Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/REDuIbNImmUKYWsSDY5b5Xku4Es.cer
File:                     REDuIbNImmUKYWsSDY5b5Xku4Es.cer (raw, json)
Hash identifier:          W/Ev6wI3NoOAlordEnozgTBk+nQ/djxwhEWkn0B9/lQ=
Subject key identifier:   44:40:EE:21:B3:48:9A:65:0A:61:6B:12:0D:8E:5B:E5:79:2E:E0:4B
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       4E7D
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 02 Nov 2023 19:17:17 +0000
Certificate not after:    Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources:    IP: 198.244.10.0/23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 May 2024 02:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20093 (0x4e7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Nov  2 19:17:17 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=A91CE3A3/serialNumber=4440EE21B3489A650A616B120D8E5BE5792EE04B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5d:46:7c:35:ef:ec:ba:c1:09:a7:c4:fa:88:
                    f3:45:18:20:54:13:db:8e:fc:a4:54:d4:c1:9a:d6:
                    8e:9e:49:9e:29:5a:e8:b2:e2:5c:30:11:15:ea:fc:
                    d7:44:b8:f6:b9:3b:ef:5a:63:81:98:1a:5b:14:2a:
                    a2:09:1a:3b:8c:db:3e:d7:ef:e2:15:81:1e:74:59:
                    c2:e3:b0:ee:08:8c:52:29:25:c4:4c:f3:53:56:3e:
                    49:45:3a:ac:de:bd:d4:c2:eb:f6:a1:2b:07:94:92:
                    3d:b1:1b:40:f0:8b:41:be:5a:d6:13:90:4f:7a:68:
                    89:3a:6d:4f:94:18:90:83:72:b7:5b:fe:bb:47:72:
                    20:74:25:a1:3b:c2:3f:06:7b:ec:a2:25:b7:74:d9:
                    09:82:1e:67:9d:17:ba:85:cd:a2:09:95:5d:63:7a:
                    bd:6f:e7:f0:1c:d3:43:ac:ab:1e:81:62:d2:04:6d:
                    ac:15:57:a1:92:57:7f:8e:b9:1d:91:e7:75:6b:41:
                    ad:0d:9e:bd:da:e2:08:0d:94:3c:69:51:a5:9c:b6:
                    15:b0:d2:f3:7a:89:a8:77:70:9b:60:f8:3f:60:ff:
                    c7:11:e6:b2:5f:49:6d:19:c9:a4:7b:77:59:6d:ab:
                    9a:39:4b:fb:c8:d8:b6:5a:45:73:40:bb:08:54:7b:
                    34:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:40:EE:21:B3:48:9A:65:0A:61:6B:12:0D:8E:5B:E5:79:2E:E0:4B
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.244.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:9b:8b:08:9e:97:4d:cc:8a:31:98:0b:08:1a:21:be:13:80:
         51:85:05:bc:60:ab:51:7a:38:63:82:14:1a:8e:9f:af:7c:fb:
         87:6d:61:70:d9:e8:e3:ee:b0:fb:2b:c4:b2:4c:f9:fc:85:33:
         9f:dd:c3:a0:25:09:88:f9:de:13:07:5d:0c:c1:ad:f4:f8:c6:
         c3:99:79:53:6b:86:46:66:f7:7a:90:01:7f:a1:9d:18:cd:a2:
         8f:07:54:e2:04:f4:6c:bf:9e:a4:d1:05:68:fc:97:cd:7a:a2:
         b4:15:69:20:45:5f:65:85:fa:9e:93:7c:92:0a:38:76:84:c2:
         7c:81:24:1a:6a:eb:d0:69:1a:3a:5c:0c:62:ce:1c:af:ca:83:
         e2:23:59:40:53:40:d2:74:dd:ad:38:01:01:fd:51:7b:49:f1:
         d3:35:04:53:be:48:21:67:55:23:22:93:7f:9f:0d:b7:44:35:
         fd:80:39:e3:79:c8:d4:e9:00:5d:5a:4d:66:e6:45:af:f1:5c:
         e1:4b:78:4d:cc:b9:ff:35:a6:2b:2b:cb:5e:2c:42:51:01:ac:
         47:87:e5:58:e9:8c:a6:4a:f6:b5:f1:c2:ed:12:1c:25:fe:90:
         5d:80:f3:26:da:fd:e8:25:e2:7e:a0:19:23:9a:b2:95:32:ca:
         e4:e3:8f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 03:22:08 2024 by rpki-client on console-ams.rpki-client.org