Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Wooi55jo9JLh-FhQOV63mFXso-U.cer
File:                     Wooi55jo9JLh-FhQOV63mFXso-U.cer (raw, json)
Hash identifier:          bBEmAp0yale1zgJbQVx2TS3TbAFLf/96VMReLVITFJk=
Subject key identifier:   5A:8A:22:E7:98:E8:F4:92:E1:F8:58:50:39:5E:B7:98:55:EC:A3:E5
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       5991
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9152A4E/DA1B37D095BB11EB949FE535C4F9AE02/Wooi55jo9JLh-FhQOV63mFXso-U.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9152A4E/DA1B37D095BB11EB949FE535C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 13 Aug 2024 15:07:08 +0000
Certificate not after:    Fri 31 Oct 2025 00:00:00 +0000
Subordinate resources:    AS: 10358

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 20:12:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22929 (0x5991)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Aug 13 15:07:08 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=A9152A4E/serialNumber=5A8A22E798E8F492E1F85850395EB79855ECA3E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c5:79:89:a4:81:b1:24:3d:b6:06:91:31:b6:
                    a7:1b:8d:13:e5:1b:61:62:da:17:ab:89:e1:5f:9d:
                    d7:23:fc:5e:3f:06:88:42:61:87:fe:1d:83:56:f1:
                    97:51:33:c6:7e:0c:1d:5a:59:ab:5a:c1:e9:5d:aa:
                    7e:c7:22:1a:21:56:eb:46:37:12:08:ce:54:1e:3d:
                    1e:38:41:1e:af:0b:a0:1e:6d:d4:7e:ab:83:bd:b9:
                    a6:f0:d4:23:21:35:0e:a9:0e:aa:8d:fb:bf:fb:44:
                    c9:de:64:10:30:24:77:25:bd:65:56:f0:cf:31:14:
                    32:5a:9a:3a:31:89:ca:ef:ab:ce:72:64:f5:72:20:
                    c7:9c:d7:2a:7d:4e:29:b6:8d:c4:98:4f:a8:7b:6e:
                    c6:f8:32:41:5b:43:16:6c:95:b3:17:bb:0e:12:c5:
                    99:07:98:e2:19:4c:a5:69:e2:2a:c0:65:a5:46:12:
                    66:2f:64:7a:b8:95:67:3b:ff:09:2b:a8:0e:04:47:
                    4c:4c:f2:9c:b3:77:6e:12:65:8d:67:b3:79:2a:cb:
                    21:5b:8a:8f:1d:6c:cc:26:e1:84:a7:20:f2:22:7d:
                    03:da:19:0e:73:cf:37:7b:43:bb:5c:b1:5a:1a:ec:
                    41:61:d0:ef:52:a3:0e:92:ad:e6:25:ce:bb:2e:62:
                    1f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:8A:22:E7:98:E8:F4:92:E1:F8:58:50:39:5E:B7:98:55:EC:A3:E5
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9152A4E/DA1B37D095BB11EB949FE535C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9152A4E/DA1B37D095BB11EB949FE535C4F9AE02/Wooi55jo9JLh-FhQOV63mFXso-U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  10358

    Signature Algorithm: sha256WithRSAEncryption
         8e:86:2e:e2:0a:95:c4:ce:ed:57:c8:93:fc:9d:65:f3:d9:68:
         ac:b3:2a:ff:a4:1f:e3:47:8a:db:a8:f8:a5:d1:57:2d:be:ff:
         82:c9:e0:6f:16:09:89:3d:48:2e:28:d8:79:a2:2c:3f:47:ac:
         9d:78:bf:ca:73:6c:47:4d:9d:4c:35:82:57:b0:15:6f:c8:12:
         9e:4b:1e:41:b9:3d:ec:2d:d3:0e:1e:03:42:e5:d3:ed:e5:c8:
         18:a0:aa:98:55:51:2a:6e:87:39:3b:81:6e:b5:38:1b:46:83:
         34:1c:1d:7f:8f:50:81:6b:68:eb:34:e6:20:69:a6:a3:22:0e:
         43:32:9d:ca:e0:ef:a4:4e:b8:d7:cf:79:f0:80:12:fe:a5:17:
         fb:05:cf:b2:ad:56:76:36:29:ea:ad:8f:b9:ea:4d:3e:f5:94:
         6d:08:1c:39:2c:2e:33:38:e6:15:6b:52:96:be:b1:e6:34:70:
         b0:28:9c:2b:b6:c8:09:c6:6e:2b:97:d8:b9:9b:79:11:f0:35:
         b9:7c:53:32:88:1d:25:cc:14:9f:7a:80:87:b7:36:fb:fc:22:
         96:0c:9d:e1:eb:c0:74:83:f3:6a:f0:3c:90:85:42:0f:6a:75:
         39:7a:51:ad:f1:55:f1:be:95:3f:3a:18:1b:cc:e8:4c:32:e1:
         3b:dd:0e:42
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgICWZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjQwODEzMTUwNzA4WhcNMjUxMDMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE1MkE0RTExMC8GA1UEBRMoNUE4QTIyRTc5OEU4RjQ5MkUxRjg1ODUw
Mzk1RUI3OTg1NUVDQTNFNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AMLFeYmkgbEkPbYGkTG2pxuNE+UbYWLaF6uJ4V+d1yP8Xj8GiEJhh/4dg1bxl1Ez
xn4MHVpZq1rB6V2qfsciGiFW60Y3EgjOVB49HjhBHq8LoB5t1H6rg725pvDUIyE1
DqkOqo37v/tEyd5kEDAkdyW9ZVbwzzEUMlqaOjGJyu+rznJk9XIgx5zXKn1OKbaN
xJhPqHtuxvgyQVtDFmyVsxe7DhLFmQeY4hlMpWniKsBlpUYSZi9keriVZzv/CSuo
DgRHTEzynLN3bhJljWezeSrLIVuKjx1szCbhhKcg8iJ9A9oZDnPPN3tDu1yxWhrs
QWHQ71KjDpKt5iXOuy5iH5ECAwEAAaOCAu0wggLpMB0GA1UdDgQWBBRaiiLnmOj0
kuH4WFA5XreYVeyj5TAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTJBNEUvREExQjM3RDA5NUJCMTFFQjk0OUZFNTM1QzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTUyQTRFL0RBMUIzN0QwOTVCQjExRUI5NDlGRTUzNUM0RjlBRTAyL1dvb2k1NWpv
OUpMaC1GaFFPVjYzbUZYc28tVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAZBggrBgEFBQcBCAEB/wQKMAig
BjAEAgIodjANBgkqhkiG9w0BAQsFAAOCAQEAjoYu4gqVxM7tV8iT/J1l89lorLMq
/6Qf40eK26j4pdFXLb7/gsngbxYJiT1ILijYeaIsP0esnXi/ynNsR02dTDWCV7AV
b8gSnkseQbk97C3TDh4DQuXT7eXIGKCqmFVRKm6HOTuBbrU4G0aDNBwdf49QgWto
6zTmIGmmoyIOQzKdyuDvpE6418958IAS/qUX+wXPsq1WdjYp6q2PuepNPvWUbQgc
OSwuMzjmFWtSlr6x5jRwsCicK7bICcZuK5fYuZt5EfA1uXxTMogdJcwUn3qAh7c2
+/wilgyd4evAdIPzavA8kIVCD2p1OXpRrfFV8b6VPzoYG8zoTDLhO90OQg==
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:04:30 2024 by rpki-client on console-fra.rpki-client.org