Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.cer
File:                     803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.cer (raw, json)
Hash identifier:          /OnegJUAAuqfAoDlcL5tO72VtYbki7fWSXW8E56YfRI=
Subject key identifier:   80:3C:9F:F1:02:83:6C:EC:8C:EC:49:F0:1F:CF:AA:0E:92:E2:6A:F3
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       3479D71816437B15D861D9B848B28E11EE69D5FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Mon 01 Jul 2024 15:09:44 +0000
Certificate not after:    Mon 30 Jun 2025 15:14:44 +0000
Subordinate resources:    IP: 103.208.204.0/22
                          IP: 2404:4780::/32

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:79:d7:18:16:43:7b:15:d8:61:d9:b8:48:b2:8e:11:ee:69:d5:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 15:09:44 2024 GMT
            Not After : Jun 30 15:14:44 2025 GMT
        Subject: CN=803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:04:24:4e:56:29:8d:66:ff:e3:00:79:90:a3:
                    72:4c:af:1e:ca:e2:c7:40:b2:74:2e:90:d5:4d:5e:
                    a2:5d:bc:57:4a:9b:fa:9b:6b:a3:05:bc:1e:76:27:
                    9d:b9:57:68:3c:58:15:7d:23:b9:64:78:e7:5a:6d:
                    d4:9a:5d:1c:d7:83:6b:c1:bc:3c:5c:de:99:ea:91:
                    f7:3e:ca:76:6b:89:96:7f:93:1e:de:e6:f9:7a:85:
                    f8:80:35:b9:ce:af:aa:e6:b2:77:22:1b:fa:9d:40:
                    4d:4b:48:c1:62:fe:f9:ba:1b:9e:2a:fc:67:8d:2d:
                    e3:4c:8b:28:0b:98:9d:f4:ce:4c:03:ce:f1:d0:98:
                    47:c3:00:07:9d:11:9e:55:06:c5:4a:e1:0b:d4:3c:
                    08:29:04:a8:76:db:fd:05:c1:27:f3:fb:8e:dd:6c:
                    79:ee:a8:ea:b6:08:95:ad:82:fb:ed:f3:1c:b2:d1:
                    02:9e:bc:84:b0:b8:a1:ce:11:7d:76:fa:29:44:88:
                    e4:45:9a:5a:8b:42:74:6b:13:b1:c2:a9:93:ed:1b:
                    f6:f9:99:53:f5:3a:1b:4a:d9:29:b8:a5:cc:71:84:
                    c8:0a:b8:9b:75:03:35:ca:74:26:a8:54:a0:e7:3c:
                    2b:76:f8:7c:49:70:ab:b2:85:a3:70:ed:76:ad:3f:
                    5f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                80:3C:9F:F1:02:83:6C:EC:8C:EC:49:F0:1F:CF:AA:0E:92:E2:6A:F3
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.208.204.0/22
                IPv6:
                  2404:4780::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:35:b2:77:e3:4e:5a:7c:37:35:ab:b4:1b:de:6a:06:c9:65:
         8b:f0:98:a3:df:3f:b5:19:2b:9c:2e:26:af:73:7b:da:3e:ab:
         ba:80:a4:ff:93:e9:b9:58:e7:ac:97:b1:cc:7a:40:00:ab:b3:
         e5:77:06:09:a0:55:2f:d6:70:06:4a:98:6b:b4:58:c1:39:50:
         cd:4c:8f:8b:48:de:2a:03:84:62:f5:fd:35:d3:87:95:7a:64:
         35:ac:c6:a3:55:36:44:5d:bf:2b:75:21:7b:0f:a9:38:e9:be:
         c4:1a:30:93:79:86:13:df:ee:5f:c2:e0:67:4b:17:a8:73:c5:
         f5:6d:cf:b7:2c:5b:d4:02:aa:c8:ed:b6:93:b0:f5:aa:72:32:
         67:91:68:e3:69:e7:c2:ae:66:ac:ff:1b:48:45:1a:0e:b6:6e:
         91:4d:6c:bb:c3:29:15:f3:e6:04:4d:e9:ca:22:58:e2:e7:c4:
         02:85:4b:21:2b:73:d4:1b:0c:b8:76:29:52:8c:9d:a7:b2:0a:
         f9:3e:01:39:72:b9:85:c1:23:75:ec:43:9b:c1:b2:41:96:56:
         45:e8:a9:19:36:95:24:95:07:cb:ff:80:39:0f:39:0b:7b:be:
         20:18:cd:aa:2f:6d:59:7e:27:c2:0a:e7:d8:68:f7:9c:d2:92:
         f0:e9:2f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:43 2024 by rpki-client on console-ams.rpki-client.org