Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer
File:                     -bj5HSkovqo1HMNFxHNpMv2GOfE.cer (raw, json)
Hash identifier:          7Ez8B9JoqbxDY71xM8qz4VrtWdt3ELLo9yLCbSmzwCY=
Subject key identifier:   F9:B8:F9:1D:29:28:BE:AA:35:1C:C3:45:C4:73:69:32:FD:86:39:F1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01A900
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 08 Jun 2023 17:22:18 +0000
Certificate not after:    Tue 30 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 139016
                          IP: 103.138.150.0/23
                          IP: 2001:df0:4080::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Apr 2024 04:49:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108800 (0x1a900)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun  8 17:22:18 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=A917C2CC/serialNumber=F9B8F91D2928BEAA351CC345C4736932FD8639F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f9:ed:47:b0:09:ae:39:cc:d7:fe:b5:3d:41:
                    2b:70:9b:f0:92:ff:ce:20:15:aa:81:b5:b8:67:b1:
                    18:df:1d:aa:ef:72:dc:58:ba:96:58:ae:1a:63:e1:
                    3c:55:8c:73:8b:98:ba:e2:87:0d:ef:6f:cf:73:75:
                    8c:11:d0:b3:e2:24:22:9a:fe:7c:b1:3d:56:37:0d:
                    99:79:86:2a:88:a9:db:7a:27:5a:4a:8c:9b:d9:83:
                    6b:d4:e0:a8:07:bf:ff:b1:e2:a5:be:72:a6:c8:d3:
                    18:88:b6:00:a6:de:30:6d:e1:f4:21:20:12:15:ac:
                    db:49:1d:6f:0e:55:06:ab:5b:fb:65:a6:ba:34:a3:
                    4e:03:83:29:b5:56:5e:e8:97:6e:11:01:4c:cc:03:
                    30:41:a2:c0:9b:2e:7d:6b:e4:96:5c:31:cf:39:08:
                    ec:f6:c1:db:1a:5e:e5:b2:d6:c2:ee:8f:62:1d:5c:
                    e4:ec:48:22:2b:04:1f:99:6e:91:28:d4:92:b1:c8:
                    01:41:21:58:60:8a:2b:eb:61:a5:d9:e0:f5:9a:cf:
                    cb:83:f5:5a:2b:dd:b6:f4:0d:16:df:a8:90:00:6a:
                    79:65:f1:9a:dc:47:32:8e:1a:af:c7:57:59:c1:f2:
                    0d:b4:43:99:5d:c5:df:ea:b9:26:2a:cf:ad:4c:3c:
                    4c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B8:F9:1D:29:28:BE:AA:35:1C:C3:45:C4:73:69:32:FD:86:39:F1
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  139016

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.150.0/23
                IPv6:
                  2001:df0:4080::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:33:e2:13:87:c7:3f:0d:a4:49:84:f5:c5:24:a8:9d:d1:fd:
         59:e4:94:82:ef:82:d8:46:8e:2c:54:85:26:81:76:e9:22:58:
         9c:a2:38:c2:87:08:7c:cc:fa:01:9d:4f:c5:62:f9:85:17:ec:
         66:22:b7:5b:bb:44:84:39:82:fd:ea:1c:7e:2a:ed:a7:c0:e1:
         d6:16:2a:17:bd:9a:9c:26:9b:51:b8:ef:14:2e:8e:88:8c:93:
         ca:e0:30:e8:78:78:73:ec:6d:f9:72:7d:45:69:c2:17:76:69:
         7f:9c:e9:73:e7:d3:76:a5:49:b2:30:f7:f9:b8:e6:d3:3b:aa:
         9a:dd:3a:7a:a8:99:42:43:39:04:f5:8b:ba:30:77:bf:0a:de:
         2c:76:c4:9d:53:91:e5:61:19:40:f8:d1:5a:63:d6:ff:d7:7f:
         ff:f3:66:cf:e9:c4:b0:3a:05:a0:3d:93:ee:4e:27:0a:16:fc:
         a8:3d:1d:af:ad:97:f6:aa:f9:77:8d:06:c9:28:70:4b:23:1f:
         d7:d2:78:d8:1a:72:9d:d4:97:7f:84:59:2d:c1:db:76:99:f4:
         38:6a:6f:27:76:b4:f4:9c:48:8f:ac:30:34:32:21:9c:3e:89:
         e1:1c:6b:a6:e4:24:30:06:8a:0c:a1:5b:68:ce:7c:a4:a3:65:
         d3:f9:1f:95
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAakAMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMDYwODE3MjIxOFoXDTI0MDczMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxN0MyQ0MxMTAvBgNVBAUTKEY5QjhGOTFEMjkyOEJFQUEzNTFDQzM0
NUM0NzM2OTMyRkQ4NjM5RjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDF+e1HsAmuOczX/rU9QStwm/CS/84gFaqBtbhnsRjfHarvctxYupZYrhpj4TxV
jHOLmLrihw3vb89zdYwR0LPiJCKa/nyxPVY3DZl5hiqIqdt6J1pKjJvZg2vU4KgH
v/+x4qW+cqbI0xiItgCm3jBt4fQhIBIVrNtJHW8OVQarW/tlpro0o04Dgym1Vl7o
l24RAUzMAzBBosCbLn1r5JZcMc85COz2wdsaXuWy1sLuj2IdXOTsSCIrBB+ZbpEo
1JKxyAFBIVhgiivrYaXZ4PWaz8uD9Vor3bb0DRbfqJAAanll8ZrcRzKOGq/HV1nB
8g20Q5ldxd/quSYqz61MPExvAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQU+bj5HSko
vqo1HMNFxHNpMv2GOfEwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTdDMkNDL0NDMTkzODc2NzhEQTExRTk5MDFCN0Y0REM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE3QzJDQy9DQzE5Mzg3Njc4REExMUU5OTAxQjdGNERDNEY5QUUwMi8tYmo1SFNr
b3ZxbzFITU5GeEhOcE12MkdPZkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAh8IMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ4qWMA8EAgAC
MAkDBwAgAQ3wQIAwDQYJKoZIhvcNAQELBQADggEBAAAz4hOHxz8NpEmE9cUkqJ3R
/VnklILvgthGjixUhSaBdukiWJyiOMKHCHzM+gGdT8Vi+YUX7GYit1u7RIQ5gv3q
HH4q7afA4dYWKhe9mpwmm1G47xQujoiMk8rgMOh4eHPsbflyfUVpwhd2aX+c6XPn
03alSbIw9/m45tM7qprdOnqomUJDOQT1i7owd78K3ix2xJ1TkeVhGUD40Vpj1v/X
f//zZs/pxLA6BaA9k+5OJwoW/Kg9Ha+tl/aq+XeNBskocEsjH9fSeNgacp3Ul3+E
WS3B23aZ9Dhqbyd2tPScSI+sMDQyIZw+ieEca6bkJDAGigyhW2jOfKSjZdP5H5U=
-----END CERTIFICATE-----
Generated at Fri Mar 29 06:01:56 2024 by rpki-client on console-fra.rpki-client.org