Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0X13ywyJuZTN2suidScKHnTcqic.cer
File:                     0X13ywyJuZTN2suidScKHnTcqic.cer (raw, json)
Hash identifier:          61Rfkv1a+ukARzQ8H1uH35QLEhfGr/48t7zLNjO9Qoc=
Subject key identifier:   D1:7D:77:CB:0C:89:B9:94:CD:DA:CB:A2:75:27:0A:1E:74:DC:AA:27
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01E201
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 01 Mar 2024 16:51:31 +0000
Certificate not after:    Thu 01 May 2025 00:00:00 +0000
Subordinate resources:    AS: 17660
                          AS: 18024 -- 18025
                          AS: 18205
                          IP: 45.64.248.0/22
                          IP: 103.245.240.0/22
                          IP: 119.2.96.0/19
                          IP: 202.144.128.0/19
                          IP: 2405:d000::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Apr 2024 23:54:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123393 (0x1e201)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Mar  1 16:51:31 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=A915D99A/serialNumber=D17D77CB0C89B994CDDACBA275270A1E74DCAA27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6b:1a:63:89:e3:5d:ab:70:c6:50:a0:d4:cd:
                    39:20:b3:ed:fb:93:15:78:1e:3e:68:49:7b:aa:69:
                    60:58:47:f8:62:99:2e:1a:d1:24:50:cf:0f:33:93:
                    ad:0f:2e:64:79:ed:06:85:e0:d2:7d:7c:bf:4c:5a:
                    81:ca:ca:b2:b7:0b:46:d7:d9:d2:77:7f:cd:98:55:
                    53:db:c7:5f:1d:3a:09:e3:eb:47:bf:2d:6b:b7:62:
                    80:fb:ae:b8:53:4b:a9:9e:59:25:4e:1c:24:ab:85:
                    da:ec:fd:41:61:8e:37:dd:03:e4:a7:9a:57:42:74:
                    d8:ad:83:0c:fe:78:5d:af:b2:b3:57:f4:dd:1b:c7:
                    79:27:ce:99:f6:62:93:43:d2:09:84:12:15:20:ad:
                    e5:a6:e7:6e:09:c4:6b:be:a5:15:ca:f6:66:42:1e:
                    ac:4d:a1:af:94:6f:e8:ec:6b:a4:5a:86:0c:d2:58:
                    da:77:45:aa:07:ea:a6:79:02:e4:32:af:bc:75:23:
                    7a:62:24:49:4d:63:e2:69:4d:0b:f0:d2:9b:14:6b:
                    73:7b:cd:09:7b:ab:4f:05:52:2a:a8:45:cf:d4:9f:
                    9b:66:3f:45:bf:6f:33:9c:f4:47:11:e5:1b:5c:33:
                    37:cc:a0:cf:7a:22:0d:9e:4c:b1:e9:41:59:1d:80:
                    e8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:7D:77:CB:0C:89:B9:94:CD:DA:CB:A2:75:27:0A:1E:74:DC:AA:27
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  17660
                  18024-18025
                  18205

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.64.248.0/22
                  103.245.240.0/22
                  119.2.96.0/19
                  202.144.128.0/19
                IPv6:
                  2405:d000::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:ae:89:99:7b:1b:d5:38:46:b2:a8:8b:eb:07:27:a5:c8:53:
         7b:ac:86:c9:79:61:93:5d:c9:e4:ce:8d:7d:45:dc:ad:a9:c9:
         42:7c:e1:38:3d:d9:04:99:f5:fe:5d:12:46:34:7a:ba:13:6e:
         33:7c:c1:3d:2f:33:95:50:85:d8:7d:c4:f9:49:a0:99:97:f3:
         64:2a:47:ee:e0:a2:fe:71:82:5e:73:da:14:f5:80:99:d0:89:
         59:3e:ae:6c:2c:23:c5:e2:74:74:e6:1e:7f:b1:15:43:c4:4b:
         9f:0e:92:29:de:24:8f:23:f6:73:21:cf:9d:e6:d5:ba:c5:78:
         8b:53:65:40:e0:a0:23:4e:b4:d7:2b:56:1a:de:d5:95:0c:1a:
         6c:78:63:ba:5e:37:9a:51:43:7e:30:01:97:49:46:e0:2e:b6:
         c6:ee:a3:f9:50:b0:46:d0:b6:73:9c:b5:d4:d4:6e:26:60:bf:
         41:40:f3:d5:65:b3:fa:80:ad:8c:71:30:fb:2b:73:04:73:9f:
         92:7e:8a:cd:b5:10:e8:f1:7f:ab:db:48:f5:22:56:fc:8e:3a:
         f9:3b:c7:44:b6:8b:9d:58:b8:ce:6c:0f:fc:6f:24:09:8c:8e:
         23:aa:f5:97:4f:95:aa:09:e4:ed:e9:f9:ce:8f:c5:c7:09:ab:
         51:f3:02:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 00:59:48 2024 by rpki-client on console-ams.rpki-client.org