Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phIK6Zqq3ACjWgyL9RZeC2Ojih4.cer
File:                     phIK6Zqq3ACjWgyL9RZeC2Ojih4.cer (raw, json)
Hash identifier:          cBdvsfDqPeAPaGSWDtCKeTGI0ZDlgB0fpeq2XJlI/DI=
Subject key identifier:   A6:12:0A:E9:9A:AA:DC:00:A3:5A:0C:8B:F5:16:5E:0B:63:A3:8A:1E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       022C96
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 30 Jan 2025 16:32:12 +0000
Certificate not after:    Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 149041
                          IP: 103.177.74.0/24
                          IP: 2001:df0:1f40::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Apr 2025 05:08:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142486 (0x22c96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE
        Validity
            Not Before: Jan 30 16:32:12 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=A91456E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d0:15:17:91:fc:70:65:31:be:ad:79:f2:ac:
                    d6:8c:fe:7c:aa:85:48:c9:1c:2f:a3:4a:95:cf:eb:
                    41:0c:bb:e7:9b:10:80:0e:da:f6:68:07:b9:8e:3c:
                    16:ed:4d:35:85:d8:fa:ad:c8:dd:11:b9:6f:7f:a7:
                    a1:54:be:95:92:8d:c7:89:81:a2:3e:a5:4c:ea:45:
                    5a:a9:94:0c:d3:82:58:6a:89:c4:04:6f:2b:ad:c3:
                    27:38:5b:fd:5e:82:2d:78:47:48:d7:73:47:5c:e6:
                    3d:89:51:16:44:9d:38:03:b9:bc:93:af:fb:78:6f:
                    e5:16:d9:6d:69:8f:3f:6e:9f:2a:6a:32:bd:14:09:
                    12:50:66:45:b5:74:54:44:7d:93:2c:e7:ee:8d:c8:
                    97:4c:e3:57:a1:35:91:9c:95:75:4e:2a:61:11:18:
                    17:af:a1:41:fa:8c:18:32:05:fa:89:5f:11:46:19:
                    7b:42:d8:ce:32:dc:f9:9f:14:31:91:1b:6c:34:8e:
                    74:30:b9:9d:6a:5d:93:40:06:9c:b1:ec:17:9e:86:
                    7e:92:17:c7:af:7d:41:1c:ff:2d:c6:13:81:73:9d:
                    d8:ba:31:20:38:a4:2d:8c:fb:b2:54:13:82:2d:13:
                    8a:0d:c9:db:e9:26:bf:3e:7e:85:ba:a1:eb:d1:52:
                    81:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:12:0A:E9:9A:AA:DC:00:A3:5A:0C:8B:F5:16:5E:0B:63:A3:8A:1E
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  149041

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.74.0/24
                IPv6:
                  2001:df0:1f40::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:a3:6c:1e:03:32:e3:6c:be:ae:c3:4e:29:ed:79:dd:35:15:
         18:bc:1a:17:5c:2a:7b:53:29:65:b0:57:87:76:ef:73:d5:48:
         d1:da:1f:65:22:8a:b8:1c:ac:3d:cb:35:8a:a7:99:15:fa:62:
         63:1c:d4:55:8c:7b:b7:e7:4c:af:19:99:ef:8b:ca:7a:84:29:
         d0:e5:1f:87:46:e5:7d:f2:34:2c:23:85:6d:74:5f:51:ce:44:
         db:e6:5d:1a:ef:13:64:96:68:9c:f2:1c:98:94:89:5d:b7:52:
         76:1b:51:f0:d6:8f:db:9e:d8:27:28:7c:e2:32:2c:2d:1f:45:
         7f:3d:ff:68:cc:7d:69:57:43:7f:25:a8:17:b6:19:5c:4f:97:
         63:c1:df:e9:d7:1e:a9:d0:a2:42:03:37:d0:7e:39:18:85:11:
         97:77:d2:66:59:81:a6:4d:0b:20:fd:06:15:82:90:b0:42:8c:
         71:30:97:86:ce:fe:82:e1:1b:78:cb:8a:73:00:bc:41:3a:7e:
         6a:4c:3b:95:ef:05:49:1e:39:24:86:80:6f:f7:f5:3e:86:3c:
         1b:49:9e:ed:9e:37:27:d0:b3:ea:16:6e:a3:83:64:4d:ea:bf:
         3a:3c:b0:a9:79:b3:64:e0:a3:2e:41:f1:63:31:ba:82:9c:6f:
         93:f6:24:89
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAiyWMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDEzMDE2MzIxMloXDTI2MDMwMjAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNDU2RTIxMTAvBgNVBAUTKEE2MTIwQUU5OUFBQURDMDBBMzVBMEM4
QkY1MTY1RTBCNjNBMzhBMUUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDM0BUXkfxwZTG+rXnyrNaM/nyqhUjJHC+jSpXP60EMu+ebEIAO2vZoB7mOPBbt
TTWF2PqtyN0RuW9/p6FUvpWSjceJgaI+pUzqRVqplAzTglhqicQEbyutwyc4W/1e
gi14R0jXc0dc5j2JURZEnTgDubyTr/t4b+UW2W1pjz9unypqMr0UCRJQZkW1dFRE
fZMs5+6NyJdM41ehNZGclXVOKmERGBevoUH6jBgyBfqJXxFGGXtC2M4y3PmfFDGR
G2w0jnQwuZ1qXZNABpyx7Beehn6SF8evfUEc/y3GE4Fzndi6MSA4pC2M+7JUE4It
E4oNydvpJr8+foW6oevRUoFLAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUphIK6Zqq
3ACjWgyL9RZeC2Ojih4wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTQ1NkUyL0ExRkFDQkZDNTIwNTExRUM5MzZBQUIyMkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE0NTZFMi9BMUZBQ0JGQzUyMDUxMUVDOTM2QUFCMjJDNEY5QUUwMi9waElLNlpx
cTNBQ2pXZ3lMOVJaZUMyT2ppaDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAkYxMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAZ7FKMA8EAgAC
MAkDBwAgAQ3wH0AwDQYJKoZIhvcNAQELBQADggEBAFGjbB4DMuNsvq7DTinted01
FRi8GhdcKntTKWWwV4d273PVSNHaH2UiirgcrD3LNYqnmRX6YmMc1FWMe7fnTK8Z
me+LynqEKdDlH4dG5X3yNCwjhW10X1HORNvmXRrvE2SWaJzyHJiUiV23UnYbUfDW
j9ue2CcofOIyLC0fRX89/2jMfWlXQ38lqBe2GVxPl2PB3+nXHqnQokIDN9B+ORiF
EZd30mZZgaZNCyD9BhWCkLBCjHEwl4bO/oLhG3jLinMAvEE6fmpMO5XvBUkeOSSG
gG/39T6GPBtJnu2eNyfQs+oWbqODZE3qvzo8sKl5s2Tgoy5B8WMxuoKcb5P2JIk=
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:57:06 2025 by rpki-client