Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer
File:                     wvKOnRiEOcT-afY6TKptpCSWKR0.cer (raw, json)
Hash identifier:          yGT1rZyEBRId8xDUWTElF5qaONOAVn3/zEgzbDq7yA8=
Subject key identifier:   C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01AADF
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 20 Jun 2023 08:45:34 +0000
Certificate not after:    Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 59117
                          AS: 135074
                          IP: 103.172.110.0/23
                          IP: 103.204.13.0/24
                          IP: 2001:df7:6e80::/47

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109279 (0x1aadf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun 20 08:45:34 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=A9145D25/serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:44:9a:3c:c8:ac:01:78:6b:84:a3:b8:48:e0:
                    a0:20:c8:ed:64:4c:b0:c9:66:d5:99:bb:d0:46:6c:
                    cc:43:1e:bb:28:49:9d:cf:86:ad:7f:e2:2e:1f:bc:
                    59:93:9c:1c:c6:93:5c:b1:3a:ef:85:0e:31:a5:89:
                    93:5f:93:a7:c2:fb:2f:b4:33:79:a4:e3:ff:35:dc:
                    da:8f:e3:4a:0f:3b:d2:f8:a8:a3:bd:39:84:96:30:
                    cc:6f:2d:58:af:8a:ac:6a:41:2e:1d:90:f1:27:f7:
                    fe:f7:31:8e:0d:e3:f0:c2:99:2c:76:2f:b5:9c:bb:
                    7d:b8:88:c6:5b:12:a5:ff:ed:1e:80:1a:10:d5:8e:
                    8e:43:84:50:25:d1:46:0c:d8:e1:82:fc:e2:45:55:
                    e1:48:3f:f6:8f:4f:f3:c5:8a:d1:1e:83:72:ec:dc:
                    3a:b3:72:bd:dd:2d:a7:c3:de:6d:35:99:42:d6:de:
                    d6:82:f2:49:0e:f0:71:b3:df:b2:8f:37:41:3b:11:
                    ec:7f:a9:2e:70:99:66:4b:01:9d:01:09:f9:1d:9b:
                    cb:0b:ed:31:8f:33:0f:44:ae:3d:c7:01:6d:1e:85:
                    13:96:16:63:4a:88:b7:a5:39:ee:99:47:ec:6b:b3:
                    52:33:16:31:23:de:e2:a4:c9:a8:01:ce:13:05:32:
                    4a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59117
                  135074

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.110.0/23
                  103.204.13.0/24
                IPv6:
                  2001:df7:6e80::/47

    Signature Algorithm: sha256WithRSAEncryption
         97:14:78:96:59:62:6e:46:d4:ce:b7:23:9b:ff:a7:3a:d1:fd:
         f6:15:9a:54:c1:71:70:18:9d:17:7c:06:af:62:d9:dc:eb:04:
         8f:cc:e7:f0:97:d9:95:ed:39:33:30:41:a6:ef:f8:ce:e5:16:
         57:3b:07:f6:e4:b4:31:ba:a9:78:6c:f3:36:f3:da:a2:eb:2f:
         61:bc:d8:04:05:05:92:32:dd:1b:74:4b:c2:cd:85:58:96:1f:
         d1:77:3e:82:3a:bd:f1:51:48:0d:48:64:c1:a3:e1:ca:92:50:
         46:a0:28:74:78:92:fa:91:71:78:6d:6a:ca:5f:75:df:13:4f:
         26:3a:93:60:ae:e0:c6:e7:23:00:f2:7c:5d:26:7f:de:8b:2b:
         04:1c:4a:6e:32:e2:37:cf:2c:54:6a:73:4e:2c:9f:d3:ad:69:
         67:c0:11:47:4f:ed:5c:40:7e:17:86:af:55:49:fd:a3:9a:54:
         a6:79:26:b5:56:f6:db:0a:5b:dd:4c:cc:fd:96:ed:17:83:ff:
         49:1f:74:fe:d2:3f:ce:56:ae:c5:75:d5:58:ec:04:d1:a8:1e:
         b1:b0:c5:e7:44:cd:f0:0e:cb:b1:a9:9e:b8:94:a7:a3:84:74:
         b4:f0:c5:67:f9:4b:95:41:05:e1:22:c6:45:fd:c5:b8:bc:a2:
         5c:93:e1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 03:30:29 2024 by rpki-client on console-fra.rpki-client.org