Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer
File:                     0UdMHaQ5s05IfCjCRynmh-CUfXM.cer (raw, json)
Hash identifier:          j6dvLyBMQw3X0GXU2hWJIH3o5XBxcqyvJ8zM5qb461Y=
Subject key identifier:   D1:47:4C:1D:A4:39:B3:4E:48:7C:28:C2:47:29:E6:87:E0:94:7D:73
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01A9CC
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 13 Jun 2023 18:09:59 +0000
Certificate not after:    Sat 31 Aug 2024 00:00:00 +0000
Subordinate resources:    AS: 3836
                          AS: 9835
                          AS: 38296
                          IP: 202.44.96.0/24
                          IP: 203.185.64.0 -- 203.185.159.255
                          IP: 2001:f00::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Apr 2024 18:03:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109004 (0x1a9cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun 13 18:09:59 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=A91840A8/serialNumber=D1474C1DA439B34E487C28C24729E687E0947D73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e2:8b:7b:e2:10:aa:a0:5f:23:50:d5:b9:7d:
                    72:4c:5e:9d:bc:45:0c:41:69:c4:c1:cc:d8:db:e7:
                    96:bc:59:de:bc:4d:fe:b2:c8:ee:ef:36:8f:b0:5d:
                    95:8d:9b:c0:c1:47:82:03:26:af:f4:ad:23:dd:8d:
                    50:aa:b4:db:09:ee:73:8f:d0:d0:4c:ec:21:15:7d:
                    bd:f2:10:ac:c1:0c:c9:31:7a:5c:77:b9:65:e7:e2:
                    5d:44:96:1b:2d:26:6e:1a:90:e4:48:50:c4:a1:aa:
                    e2:0f:cf:71:46:70:20:7a:82:b1:55:cd:62:89:5e:
                    c3:4b:2f:9c:7b:f1:99:1a:6c:e5:0f:df:71:bd:68:
                    b4:1b:ad:68:37:a9:af:c0:6a:8f:33:ec:0c:5f:82:
                    81:50:97:c0:c5:d8:41:ff:fa:16:78:c5:46:a9:15:
                    d8:fb:4f:b8:a2:69:58:7f:27:a9:fd:b2:28:94:24:
                    c0:6b:83:b9:7b:0f:c0:60:6d:6b:15:14:fb:84:a2:
                    31:4b:c3:fa:5e:0e:ac:02:75:67:75:cf:b1:36:dd:
                    d9:5c:ad:c9:ca:10:7d:8c:70:34:b8:09:2d:d8:4a:
                    37:a1:79:7c:8a:aa:6f:39:03:da:4b:b4:38:b1:b0:
                    70:af:11:a8:96:56:95:49:95:ad:b1:82:7d:1a:39:
                    ab:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:47:4C:1D:A4:39:B3:4E:48:7C:28:C2:47:29:E6:87:E0:94:7D:73
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  3836
                  9835
                  38296

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.44.96.0/24
                  203.185.64.0-203.185.159.255
                IPv6:
