Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wuATUKrfQIMXx9287PdHykthmo.cer
File:                     0wuATUKrfQIMXx9287PdHykthmo.cer (raw, json)
Hash identifier:          aPYGKtUcsFwRvbCN9aCKgYhZg+tl81HaQQ1PudQ3GeA=
Subject key identifier:   D3:0B:80:4D:42:AB:7D:02:0C:5F:1F:76:F3:B3:DD:1F:29:2D:86:6A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01FB2F
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 25 Jun 2024 22:30:32 +0000
Certificate not after:    Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources:    AS: 135421
                          IP: 103.219.7.0/24
                          IP: 2001:df2:2e00::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Dec 2024 01:13:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129839 (0x1fb2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun 25 22:30:32 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=A91EDEC8/serialNumber=D30B804D42AB7D020C5F1F76F3B3DD1F292D866A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:24:09:9c:3b:46:ce:16:92:3e:c6:41:e7:85:
                    a3:ae:23:ba:e7:36:ad:48:95:c0:4d:c7:2e:15:04:
                    61:be:a1:14:fa:3a:66:60:e2:4b:e9:04:2f:f7:c8:
                    5c:03:e9:09:e2:30:b3:c3:d2:40:82:1a:cd:43:e4:
                    43:3f:ab:12:a2:fc:5f:ab:5b:9c:8b:8a:a7:4a:56:
                    a9:fd:a7:79:df:74:14:ec:bf:a8:e7:06:6d:a9:c5:
                    81:e1:e3:75:e9:6f:6b:5d:3b:82:06:7f:ea:d3:54:
                    06:b0:5e:91:00:ac:27:0b:fe:c2:69:33:7b:e2:38:
                    9e:fe:4c:2e:e2:1a:6f:39:66:9a:ad:a7:9f:4f:8c:
                    91:f1:71:15:98:ab:71:ce:ef:bf:44:60:93:f8:97:
                    1b:eb:5e:1d:eb:00:18:32:5e:e1:55:72:bb:cc:4b:
                    ea:7d:0d:ea:3d:11:37:f0:ae:bd:a0:fd:38:b8:ee:
                    97:21:76:67:32:67:f5:62:99:2b:d0:1c:26:dc:8b:
                    c9:f7:f6:70:9e:76:74:cd:6e:76:3c:16:75:03:bf:
                    61:26:5a:44:a2:b1:33:33:1b:88:96:10:e2:69:4c:
                    17:25:c1:f5:79:2a:d5:e4:eb:73:34:cc:de:4b:3d:
                    7c:7b:6c:84:1f:18:c8:58:a2:40:04:5a:32:dc:17:
                    42:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:0B:80:4D:42:AB:7D:02:0C:5F:1F:76:F3:B3:DD:1F:29:2D:86:6A
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  135421

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.219.7.0/24
                IPv6:
                  2001:df2:2e00::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:92:82:14:5a:b6:63:09:08:d1:9a:70:9d:ef:05:c4:98:ba:
         6d:9f:f2:13:d0:07:e0:7f:99:c8:78:00:24:b2:68:4c:f7:0c:
         8d:34:95:40:e0:61:53:92:ff:79:29:b7:03:8b:c5:e1:b1:5f:
         45:a5:8a:e6:c6:d7:a1:e4:bf:e3:cb:95:e4:f3:a4:0e:8e:5a:
         50:04:77:0a:4f:bf:84:af:b5:88:33:9b:9f:19:be:82:f5:37:
         e4:47:c6:78:13:3d:59:76:45:20:21:8f:62:93:ca:f7:27:cc:
         6a:da:5e:86:f8:8c:17:3e:b9:68:c7:ae:93:a8:d3:a7:9e:11:
         ba:e2:10:7e:34:0c:95:a7:9d:c4:6f:3c:ab:e3:0d:eb:ac:a8:
         18:9f:c6:4d:c6:8f:18:4f:7f:5f:7d:5a:3a:7c:33:38:98:8c:
         b2:0f:f9:26:6c:cd:c1:8d:2c:ed:5a:f5:29:0e:45:c2:9f:86:
         0e:3d:07:bc:81:c8:14:07:85:f0:22:18:d0:14:a0:0d:63:ec:
         81:3a:57:55:6c:9c:65:46:19:79:1e:fb:15:b8:14:91:4f:93:
         b2:98:d8:ed:fc:f5:c2:09:14:43:0b:9a:93:40:4b:cf:4d:91:
         02:cc:8f:18:d8:ce:01:d6:56:ba:67:cd:9d:af:dc:ca:38:4b:
         06:21:04:aa
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----