Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer
File:                     erBCJnIvOevQUQZFFgDAOq7S_Lk.cer (raw, json)
Hash identifier:          M6doJUmlvYttZ8XKTckss65JrCjXLq8QKCojinNAORI=
Subject key identifier:   7A:B0:42:26:72:2F:39:EB:D0:51:06:45:16:00:C0:3A:AE:D2:FC:B9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01A56F
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 26 May 2023 20:01:27 +0000
Certificate not after:    Tue 30 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 139085
                          IP: 103.139.132.0/23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107887 (0x1a56f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May 26 20:01:27 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=A91C6C1D/serialNumber=7AB04226722F39EBD05106451600C03AAED2FCB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6c:ca:99:94:21:d2:de:b9:46:a1:c1:8f:6c:
                    6f:a9:65:7a:7c:3b:e6:04:ca:9c:e0:4f:b9:16:b5:
                    f8:64:08:29:fa:bf:94:27:1a:bc:2c:85:f3:21:3e:
                    e6:d5:ee:81:cc:b2:88:9d:51:a7:38:fe:5b:66:96:
                    5d:b6:fd:97:1f:48:f1:22:7d:a0:9b:6a:1d:96:57:
                    8a:7f:63:fa:db:b8:7c:ac:d2:28:9f:ee:5d:06:8e:
                    6d:e9:e0:1b:16:b3:28:d8:16:1b:d7:f0:78:ab:fd:
                    ba:fb:82:b9:25:c2:f0:65:7e:f1:ed:f0:a6:2c:87:
                    12:66:9a:c2:4b:9e:f7:47:6b:e0:e6:3a:10:14:9f:
                    a4:b1:f8:47:35:12:5e:e0:c8:15:4a:0f:28:5c:81:
                    8b:d3:db:4c:71:1d:a0:bb:ac:61:98:d9:9c:c3:12:
                    9a:fc:05:5b:0a:dc:ba:32:12:04:94:04:5c:c9:36:
                    c4:97:d8:b6:ed:e2:3a:e5:1a:28:e9:5b:e9:04:af:
                    0b:d9:5e:ae:9c:52:e0:e3:b7:00:3d:4d:d2:09:58:
                    05:b9:b3:1e:87:b4:05:8a:fc:97:fb:b5:33:71:a8:
                    8c:d5:23:73:1d:1d:80:a0:2b:f6:cf:5e:98:0b:ae:
                    e8:b3:16:47:4c:e8:b8:76:ce:35:a1:63:07:ba:09:
                    20:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:B0:42:26:72:2F:39:EB:D0:51:06:45:16:00:C0:3A:AE:D2:FC:B9
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  139085

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:83:d4:a2:ff:91:70:83:6d:89:1f:5b:96:e9:48:3c:32:e4:
         49:6a:c1:0a:6a:2d:07:d7:08:b1:16:e8:78:10:84:7f:1f:90:
         6a:11:d6:e5:da:14:01:b9:3e:ba:7a:be:4d:20:8a:38:c5:d9:
         74:94:d0:99:fb:a3:56:2e:aa:b7:04:57:56:b3:44:f9:34:d7:
         be:1e:ef:f1:80:5d:31:e4:89:92:f5:0f:64:6e:63:eb:c2:37:
         38:2a:74:a3:f9:7b:2f:9a:7a:af:e7:12:73:0a:a4:5d:38:c7:
         82:1c:8c:7e:c1:30:08:a9:96:a9:0a:a2:5a:8b:aa:d0:f5:b3:
         4c:d7:2a:7c:1d:ac:6e:65:f4:c3:45:c3:23:4d:57:19:68:15:
         a3:60:2e:5a:8b:f7:6d:45:33:9b:06:e0:98:46:45:17:ef:10:
         75:f6:02:3e:86:5d:ad:2a:22:3a:40:fd:9a:1d:fc:93:81:6e:
         ec:95:63:3b:e9:90:61:c5:54:4c:85:22:c6:77:20:f3:fb:bb:
         d3:1d:68:cc:bb:12:36:a0:1d:32:b7:e1:5f:f0:32:91:a2:c6:
         d1:18:0f:9b:ed:df:31:db:a9:ad:6d:95:22:66:b8:60:2b:0a:
         91:c5:73:9e:1d:3b:b5:55:bf:88:3e:ae:a6:11:23:0d:2e:c0:
         d4:09:3c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 10:24:29 2024 by rpki-client on console-fra.rpki-client.org