Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer
File:                     rXZeStXAqz70hB0-NIQoC-rLzC0.cer (raw, json)
Hash identifier:          ThINy1rFhAIaTV3dLANWXqPATItnKBtWCm0ABh02C8E=
Subject key identifier:   AD:76:5E:4A:D5:C0:AB:3E:F4:84:1D:3E:34:84:28:0B:EA:CB:CC:2D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0237D6
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 17 Mar 2025 13:39:14 +0000
Certificate not after:    Thu 28 May 2026 00:00:00 +0000
Subordinate resources:    AS: 151833
                          IP: 203.223.179.0/24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 21:11:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145366 (0x237d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE
        Validity
            Not Before: Mar 17 13:39:14 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=A913CC0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c4:71:96:ec:b7:f4:05:aa:6f:ec:9d:bd:40:
                    86:55:0d:01:53:6a:f7:eb:ef:8e:db:ff:47:1c:1a:
                    8e:f7:f2:93:11:42:b8:4f:4b:f4:2e:dc:b0:0d:75:
                    14:2a:21:1e:3b:26:58:e9:00:27:96:d9:2a:90:df:
                    f1:19:44:18:93:13:cc:54:d1:2b:c3:e7:55:57:8f:
                    6f:01:05:0f:23:c8:54:97:fd:75:35:bf:df:2c:24:
                    69:46:70:87:4f:e4:c9:12:88:05:28:85:1e:b0:e1:
                    8e:e5:24:01:4d:49:29:bf:57:24:d9:b4:8e:58:22:
                    07:a3:b5:f9:7b:58:d4:67:5e:63:ec:bf:b6:cd:c8:
                    29:fc:ef:f2:5c:22:73:5b:ed:89:0b:db:9e:c1:f8:
                    f7:24:81:15:62:76:26:d6:e9:45:6b:50:77:72:e2:
                    6f:02:69:53:c6:a0:18:19:16:3b:6f:6b:d1:ec:56:
                    69:80:10:d3:ce:4f:72:ce:d0:a7:cd:01:8c:b4:e5:
                    c2:c1:c5:e9:09:09:a3:34:14:3c:1e:4e:f6:56:7f:
                    f1:4e:8f:a7:50:8b:1e:45:5d:15:00:22:82:91:c1:
                    6d:cc:4c:32:c2:91:d4:99:af:49:3d:f2:96:a7:fd:
                    28:e9:75:db:2a:b2:a9:85:49:20:79:1a:a9:87:50:
                    b9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:76:5E:4A:D5:C0:AB:3E:F4:84:1D:3E:34:84:28:0B:EA:CB:CC:2D
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  151833

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.223.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:dc:67:ff:a3:79:57:df:c0:27:70:62:81:29:21:6d:46:b5:
         2d:d8:2b:20:d3:b1:f6:f4:ad:a6:65:b4:d7:df:7e:6f:c9:0b:
         83:0e:af:2a:30:6f:99:07:2f:80:c1:61:45:75:46:a5:43:f7:
         66:1b:4c:53:46:45:95:43:60:6b:0f:17:7f:21:16:22:fa:c5:
         13:e6:80:18:07:74:ed:f2:6d:2a:bd:ad:52:92:8d:08:fb:9f:
         20:db:82:ba:d3:c3:ae:f7:f6:cb:4f:be:79:97:5a:9f:4a:33:
         f0:99:58:5c:cc:0e:3f:e4:a3:c5:c6:b7:f3:8d:a4:2b:dc:1d:
         19:9c:10:68:72:0a:a2:0e:4f:2a:9b:04:a5:d8:79:9a:ee:a0:
         74:9d:99:f7:8f:c7:0c:89:4a:10:0e:1f:ee:45:b5:00:02:79:
         1a:cb:6b:a0:95:6a:d4:82:16:8f:f6:67:e4:6b:56:f6:7d:d0:
         4a:87:e1:c6:2d:4d:25:ce:68:2d:23:b0:05:c3:6b:c7:fa:24:
         4e:f3:e7:d8:2f:cb:91:c5:6b:9d:7c:be:4e:11:59:3c:7d:2f:
         1c:70:2f:8c:5d:53:9f:dd:6b:26:21:17:9f:74:4c:1e:aa:e0:
         29:d6:e9:88:a3:44:19:ce:bf:45:21:95:90:b8:f0:cd:42:ff:
         39:c4:b1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:34:52 2025 by rpki-client