Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/je6uhW6V886s4RLAoeqXukWlekQ.cer
File:                     je6uhW6V886s4RLAoeqXukWlekQ.cer (raw, json)
Hash identifier:          xfAuZ8jyvMmopRpkj0cIqPHTPo/ThVTD9XKue+m+e/I=
Subject key identifier:   8D:EE:AE:85:6E:95:F3:CE:AC:E1:12:C0:A1:EA:97:BA:45:A5:7A:44
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       022F12
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 04 Feb 2025 21:07:10 +0000
Certificate not after:    Fri 01 May 2026 00:00:00 +0000
Subordinate resources:    AS: 45648
                          IP: 27.34.240.0/20
                          IP: 43.254.160.0/22
                          IP: 103.228.220.0/22
                          IP: 111.125.192.0/23
                          IP: 111.125.200.0/21
                          IP: 111.125.212.0/24
                          IP: 183.87.212.0/23
                          IP: 183.87.250.0/24
                          IP: 203.201.60.0/22
                          IP: 2400:d280::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 23:51:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143122 (0x22f12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE
        Validity
            Not Before: Feb  4 21:07:10 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=A91C39D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d7:86:91:5c:72:1a:cb:9b:ac:4c:f1:cc:d9:
                    99:fe:39:01:f5:37:f0:04:bf:85:7c:b3:ea:a0:9a:
                    48:3a:6b:05:d2:f6:73:ea:c3:d4:6f:30:5e:dc:a0:
                    81:25:6b:94:08:93:18:64:10:b9:a6:02:b3:7d:d3:
                    35:e9:bd:bd:be:a6:e9:75:85:7c:d5:d2:69:e3:71:
                    54:5d:ef:6b:3c:05:08:17:d0:d1:fa:8b:31:0f:e2:
                    91:ee:87:e6:a5:70:6f:7a:4b:f6:d0:6c:6e:dc:0e:
                    f9:12:7f:79:63:f0:80:6e:aa:6e:0b:a0:f8:a5:5d:
                    5d:6f:27:63:9b:97:a3:b7:b4:95:41:d1:fb:bb:f7:
                    dd:bd:e0:4f:19:82:f2:2b:f3:6f:32:d3:1f:d4:99:
                    d5:c4:85:8e:fa:15:0f:46:8b:08:d9:94:03:84:bf:
                    98:22:08:9f:fb:b7:26:52:b4:74:c5:a2:69:92:83:
                    2c:af:08:50:59:11:45:67:c6:d8:75:c7:b4:09:95:
                    0c:22:6b:3c:4d:4a:26:16:b9:d4:a7:20:e6:0b:d5:
                    f9:e0:d6:70:df:9e:89:e6:14:9a:3e:3d:1b:2d:b1:
                    11:3f:83:65:cc:e6:28:1d:64:ed:8e:bd:15:fb:03:
                    47:82:f2:95:64:4a:4d:a6:f6:24:2c:9d:a6:82:6f:
                    05:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:EE:AE:85:6E:95:F3:CE:AC:E1:12:C0:A1:EA:97:BA:45:A5:7A:44
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  45648

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.34.240.0/20
                  43.254.160.0/22
                  103.228.220.0/22
                  111.125.192.0/23
                  111.125.200.0/21
                  111.125.212.0/24
                  183.87.212.0/23
                  183.87.250.0/24
                  203.201.60.0/22
                IPv6:
                  2400:d280::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:18:38:73:67:19:0b:fe:7f:8b:f2:5d:55:3b:50:61:c7:63:
         d4:e7:97:d2:85:f2:43:43:40:5a:78:e7:f2:04:ab:26:05:8b:
         26:f3:34:5c:b6:a0:39:9b:3c:cd:18:6c:64:b9:26:7a:de:9c:
         c5:03:84:a4:e7:34:7a:18:93:ed:ed:6e:00:e6:39:cc:21:5f:
         b3:d3:d2:a3:26:24:54:7e:d9:14:b8:3f:a3:93:10:07:10:f9:
         12:98:fa:7d:5f:1a:64:3f:11:0d:e2:04:03:cb:cf:1a:b1:19:
         2d:94:5a:da:1f:ec:0d:5f:94:b8:12:51:0f:8c:90:50:99:db:
         7b:ed:67:fa:b8:94:49:67:48:5b:d2:5e:23:80:ed:3c:4a:29:
         e5:0c:24:96:3f:f9:f5:7b:c5:a4:14:61:02:37:e3:3d:4c:d4:
         e4:15:30:3e:9d:0b:43:4a:14:d8:04:65:4d:eb:80:34:eb:bd:
         26:2f:a8:04:12:22:6a:b5:4d:66:a3:8f:9a:ca:aa:cc:3f:ed:
         c9:a1:8f:64:d5:60:59:81:bf:cf:1e:79:50:1d:e1:f9:96:35:
         4a:fb:09:83:69:cf:a7:e6:1a:66:47:a0:65:7d:d1:25:a1:92:
         d8:fd:2a:99:57:09:5f:3d:af:93:18:8b:38:42:95:f2:b4:9b:
         fd:a0:5e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:11:33 2025 by rpki-client