Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/A230D664FEDFC0266349811ED3999BE5220F1DEA.cer
File:                     A230D664FEDFC0266349811ED3999BE5220F1DEA.cer (raw, json)
Hash identifier:          IxHnEhTkkZJLpXXaLLhpXI6KFO1YcvCzTjYBvb7ye5c=
Subject key identifier:   A2:30:D6:64:FE:DF:C0:26:63:49:81:1E:D3:99:9B:E5:22:0F:1D:EA
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       57EAC15391E2021374ADBB63DA039862C683D2E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Thu 23 Nov 2023 20:15:56 +0000
Certificate not after:    Thu 21 Nov 2024 20:20:56 +0000
Subordinate resources:    IP: 103.162.34.0/24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 May 2024 03:34:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ea:c1:53:91:e2:02:13:74:ad:bb:63:da:03:98:62:c6:83:d2:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 23 20:15:56 2023 GMT
            Not After : Nov 21 20:20:56 2024 GMT
        Subject: CN=A230D664FEDFC0266349811ED3999BE5220F1DEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:36:9d:55:65:40:ab:f8:d9:6d:e8:b9:5b:92:
                    fd:5f:60:c7:8e:56:86:53:80:fa:2d:e2:6a:fe:f5:
                    fd:b7:d9:2c:66:e3:7e:8c:5e:ea:83:6a:1d:45:dd:
                    80:eb:7f:1d:d2:db:a7:ad:2b:9f:b7:25:41:21:a4:
                    e0:09:46:fb:c2:c1:68:4a:c0:f0:61:b5:7d:69:78:
                    14:e8:57:52:93:1d:7c:fe:fb:27:82:d3:22:0b:17:
                    fb:28:8d:d6:4c:e6:7e:0d:99:c1:aa:99:eb:53:1e:
                    9d:9f:b7:e3:7a:c5:5a:ac:da:b4:37:ac:75:51:85:
                    f5:49:d1:7d:54:4c:41:b6:1e:3a:e8:4a:67:66:3f:
                    71:c3:73:7e:b0:d3:37:f7:a6:61:db:30:8d:9e:2e:
                    84:3e:d2:11:15:0f:63:8a:0f:65:46:9b:f9:68:82:
                    4e:17:91:70:0f:62:88:d1:4a:11:e4:fc:a8:7f:57:
                    7f:ee:ec:5b:e4:7e:ef:ca:60:fe:de:32:08:37:2d:
                    3d:e5:ab:72:9a:a2:26:2b:5c:52:7a:ed:38:3f:0a:
                    d1:56:9f:65:1b:1b:0c:ec:37:eb:9d:bb:96:ae:f9:
                    65:ae:db:34:8f:e3:c5:8c:9f:e4:76:f5:37:de:64:
                    1d:d4:b6:a4:17:fd:62:a1:d5:e7:82:27:86:96:86:
                    e0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A2:30:D6:64:FE:DF:C0:26:63:49:81:1E:D3:99:9B:E5:22:0F:1D:EA
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:3a:c0:75:2c:24:cd:5b:e8:38:e2:4c:fc:2d:51:28:c8:37:
         d5:25:da:1c:6c:65:57:02:55:75:e6:81:ff:b2:0d:22:b4:6b:
         7f:a3:b4:b6:d6:e5:9f:f9:55:ff:8f:e9:03:de:93:12:04:e7:
         0d:56:7d:f5:e7:0b:38:cc:c7:97:fb:bd:7a:52:05:6a:8a:63:
         c0:06:70:e8:6e:28:4f:7f:9d:78:1b:40:60:22:51:8f:a9:97:
         8a:a8:44:dc:94:fc:b8:3f:d5:75:20:0e:bd:d7:b1:b2:c7:d8:
         a0:56:70:55:fa:82:16:e8:f2:6c:d4:48:6b:59:8d:51:b7:c7:
         95:92:ed:63:30:97:cd:d9:20:6c:a9:d1:fb:8e:0f:3b:92:06:
         a0:c8:38:6f:16:61:5b:00:8b:bb:1a:1b:69:87:7f:84:e7:4e:
         62:02:fb:78:f1:f0:1e:80:04:fb:36:d0:a1:c9:f1:d4:d2:3f:
         fc:93:c5:77:b2:a2:bb:a0:ae:7e:52:ab:af:86:7e:8a:78:11:
         ee:0e:46:06:6b:05:40:6f:8d:3a:49:b6:e9:9a:b0:36:b9:2d:
         29:87:d2:97:68:b2:3e:2e:aa:bf:d9:c0:a2:1d:4d:63:e3:23:
         92:f9:39:55:b4:aa:0f:b7:ce:09:a0:6b:d9:42:80:68:9a:70:
         66:5e:27:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 21:02:19 2024 by rpki-client on console-fra.rpki-client.org