Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
File:                     1j3oKnWfllf48HOyUSUarme6S6Y.cer (raw, json)
Hash identifier:          b7c6zXQ8oraxVWBDAeHND1rAQRvIBx4Gz6qVRAAlLhM=
Subject key identifier:   D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       4C4A
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 25 Jul 2023 13:03:05 +0000
Certificate not after:    Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources:    IP: 147.50.0.0 -- 147.50.79.255
                          IP: 147.50.128.0 -- 147.50.175.255
                          IP: 147.50.224.0/19

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Apr 2024 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19530 (0x4c4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jul 25 13:03:05 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:09:52:6f:ad:2e:28:53:91:ec:1f:b7:34:dd:
                    b9:e0:8d:2e:0f:f5:2d:2b:1f:a4:44:64:f7:c5:46:
                    91:47:0a:e5:23:06:19:5b:d6:c4:49:0a:46:41:bd:
                    72:d9:e2:aa:d9:c5:fc:fd:a3:ac:61:3d:01:34:ca:
                    d3:c1:75:03:b2:b9:5b:1a:da:f9:32:69:1e:dd:7a:
                    05:47:27:a8:1e:b1:76:56:79:cf:68:61:17:3e:96:
                    49:6d:65:84:3e:2e:67:dd:96:00:9c:e3:4f:bd:66:
                    e0:b0:5d:ad:39:ea:ca:12:14:5f:33:e4:16:9a:3a:
                    1d:fe:71:fb:0c:b7:7a:27:31:6e:0a:9b:d5:f5:ad:
                    3d:ab:7f:fa:81:cb:4c:53:fd:d4:a5:f0:a6:b7:e0:
                    5c:b5:a1:e8:c6:b9:b6:8c:f3:f2:8a:77:29:30:1f:
                    41:ae:6e:41:68:d1:41:df:42:c2:79:37:26:ca:3f:
                    a0:80:f3:0d:a7:18:0b:82:98:a4:cb:60:d4:cc:e5:
                    84:8c:cc:1b:36:3a:23:7f:d1:6e:b4:3d:38:5a:6c:
                    ca:45:c1:29:47:4c:13:51:db:90:6b:c3:a3:54:03:
                    ca:01:02:7c:aa:34:8b:2e:17:23:9e:77:30:9a:2d:
                    98:81:fc:84:99:d5:91:81:1a:16:ff:a0:5a:e7:5f:
                    57:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.50.0.0-147.50.79.255
                  147.50.128.0-147.50.175.255
                  147.50.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c8:48:fc:5d:91:15:5b:b4:5e:86:ec:12:82:31:eb:57:65:8a:
         11:18:c7:03:2f:f0:39:43:24:18:b5:30:c6:a3:4a:f1:87:01:
         d5:a5:4c:59:ad:ce:ed:c7:26:13:2d:a6:52:6d:45:3f:ed:08:
         23:f7:ed:c9:30:98:6c:98:11:72:bc:d7:15:5e:da:01:0f:ef:
         31:ed:93:84:3b:cb:d5:a7:9e:b5:14:0d:de:71:91:0a:6d:cd:
         8b:c6:4d:3c:e7:16:c9:3f:79:93:f0:f5:9e:5d:00:b5:2b:95:
         aa:37:a2:8a:d8:65:3a:a5:46:76:f0:2f:86:c2:2f:a2:e9:06:
         dc:b1:6a:c1:33:33:71:1a:49:43:45:85:94:32:6a:e2:5b:b4:
         7d:e8:5f:c6:f3:30:dd:5e:e2:a6:ab:c1:f2:2f:d5:24:5a:e4:
         f5:b9:ab:4e:6b:fe:c6:ce:5c:99:33:a1:62:c2:52:01:5e:13:
         05:9c:43:08:ea:9e:3d:41:4b:ac:d0:5a:51:8c:25:64:4e:0b:
         66:db:17:ae:20:d6:23:bb:f8:ac:7b:e4:49:93:1f:86:34:ed:
         27:ae:f9:1b:0a:96:f6:d3:03:70:7b:48:29:06:66:b9:81:28:
         3d:89:9a:e9:18:0c:ae:fc:38:69:84:d0:88:1c:af:55:7c:fd:
         d5:9b:7b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 03:43:54 2024 by rpki-client on console-fra.rpki-client.org