Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RiOppNLqhemPtaEaDSywgDiHjw8.cer
File:                     RiOppNLqhemPtaEaDSywgDiHjw8.cer (raw, json)
Hash identifier:          TjER2IvvSeFINA3N3L2v31mTxAUwg/kNz1HyG5+6EDc=
Subject key identifier:   46:23:A9:A4:D2:EA:85:E9:8F:B5:A1:1A:0D:2C:B0:80:38:87:8F:0F
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       4C8F
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9128DE9/D0049F861BD511EA80CBCF36C4F9AE02/RiOppNLqhemPtaEaDSywgDiHjw8.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9128DE9/D0049F861BD511EA80CBCF36C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 04 Aug 2023 12:57:50 +0000
Certificate not after:    Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources:    IP: 66.228.0.0/20

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 17:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19599 (0x4c8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Aug  4 12:57:50 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=A9128DE9/serialNumber=4623A9A4D2EA85E98FB5A11A0D2CB08038878F0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:15:1a:59:25:aa:da:34:6b:11:49:c1:5f:08:
                    39:18:f6:97:8f:60:8b:c1:44:c5:92:28:23:fc:bf:
                    ae:12:b4:a9:96:10:8f:a5:66:bd:df:aa:ab:cf:9a:
                    4d:2b:a3:f9:ad:80:56:9d:f5:b0:1b:24:32:d7:4c:
                    36:ea:96:f8:39:1d:b2:89:28:83:3b:04:51:27:f4:
                    fc:41:6e:75:73:9f:87:4f:15:b5:c4:22:1b:d1:40:
                    c0:87:c0:4a:91:16:6b:94:40:2d:62:96:02:1a:5d:
                    d3:a5:96:65:d1:fa:97:7a:49:98:ae:da:68:8a:da:
                    5f:6c:ef:42:f4:9b:6f:b6:60:ab:ff:08:71:ee:46:
                    56:9c:ef:b6:be:c0:86:1e:c0:4e:95:15:d8:ca:31:
                    cb:0c:e6:a8:cd:bf:95:c3:8f:dd:65:06:24:36:0e:
                    e4:bc:f8:d2:75:91:8e:0b:82:13:47:85:30:8c:2f:
                    b0:0f:af:39:6b:7b:73:f2:ba:3a:43:29:8f:91:5e:
                    6e:43:43:8e:90:a0:8b:15:e3:88:a0:1b:80:f7:c5:
                    bf:55:de:18:27:9b:5d:ae:c8:e5:29:f7:8e:82:16:
                    14:8c:81:0b:66:2d:d0:60:34:b5:4b:22:ed:37:22:
                    17:b6:f4:fd:17:70:2c:ae:38:9e:c5:94:0c:b8:b3:
                    42:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:23:A9:A4:D2:EA:85:E9:8F:B5:A1:1A:0D:2C:B0:80:38:87:8F:0F
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D0049F861BD511EA80CBCF36C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D0049F861BD511EA80CBCF36C4F9AE02/RiOppNLqhemPtaEaDSywgDiHjw8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.228.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         41:cb:e8:7a:10:91:47:ef:d5:39:c9:08:4e:41:70:39:3a:6a:
         b4:76:d3:9a:fb:8d:f6:0d:ee:d7:97:fd:74:3b:18:5b:08:d3:
         42:0f:e2:05:5e:2f:13:47:e5:52:c6:3f:db:ce:ec:8f:3e:a1:
         84:32:87:5d:f7:66:b7:4c:ca:e2:27:be:d4:68:18:a6:65:7f:
         89:c7:ea:1d:f7:f8:ec:df:36:16:cf:1e:05:ae:f6:94:f8:c4:
         96:58:8d:ea:e9:d2:58:83:05:3c:a5:07:38:f1:39:88:db:f6:
         aa:01:4b:1e:6e:69:a1:b8:cf:53:94:5a:f8:1a:94:10:69:f3:
         e2:bf:27:80:fc:50:41:28:fd:64:a5:c2:b4:20:90:da:19:f4:
         ca:1d:65:6f:5d:94:18:b8:61:fc:5c:91:a9:e8:d1:ed:d9:4e:
         08:03:c5:26:8d:82:39:ed:6a:69:06:dc:1c:5c:4a:31:96:87:
         e5:cf:cc:d8:78:64:11:b7:fb:fb:bd:ae:aa:e4:84:1f:c6:49:
         bb:40:c0:b0:4e:9a:c4:5c:2b:08:8e:88:a6:f7:69:dc:2f:ef:
         e8:4e:dc:3a:ae:19:77:d2:01:89:2b:d6:60:e2:ff:3c:01:5b:
         0c:74:7b:65:10:94:62:1f:1f:5c:b5:a2:eb:59:d1:8e:3d:37:
         e5:c9:88:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:34:08 2024 by rpki-client on console-fra.rpki-client.org