                  2001:f00::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:a8:dc:15:ee:5a:32:cc:f0:85:b1:e2:81:ae:0c:65:1f:13:
         a0:8a:6c:a4:d8:11:27:96:8f:30:c1:af:94:af:6f:40:a1:f7:
         43:a2:f2:28:a2:67:91:14:53:f3:c9:a1:e8:32:32:2c:a6:95:
         d4:81:2e:23:05:70:c3:5a:e3:0f:3d:41:74:2a:62:f9:f4:d5:
         b8:8c:ff:d9:ba:31:e6:e2:3d:d6:7d:1d:cc:ea:4d:6e:26:1a:
         b1:96:62:ce:03:b3:31:90:0e:c9:a5:cb:ec:89:bc:d8:e3:37:
         44:60:2d:de:3b:cc:52:41:8b:e0:48:1f:3a:68:33:e9:12:e9:
         84:3e:09:24:2c:c4:6e:ed:45:16:62:15:86:4f:2e:57:2e:67:
         2d:dc:2f:b4:6c:f2:68:ad:0d:ba:91:a3:42:47:bf:c8:96:73:
         41:a5:71:01:16:8d:60:bc:89:da:e2:d1:a3:51:73:e9:71:42:
         0d:83:ef:16:ad:aa:59:af:33:f8:15:b4:76:7e:99:3a:1d:cf:
         66:d8:46:38:9c:2a:4b:f5:03:ec:28:24:8f:56:13:e9:d8:0d:
         18:bf:ce:bf:09:91:c5:ae:4f:40:05:f6:25:ac:1e:8c:51:a5:
         f5:b6:8b:50:02:29:21:2f:67:21:db:5c:b2:b4:29:5c:3f:87:
         1a:08:d2:c6
-----BEGIN CERTIFICATE-----
MIIGPzCCBSegAwIBAgIDAanMMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMDYxMzE4MDk1OVoXDTI0MDgzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxODQwQTgxMTAvBgNVBAUTKEQxNDc0QzFEQTQzOUIzNEU0ODdDMjhD
MjQ3MjlFNjg3RTA5NDdENzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCu4ot74hCqoF8jUNW5fXJMXp28RQxBacTBzNjb55a8Wd68Tf6yyO7vNo+wXZWN
m8DBR4IDJq/0rSPdjVCqtNsJ7nOP0NBM7CEVfb3yEKzBDMkxelx3uWXn4l1Elhst
Jm4akORIUMShquIPz3FGcCB6grFVzWKJXsNLL5x78ZkabOUP33G9aLQbrWg3qa/A
ao8z7AxfgoFQl8DF2EH/+hZ4xUapFdj7T7iiaVh/J6n9siiUJMBrg7l7D8BgbWsV
FPuEojFLw/peDqwCdWd1z7E23dlcrcnKEH2McDS4CS3YSjeheXyKqm85A9pLtDix
sHCvEaiWVpVJla2xgn0aOasfAgMBAAGjggM0MIIDMDAdBgNVHQ4EFgQU0UdMHaQ5
s05IfCjCRynmh+CUfXMwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTg0MEE4LzcwQzJFQjdBQTE5NjExRUI4MjAwQ0YwOUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE4NDBBOC83MEMyRUI3QUExOTYxMUVCODIwMENGMDlDNEY5QUUwMi8wVWRNSGFR
NXMwNUlmQ2pDUnlubWgtQ1VmWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQgBAf8EEzAR
oA8wDQICDvwCAiZrAgMAlZgwPAYIKwYBBQUHAQcBAf8ELTArMBoEAgABMBQDBADK
LGAwDAMEBsu5QAMEBcu5gDANBAIAAjAHAwUAIAEPADANBgkqhkiG9w0BAQsFAAOC
AQEAJKjcFe5aMszwhbHiga4MZR8ToIpspNgRJ5aPMMGvlK9vQKH3Q6LyKKJnkRRT
88mh6DIyLKaV1IEuIwVww1rjDz1BdCpi+fTVuIz/2box5uI91n0dzOpNbiYasZZi
zgOzMZAOyaXL7Im82OM3RGAt3jvMUkGL4EgfOmgz6RLphD4JJCzEbu1FFmIVhk8u
Vy5nLdwvtGzyaK0NupGjQke/yJZzQaVxARaNYLyJ2uLRo1Fz6XFCDYPvFq2qWa8z
+BW0dn6ZOh3PZthGOJwqS/UD7Cgkj1YT6dgNGL/OvwmRxa5PQAX2JawejFGl9baL
UAIpIS9nIdtcsrQpXD+HGgjSxg==
-----END CERTIFICATE-----
Generated at Thu Mar 28 18:54:47 2024 by rpki-client on console-ams.rpki-client.org