Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer
File:                     0C2Q-5EqWWC75Wy051NRaiTG73s.cer (raw, json)
Hash identifier:          /B1cIfWx7G6vopv4uVc2vZuimmiPynAH4DaoyQD1nys=
Subject key identifier:   D0:2D:90:FB:91:2A:59:60:BB:E5:6C:B4:E7:53:51:6A:24:C6:EF:7B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01ECD2
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 22 Apr 2024 15:11:37 +0000
Certificate not after:    Wed 28 May 2025 00:00:00 +0000
Subordinate resources:    AS: 140091
                          IP: 103.5.120.0/23
                          IP: 103.148.104.0/24
                          IP: 103.153.202.0/24
                          IP: 2001:df2:ce80::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126162 (0x1ecd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Apr 22 15:11:37 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=A9148FE8/serialNumber=D02D90FB912A5960BBE56CB4E753516A24C6EF7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7d:fa:f0:ec:b4:b7:6b:19:12:79:b4:9d:78:
                    69:b4:15:47:13:d1:1d:7d:22:85:a2:85:0d:6a:c3:
                    1c:8d:ac:07:34:51:56:96:71:b5:00:09:50:2c:4e:
                    46:77:e7:d6:cc:59:55:a8:e3:c9:d5:c8:02:1f:db:
                    b4:e8:55:ab:2d:f2:47:93:11:f1:6e:af:bc:f8:0d:
                    44:29:34:5a:bf:c0:c0:69:e4:5f:09:85:a8:48:2b:
                    aa:cd:59:b3:cf:2c:5c:70:02:d3:39:f5:37:87:9d:
                    24:41:2f:4e:45:30:8c:92:fa:8e:d8:11:0c:d5:8d:
                    ca:51:b3:59:67:1e:7b:02:f8:24:12:98:4d:ec:81:
                    90:39:eb:7a:e5:84:48:09:4d:29:2c:96:4f:b2:7e:
                    bc:cb:1d:f2:8a:60:3a:52:bd:fe:7a:ff:9f:54:90:
                    22:6d:31:c6:c8:ef:4f:38:cd:75:c4:f7:95:78:30:
                    0a:31:45:e2:37:48:99:e3:b8:ae:65:9c:30:e2:2e:
                    0c:b9:c9:32:f9:ec:2c:f9:23:3e:02:a3:3a:03:f6:
                    6a:fa:36:74:67:65:4f:a5:5f:7f:cd:a7:c6:bb:20:
                    33:c3:03:81:09:fd:58:0b:4f:01:e1:d8:28:6d:1a:
                    21:47:6f:dd:1a:42:98:61:20:f7:7b:0c:26:b9:7b:
                    9a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:2D:90:FB:91:2A:59:60:BB:E5:6C:B4:E7:53:51:6A:24:C6:EF:7B
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  140091

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.120.0/23
                  103.148.104.0/24
                  103.153.202.0/24
                IPv6:
                  2001:df2:ce80::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:f7:ce:d7:4c:3e:7c:a1:75:94:fd:5f:f1:3f:86:b0:11:c7:
         c4:60:24:0d:33:73:f7:16:da:99:ba:48:7b:59:86:d2:84:c8:
         a6:fc:3a:23:e1:a3:6a:36:f7:d0:f2:03:38:67:76:85:b1:b6:
         58:46:3f:35:c8:46:1f:fc:f3:84:fa:b5:91:5b:74:9d:5e:35:
         63:a4:97:3e:74:76:a9:72:cf:fb:0a:a3:82:e2:65:d4:2c:a0:
         ee:60:f3:3a:95:31:e5:81:55:0f:4b:a1:a9:80:53:ac:7f:2f:
         e7:38:ff:28:5f:aa:4f:67:cf:03:7d:f1:0a:e5:40:4c:64:5a:
         02:28:34:66:ae:b2:1a:74:66:a2:f1:d1:5d:51:aa:60:cd:c3:
         cd:f2:ee:4a:72:64:f9:3d:94:19:4e:38:0c:09:53:2e:6f:fc:
         43:54:02:35:0a:6c:c9:0d:65:cd:14:52:8d:76:e1:d2:f3:48:
         22:7a:b0:8c:ca:1c:77:92:d6:20:28:a5:49:63:f3:90:b0:27:
         b8:a7:4c:c8:4f:f8:5f:d9:58:52:f0:df:47:50:44:62:87:bb:
         24:24:99:57:ab:c6:35:da:0e:37:83:c1:6a:8b:3c:bd:0b:01:
         54:41:2b:01:85:4d:6d:99:fc:f9:4f:1f:ac:76:1d:cf:0c:5a:
         0c:37:e2:19
-----BEGIN CERTIFICATE-----
MIIGNzCCBR+gAwIBAgIDAezSMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDQyMjE1MTEzN1oXDTI1MDUyODAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNDhGRTgxMTAvBgNVBAUTKEQwMkQ5MEZCOTEyQTU5NjBCQkU1NkNC
NEU3NTM1MTZBMjRDNkVGN0IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCzffrw7LS3axkSebSdeGm0FUcT0R19IoWihQ1qwxyNrAc0UVaWcbUACVAsTkZ3
59bMWVWo48nVyAIf27ToVast8keTEfFur7z4DUQpNFq/wMBp5F8JhahIK6rNWbPP
LFxwAtM59TeHnSRBL05FMIyS+o7YEQzVjcpRs1lnHnsC+CQSmE3sgZA563rlhEgJ
TSkslk+yfrzLHfKKYDpSvf56/59UkCJtMcbI7084zXXE95V4MAoxReI3SJnjuK5l
nDDiLgy5yTL57Cz5Iz4CozoD9mr6NnRnZU+lX3/Np8a7IDPDA4EJ/VgLTwHh2Cht
GiFHb90aQphhIPd7DCa5e5rZAgMBAAGjggMsMIIDKDAdBgNVHQ4EFgQU0C2Q+5Eq
WWC75Wy051NRaiTG73swHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTQ4RkU4LzEyRjk2RkIyNEVGQjExRUE4RDY5NEQwREM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE0OEZFOC8xMkY5NkZCMjRFRkIxMUVBOEQ2OTREMERDNEY5QUUwMi8wQzJRLTVF
cVdXQzc1V3kwNTFOUmFpVEc3M3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAiM7MDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQBZwV4AwQAZ5Ro
AwQAZ5nKMA8EAgACMAkDBwAgAQ3yzoAwDQYJKoZIhvcNAQELBQADggEBAE73ztdM
PnyhdZT9X/E/hrARx8RgJA0zc/cW2pm6SHtZhtKEyKb8OiPho2o299DyAzhndoWx
tlhGPzXIRh/884T6tZFbdJ1eNWOklz50dqlyz/sKo4LiZdQsoO5g8zqVMeWBVQ9L
oamAU6x/L+c4/yhfqk9nzwN98QrlQExkWgIoNGaushp0ZqLx0V1RqmDNw83y7kpy
ZPk9lBlOOAwJUy5v/ENUAjUKbMkNZc0UUo124dLzSCJ6sIzKHHeS1iAopUlj85Cw
J7inTMhP+F/ZWFLw30dQRGKHuyQkmVerxjXaDjeDwWqLPL0LAVRBKwGFTW2Z/PlP
H6x2Hc8MWgw34hk=
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:03:05 2024 by rpki-client on console-fra.rpki-client.org