Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-o32EYRRvVM4cqyjdiK_c77RlEE.cer
File:                     -o32EYRRvVM4cqyjdiK_c77RlEE.cer (raw, json)
Hash identifier:          rDPljlg6BChaSxT2Qk3/viUkA3LZJgIl8jCUiXzR6f8=
Subject key identifier:   FA:8D:F6:11:84:51:BD:53:38:72:AC:A3:76:22:BF:73:BE:D1:94:41
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01B1C4
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 24 Jul 2023 13:15:48 +0000
Certificate not after:    Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources:    AS: 149874
                          IP: 103.189.240.0/23
                          IP: 2400:89a0::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 23:35:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111044 (0x1b1c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 24 13:15:48 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=A9135450/serialNumber=FA8DF6118451BD533872ACA37622BF73BED19441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:42:a4:50:db:34:11:a6:7e:38:58:15:56:71:
                    d9:ef:c4:32:5b:e1:79:35:2a:e5:de:29:2f:f4:c8:
                    b2:d1:f7:c9:0b:95:be:c1:f6:c6:bb:e7:69:25:2c:
                    14:e6:1c:68:5b:5a:25:c3:35:ae:20:3e:4e:e6:b8:
                    99:d9:a7:b4:b3:c5:d8:5e:9b:af:29:10:ab:71:10:
                    b1:5d:25:64:30:c5:31:5f:8d:f5:73:31:af:24:47:
                    6e:fa:a4:da:c9:8b:39:be:7e:42:5c:e3:0f:ea:46:
                    f8:d8:43:6f:05:db:95:ec:2d:1f:fa:29:d2:ab:09:
                    b5:45:ed:ea:50:aa:07:69:26:3f:b1:bd:84:ac:09:
                    61:47:8c:eb:69:ea:20:6f:a0:1e:8d:df:65:e7:ce:
                    a1:3d:8e:af:14:15:0f:1d:02:c1:11:f6:8a:ad:7d:
                    43:62:03:46:ca:28:e1:95:50:fe:bc:a9:4a:c2:0b:
                    c8:30:5f:59:a0:69:e0:e1:f9:ad:76:80:35:96:e0:
                    4c:8d:21:a9:b7:c7:b4:5f:55:ce:1d:a7:b2:aa:90:
                    34:af:86:6e:98:f4:d7:d8:27:5c:eb:98:45:41:ca:
                    b7:09:72:2c:4d:5a:5c:85:99:e4:5f:d5:c7:95:79:
                    17:ad:42:6c:db:60:34:79:03:23:7c:23:6e:2c:0b:
                    b1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:8D:F6:11:84:51:BD:53:38:72:AC:A3:76:22:BF:73:BE:D1:94:41
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  149874

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.240.0/23
                IPv6:
                  2400:89a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:46:42:83:23:ab:61:46:a6:5b:55:01:10:30:fe:bb:50:fb:
         65:df:1b:a1:61:72:5d:c1:37:9b:98:3b:2a:8d:a2:c9:c9:c9:
         ff:1c:ce:fc:6e:3b:cb:40:43:d5:29:ef:82:ea:f0:c4:8e:3c:
         ee:af:95:32:c6:95:19:6d:72:64:d0:d9:13:1b:b6:a4:b9:f9:
         52:61:fd:6f:9c:be:39:ed:34:55:47:3d:eb:24:14:d6:f4:dd:
         37:db:98:93:97:0e:eb:05:f7:ba:dc:55:c8:47:b8:71:7d:3c:
         91:52:2f:01:31:94:cc:e3:b9:a4:f3:5b:b4:ac:61:9b:f2:03:
         0d:20:6d:dd:09:23:06:2f:4f:83:0c:f3:1c:41:1f:f8:f4:da:
         d5:24:02:cd:36:6a:68:75:f6:e0:1f:64:58:49:b1:79:8b:f1:
         a8:50:b2:3f:c9:74:ab:66:63:e0:49:db:38:c5:e4:02:58:40:
         1a:ad:6e:94:1d:3d:b9:77:de:8f:c8:cd:bb:89:fa:3c:20:66:
         42:98:f6:b6:b7:cd:ec:30:5b:3e:94:63:06:e0:c6:df:62:d1:
         56:8e:9c:f1:ce:99:39:4e:d0:44:82:ca:f5:cd:7d:25:6e:f5:
         4c:1e:9e:3b:c1:74:bf:bb:7c:41:c5:35:7d:0b:12:e6:83:12:
         a6:14:6e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 01:09:48 2024 by rpki-client on console-ams.rpki-client.org