:d2:07:9d:7f:e3:35:b0:
         89:cc:17:21:2e:65:b2:0a:62:fa:d1:9b:42:91:bb:be:4a:39:
         b7:8e:6a:e0:f1:a3:af:24:f3:36:21:ba:e0:b5:13:92:aa:7d:
         f9:7c:28:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 10:10:51 2024 by rpki-client on console-ams.rpki-client.org