Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer
File:                     g4a-hhvb220BZQh9wESgf6TU8Ik.cer (raw, json)
Hash identifier:          46PJyqpEM81XLdTWAi5AusFCEsot3K/2DjQmqToDVfw=
Subject key identifier:   83:86:BE:86:1B:DB:DB:6D:01:65:08:7D:C0:44:A0:7F:A4:D4:F0:89
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       028A12
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 30 Jan 2026 13:40:34 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 17740
                          IP: 103.247.92.0/22
                          IP: 117.103.144.0/20
                          IP: 124.217.128.0/18
                          IP: 180.188.128.0/18
                          IP: 203.209.128.0/20
                          IP: 2401:cdc0::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 15:55:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166418 (0x28a12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan 30 13:40:34 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=A918A996, serialNumber=8386BE861BDBDB6D0165087DC044A07FA4D4F089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b4:5f:1f:86:da:ff:f1:4a:22:4d:30:8a:f4:
                    45:13:35:6e:40:77:83:a3:9a:f1:5f:a2:f4:fc:81:
                    c0:05:f8:9d:fc:af:c9:fa:ce:db:b0:4c:4e:9b:14:
                    e0:a0:57:df:02:79:5e:e9:2c:35:70:30:f1:17:fa:
                    fa:28:e8:1f:2d:5a:08:30:99:e5:e9:de:9e:1c:94:
                    c6:1c:e5:74:d9:33:9f:51:a1:58:8b:39:b7:bc:98:
                    25:bd:d7:6c:a5:6b:4c:61:e1:9f:fc:a4:c3:11:93:
                    6c:c8:b0:b0:e2:bc:ba:79:f4:e8:3a:59:28:f1:7d:
                    7d:34:8a:b3:13:8c:80:47:7d:d2:0b:6b:ef:db:89:
                    83:95:6c:81:16:d8:38:83:df:a9:bd:67:d3:58:7a:
                    c0:0e:4e:a2:72:8b:10:e9:71:0c:d7:74:68:2f:a1:
                    17:41:3d:c8:e0:0c:d9:ef:17:3d:7b:07:83:1e:cb:
                    33:ad:4b:e4:41:8a:80:88:3c:02:30:45:3e:68:d2:
                    b0:5f:a1:59:0d:2a:c8:44:81:f3:f1:68:0f:12:45:
                    87:21:de:39:0c:92:c6:40:5c:4a:ee:c4:58:c3:9f:
                    be:54:2a:15:0a:de:65:75:e5:26:f0:37:7d:35:1e:
                    fe:ef:0f:af:ad:95:48:46:7c:d2:94:b6:b2:41:c4:
                    53:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:86:BE:86:1B:DB:DB:6D:01:65:08:7D:C0:44:A0:7F:A4:D4:F0:89
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  17740

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.92.0/22
                  117.103.144.0/20
                  124.217.128.0/18
                  180.188.128.0/18
                  203.209.128.0/20
                IPv6:
                  2401:cdc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:26:13:3a:76:42:d9:4a:65:23:e3:3a:c5:9d:56:22:60:b8:
         db:d5:e5:e5:4d:c6:d4:4e:82:1a:fb:1c:11:35:1b:ce:c5:a7:
         cb:8d:a5:26:6f:0e:e0:eb:91:3b:ed:23:80:47:bc:ec:18:8f:
         a1:60:ce:3e:73:ef:cd:ea:56:11:dd:87:31:d0:74:b6:78:cc:
         61:2f:40:df:9b:49:d0:34:f0:37:cc:cd:75:92:dd:8c:08:f9:
         7e:e5:72:63:53:b5:0a:c9:77:22:50:2d:29:4b:79:43:8c:84:
         21:dd:8e:ec:9e:5d:06:cf:fd:60:02:f1:24:a3:f3:ec:4d:49:
         5b:c2:d0:d9:f7:ef:3d:33:23:2c:c8:97:bd:5a:ee:c2:21:35:
         de:2d:25:de:96:47:87:c2:83:98:28:ea:cc:f6:8f:d5:ee:2f:
         45:09:ee:20:01:28:9c:26:4a:87:37:49:4d:5d:ad:cf:84:db:
         6e:7c:cc:9d:8e:c6:cb:9d:7e:6e:b6:b6:22:d0:23:64:3f:ba:
         07:7e:43:e5:3f:a3:79:4d:fc:8e:db:62:a9:92:70:3f:d4:c3:
         e9:2e:87:9c:9b:31:1c:b2:09:71:d5:e3:b7:5f:f5:cf:fb:08:
         4d:04:85:d4:d9:84:36:6b:bb:fa:16:3e:69:e0:06:2b:b4:76:
         53:6f:80:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:26:01 2026 by rpki-client