Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.cer
File:                     -Bj8mI7HAyw-LGpIpVSYq3zVZf0.cer (raw, json)
Hash identifier:          WkkTr1PYzL6FN2JMgcugazVIHYTIt7BP1lJ4ix8hxx4=
Subject key identifier:   F8:18:FC:98:8E:C7:03:2C:3E:2C:6A:48:A5:54:98:AB:7C:D5:65:FD
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01A78B
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 02 Jun 2023 01:50:57 +0000
Certificate not after:    Tue 30 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 135420
                          IP: 45.249.184.0/22
                          IP: 103.218.188.0/22
                          IP: 2402:48c0::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Apr 2024 09:37:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108427 (0x1a78b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun  2 01:50:57 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=A91B0F3F/serialNumber=F818FC988EC7032C3E2C6A48A55498AB7CD565FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fd:40:fc:9f:07:65:3c:88:af:21:f4:79:00:
                    2e:6f:02:d7:26:67:17:a1:d5:c3:6f:78:d5:54:34:
                    00:a6:4e:6a:60:c5:58:dc:47:07:22:37:84:67:64:
                    85:94:bd:8d:a9:5b:d0:21:91:95:f5:05:3d:ed:af:
                    6e:b4:ee:5e:77:d7:e1:5d:c8:26:4c:2c:5a:31:52:
                    56:8c:3e:5d:3e:60:a3:f3:91:e3:8b:d5:2f:c0:48:
                    66:f1:d8:51:de:2a:9b:03:c5:eb:32:4d:10:44:9b:
                    f9:8e:ed:23:78:c0:96:ce:ac:b8:58:8d:a5:6c:d5:
                    29:26:b6:96:8d:f0:e2:1a:6a:19:bf:e7:b9:62:7d:
                    cf:d9:aa:f9:f2:89:b1:8c:49:95:bc:08:f7:46:22:
                    e1:71:97:65:74:cc:fd:e8:fa:19:64:71:2f:60:8e:
                    27:7d:74:c0:1e:ad:77:d9:f0:73:97:08:d5:78:c3:
                    4f:a9:62:97:01:b5:cd:4d:77:85:ec:51:e4:a1:24:
                    7b:59:78:98:c8:7a:88:88:9b:11:8e:51:0d:bb:52:
                    ae:88:f2:b0:c8:81:27:2c:2d:06:fd:fa:6b:f2:f2:
                    76:af:40:f3:fd:cc:3a:ca:70:65:b2:47:6d:45:03:
                    ab:ce:10:7b:80:02:53:7a:d7:f5:8f:67:36:92:48:
                    3c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:18:FC:98:8E:C7:03:2C:3E:2C:6A:48:A5:54:98:AB:7C:D5:65:FD
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  135420

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.249.184.0/22
                  103.218.188.0/22
                IPv6:
                  2402:48c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:53:ef:c5:8b:2c:45:89:fc:f1:4f:1d:2b:98:45:5d:a8:64:
         19:63:63:11:3e:98:99:9e:6f:a1:0b:1d:81:14:33:b5:45:f7:
         70:db:c8:cf:46:3f:f4:5e:18:a5:5e:5b:74:61:e6:e6:f6:7a:
         ae:55:73:fd:6b:91:96:97:72:62:02:2b:d8:d7:f7:0c:0e:8b:
         17:c4:df:dd:a5:20:87:dc:64:ae:ce:18:ab:c8:45:cf:bf:4c:
         c0:c6:8c:4e:e2:d8:ea:cb:b6:d2:4f:6f:4f:11:01:85:6c:90:
         97:fa:94:ae:2e:37:e7:a4:57:07:8f:c6:03:ea:52:e6:f2:73:
         54:ca:71:b3:6d:a6:b8:97:e0:15:0b:2f:3b:53:57:5d:31:47:
         e5:cc:9a:bb:17:82:2d:49:8e:f6:30:29:b9:1b:00:55:dc:13:
         39:38:75:c2:86:3c:40:b5:98:03:24:74:4f:cf:82:d0:e9:4e:
         50:78:9d:d4:ad:24:3b:37:a8:5b:cd:c8:92:85:80:3c:47:ff:
         e1:cc:c6:f9:6f:10:79:d4:8f:ec:a8:c1:29:ba:9b:31:d9:d3:
         7b:87:2d:66:da:21:1a:f7:db:55:2a:7c:e2:b3:8f:b0:50:b2:
         a2:49:4f:16:82:58:d5:fb:d4:5a:ba:f3:ee:d0:63:d3:8a:21:
         d5:c8:80:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 11:22:03 2024 by rpki-client on console-fra.rpki-client.org