Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer
File:                     -JdCLlAQBtJgHYWlAXlTJrr-c4g.cer (raw, json)
Hash identifier:          mGPOCAZEDegcWlVcZ8FBu1u8HF/kwe2hikfvGy0HkBM=
Subject key identifier:   F8:97:42:2E:50:10:06:D2:60:1D:85:A5:01:79:53:26:BA:FE:73:88
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01BECE
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 21 Sep 2023 05:38:20 +0000
Certificate not after:    Sat 31 Aug 2024 00:00:00 +0000
Subordinate resources:    AS: 137427
                          IP: 103.151.172.0/23
                          IP: 2001:df3:cd80::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 10:14:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114382 (0x1bece)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep 21 05:38:20 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=A9170829/serialNumber=F897422E501006D2601D85A501795326BAFE7388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c3:5e:5d:dd:9d:c0:42:a8:f2:13:a8:98:8f:
                    57:11:27:09:ee:ac:0c:dd:62:d0:53:a6:5e:d6:d2:
                    49:b3:e1:c3:7d:b8:8a:e0:c4:c5:7a:f6:ab:0e:23:
                    42:cc:ec:02:94:c0:31:ef:ea:01:a0:78:76:01:e4:
                    a0:e1:c8:9d:f9:f0:4c:81:af:f2:74:00:f0:4c:bd:
                    33:f7:0b:42:2e:80:c9:98:17:9e:9d:17:c1:a4:72:
                    80:16:ac:fb:79:dd:ad:4b:0b:34:cf:c1:11:6b:f7:
                    a9:71:3b:c4:c4:e1:95:4b:fb:9a:f0:a4:9f:45:d2:
                    9f:5c:59:b2:33:54:ca:0f:34:f3:8d:79:59:9e:2a:
                    e2:0a:79:8d:af:14:fd:03:c9:b8:e5:19:86:7a:c9:
                    52:a5:ba:88:0c:e1:f8:83:d8:68:87:1c:e3:67:49:
                    b6:cf:4b:63:ce:55:4b:f1:7a:6c:20:ac:df:4f:c8:
                    8f:74:e9:9e:65:44:26:06:68:09:87:55:f2:01:63:
                    93:87:d8:62:c2:ff:f8:d1:1a:58:87:da:b8:d9:55:
                    78:5b:8f:89:3c:da:ba:62:e2:ba:b1:89:67:4a:a5:
                    a6:b5:21:ad:c8:2c:41:1d:c1:3a:48:00:99:1f:d1:
                    85:61:69:6b:fb:48:23:03:42:d0:ff:f3:ed:53:59:
                    42:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:97:42:2E:50:10:06:D2:60:1D:85:A5:01:79:53:26:BA:FE:73:88
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137427

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.172.0/23
                IPv6:
                  2001:df3:cd80::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:78:d1:bb:8c:e8:f0:9b:f9:8a:74:f4:fd:b6:63:1a:fb:fa:
         bf:67:e9:86:5a:99:4c:ba:22:eb:b6:c6:a3:e5:c0:71:ce:86:
         eb:7c:c3:3c:b6:bb:45:a0:6a:5a:e2:dd:98:63:59:c3:23:32:
         4d:61:60:16:87:f1:88:ae:b0:e5:83:e0:32:d0:aa:8f:0f:a8:
         54:25:af:28:21:53:cf:9f:74:ed:e8:61:4e:36:56:1d:1a:52:
         85:88:fc:81:05:2d:fb:e4:c8:ed:ab:83:21:bc:cd:a5:53:79:
         07:47:06:de:40:c5:3b:10:48:5e:b6:59:ff:75:e2:61:af:17:
         78:37:e0:ed:95:9b:ae:3b:17:3d:9f:41:fe:7f:6a:85:56:72:
         6f:0a:1b:47:c6:20:7c:0b:32:a6:1f:57:99:85:81:25:94:f8:
         6b:dd:11:3c:71:e8:42:21:cb:62:c5:53:d9:ba:7b:13:31:83:
         74:9a:fe:70:be:f4:9e:39:ac:0a:a1:27:7c:eb:cf:6c:c5:ca:
         c0:73:25:54:c6:89:7e:5a:77:cb:d6:f9:bf:02:3d:1f:ee:36:
         e0:88:49:c6:de:e3:c5:18:44:60:2f:bb:1c:3f:73:96:24:65:
         96:75:12:0d:72:6e:f0:81:2f:53:23:53:f2:02:43:1d:ae:a5:
         25:9f:63:a8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 2 12:24:13 2024 by rpki-client on console-ams.rpki-client.org