Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer
File:                     0C2Q-5EqWWC75Wy051NRaiTG73s.cer (raw, json)
Hash identifier:          4ufRqkASrdyLIpdUYzT60BtJZYxzZkXmnUsHOqAjRzs=
Subject key identifier:   D0:2D:90:FB:91:2A:59:60:BB:E5:6C:B4:E7:53:51:6A:24:C6:EF:7B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02C83D
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 28 Jul 2026 19:19:50 +0000
Certificate not after:    Sat 28 Nov 2026 00:00:00 +0000
Subordinate resources:    AS: 140091
                          IP: 103.5.120.0/23
                          IP: 103.148.104.0/24
                          IP: 103.153.202.0/24
                          IP: 2001:df2:ce80::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182333 (0x2c83d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 28 19:19:50 2026 GMT
            Not After : Nov 28 00:00:00 2026 GMT
        Subject: CN=A9148FE8, serialNumber=D02D90FB912A5960BBE56CB4E753516A24C6EF7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7d:fa:f0:ec:b4:b7:6b:19:12:79:b4:9d:78:
                    69:b4:15:47:13:d1:1d:7d:22:85:a2:85:0d:6a:c3:
                    1c:8d:ac:07:34:51:56:96:71:b5:00:09:50:2c:4e:
                    46:77:e7:d6:cc:59:55:a8:e3:c9:d5:c8:02:1f:db:
                    b4:e8:55:ab:2d:f2:47:93:11:f1:6e:af:bc:f8:0d:
                    44:29:34:5a:bf:c0:c0:69:e4:5f:09:85:a8:48:2b:
                    aa:cd:59:b3:cf:2c:5c:70:02:d3:39:f5:37:87:9d:
                    24:41:2f:4e:45:30:8c:92:fa:8e:d8:11:0c:d5:8d:
                    ca:51:b3:59:67:1e:7b:02:f8:24:12:98:4d:ec:81:
                    90:39:eb:7a:e5:84:48:09:4d:29:2c:96:4f:b2:7e:
                    bc:cb:1d:f2:8a:60:3a:52:bd:fe:7a:ff:9f:54:90:
                    22:6d:31:c6:c8:ef:4f:38:cd:75:c4:f7:95:78:30:
                    0a:31:45:e2:37:48:99:e3:b8:ae:65:9c:30:e2:2e:
                    0c:b9:c9:32:f9:ec:2c:f9:23:3e:02:a3:3a:03:f6:
                    6a:fa:36:74:67:65:4f:a5:5f:7f:cd:a7:c6:bb:20:
                    33:c3:03:81:09:fd:58:0b:4f:01:e1:d8:28:6d:1a:
                    21:47:6f:dd:1a:42:98:61:20:f7:7b:0c:26:b9:7b:
                    9a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:2D:90:FB:91:2A:59:60:BB:E5:6C:B4:E7:53:51:6A:24:C6:EF:7B
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  140091

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.120.0/23
                  103.148.104.0/24
                  103.153.202.0/24
                IPv6:
                  2001:df2:ce80::/48

    Signature Algorithm: sha256WithRSAEncryption
         b9:8e:f2:94:eb:6b:f3:61:7c:95:1f:90:c4:6f:9c:85:18:ce:
         f9:aa:6f:b0:17:e6:e3:66:58:83:bf:f5:df:06:ce:ad:d0:13:
         27:5b:ba:8b:ed:18:f3:0c:49:ba:ef:73:1f:c6:9d:32:9e:34:
         23:22:14:8e:99:9b:a8:49:1f:e9:72:b0:5b:4c:be:9d:06:ae:
         18:55:2b:67:da:61:d6:f8:d9:d8:da:49:e0:36:55:b5:5d:04:
         27:49:86:78:5a:f8:05:33:ba:03:bf:85:eb:91:50:0c:66:1a:
         87:fe:0f:d1:ab:e2:2e:91:7b:fa:be:d9:e3:f7:60:5c:07:18:
         c1:8d:c8:6f:ea:8a:f6:ba:0b:2c:9e:64:99:f5:37:6b:48:00:
         41:bd:43:4f:47:64:b6:69:55:c4:30:8c:2d:cf:65:1a:b6:3e:
         91:01:40:09:5c:3d:dd:ae:21:28:6a:d4:cc:5a:a2:25:1d:82:
         68:47:ca:b9:30:c0:61:ba:ab:37:cc:72:39:4e:1d:9f:78:fa:
         34:98:1c:ac:c7:3a:be:09:cc:7d:5d:60:85:57:2a:83:cd:44:
         6c:84:21:f4:02:47:c1:ee:9f:81:e6:1a:80:bc:58:59:bf:c0:
         74:3b:c9:7c:4a:ea:75:58:a9:c0:c1:09:fb:63:d2:06:83:92:
         97:71:a6:9f
-----BEGIN CERTIFICATE-----
MIIGNzCCBR+gAwIBAgIDAsg9MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDcyODE5MTk1MFoXDTI2MTEyODAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNDhGRTgxMTAvBgNVBAUTKEQwMkQ5MEZCOTEyQTU5NjBCQkU1NkNC
NEU3NTM1MTZBMjRDNkVGN0IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCzffrw7LS3axkSebSdeGm0FUcT0R19IoWihQ1qwxyNrAc0UVaWcbUACVAsTkZ3
59bMWVWo48nVyAIf27ToVast8keTEfFur7z4DUQpNFq/wMBp5F8JhahIK6rNWbPP
LFxwAtM59TeHnSRBL05FMIyS+o7YEQzVjcpRs1lnHnsC+CQSmE3sgZA563rlhEgJ
TSkslk+yfrzLHfKKYDpSvf56/59UkCJtMcbI7084zXXE95V4MAoxReI3SJnjuK5l
nDDiLgy5yTL57Cz5Iz4CozoD9mr6NnRnZU+lX3/Np8a7IDPDA4EJ/VgLTwHh2Cht
GiFHb90aQphhIPd7DCa5e5rZAgMBAAGjggMsMIIDKDAdBgNVHQ4EFgQU0C2Q+5Eq
WWC75Wy051NRaiTG73swHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTQ4RkU4LzEyRjk2RkIyNEVGQjExRUE4RDY5NEQwREM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE0OEZFOC8xMkY5NkZCMjRFRkIxMUVBOEQ2OTREMERDNEY5QUUwMi8wQzJRLTVF
cVdXQzc1V3kwNTFOUmFpVEc3M3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAiM7MDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQBZwV4AwQAZ5Ro
AwQAZ5nKMA8EAgACMAkDBwAgAQ3yzoAwDQYJKoZIhvcNAQELBQADggEBALmO8pTr
a/NhfJUfkMRvnIUYzvmqb7AX5uNmWIO/9d8Gzq3QEydbuovtGPMMSbrvcx/GnTKe
NCMiFI6Zm6hJH+lysFtMvp0GrhhVK2faYdb42djaSeA2VbVdBCdJhnha+AUzugO/
heuRUAxmGof+D9Gr4i6Re/q+2eP3YFwHGMGNyG/qiva6CyyeZJn1N2tIAEG9Q09H
ZLZpVcQwjC3PZRq2PpEBQAlcPd2uIShq1MxaoiUdgmhHyrkwwGG6qzfMcjlOHZ94
+jSYHKzHOr4JzH1dYIVXKoPNRGyEIfQCR8Hun4HmGoC8WFm/wHQ7yXxK6nVYqcDB
Cftj0gaDkpdxpp8=
-----END CERTIFICATE-----
Generated at Wed Aug 19 10:48:45 2026 by rpki-client