Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/379fgwtQs7_B5TULnGBbt1YSLhE.cer
File:                     379fgwtQs7_B5TULnGBbt1YSLhE.cer (raw, json)
Hash identifier:          mWtEWoaMI6vGGZb75HUlz4d5kworl8znUSvi+HRKP+g=
Subject key identifier:   DF:BF:5F:83:0B:50:B3:BF:C1:E5:35:0B:9C:60:5B:B7:56:12:2E:11
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01C646
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 26 Oct 2023 20:12:56 +0000
Certificate not after:    Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 147061
                          IP: 103.173.235.0/24
                          IP: 103.198.0.0/24
                          IP: 2001:df7:ae80::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 07:49:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116294 (0x1c646)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct 26 20:12:56 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=A91DBB7D/serialNumber=DFBF5F830B50B3BFC1E5350B9C605BB756122E11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9e:85:af:be:ac:c4:96:bf:6d:91:9c:24:5f:
                    fe:8e:69:89:fa:91:10:e6:53:05:8b:e5:94:85:3e:
                    f9:51:61:ed:69:0c:89:f3:99:73:66:09:9f:ad:4e:
                    a1:5d:35:9f:35:c4:eb:48:e1:1b:a8:c8:52:2f:f4:
                    1b:df:a2:92:20:7b:e9:81:74:51:74:b2:e3:46:57:
                    ce:66:b2:13:fb:0d:6d:3c:92:20:a4:ca:68:db:ad:
                    29:f0:f9:6a:ee:3c:6f:d1:55:a8:4f:37:b5:a3:d0:
                    6f:f1:44:82:4d:ef:fd:d8:7a:47:dd:c7:0b:db:5f:
                    5b:a6:ff:9f:3a:97:d4:56:2a:14:8b:a4:68:11:6a:
                    82:43:d9:aa:cc:12:3c:ec:86:00:23:88:bc:03:98:
                    5f:10:7d:6d:6c:2d:de:59:4c:94:87:32:9e:3d:55:
                    49:cf:97:3f:0c:4b:f3:ca:1c:11:d7:aa:85:26:c8:
                    67:fa:2c:f9:88:8b:01:da:61:92:8d:91:6f:43:5a:
                    0c:b4:0f:25:1a:48:32:d6:1f:dd:c0:aa:24:6c:ea:
                    dd:ea:1e:9b:cc:24:74:d3:00:35:99:f6:89:86:ec:
                    7f:5d:5e:10:cf:69:97:4b:2e:f8:7e:8e:8d:38:62:
                    ee:06:55:75:3c:ef:e3:c9:26:32:c0:76:d6:5a:3f:
                    19:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:BF:5F:83:0B:50:B3:BF:C1:E5:35:0B:9C:60:5B:B7:56:12:2E:11
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  147061

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.235.0/24
                  103.198.0.0/24
                IPv6:
                  2001:df7:ae80::/48

    Signature Algorithm: sha256WithRSAEncryption
         bc:ab:bb:f3:28:66:3a:16:40:b1:72:3c:38:7d:60:e9:90:a8:
         5c:56:5c:42:46:fb:d1:7a:98:9e:3f:da:3b:18:18:20:16:50:
         46:33:4e:99:5b:30:7e:39:e7:44:73:a0:33:74:b7:f6:a2:a3:
         27:c6:66:f0:19:33:a5:3c:83:bc:e1:f7:12:ca:8b:5c:c4:b9:
         a5:a6:89:5d:a8:8a:9f:6a:33:ff:bf:b0:99:94:b2:bf:ef:0e:
         a8:49:5b:89:bf:76:08:2b:58:5e:dc:2e:76:8d:aa:5e:43:5e:
         59:9d:c4:65:e8:78:2c:6a:49:50:78:36:c5:c2:68:d7:6f:17:
         ed:03:2e:35:9d:c2:a9:ca:2a:73:33:76:7f:22:8f:8d:e8:bc:
         eb:6a:e1:0e:8c:df:b6:56:fb:fa:55:5b:4d:98:56:83:62:c3:
         5f:ba:40:8b:3f:9f:55:b2:54:99:f2:d9:0d:75:cd:4b:ed:9d:
         55:a6:c3:bc:86:0e:a9:71:a2:5b:b0:d0:20:0e:aa:55:6a:fe:
         61:fa:78:bb:35:a5:91:1d:6c:ef:1a:21:a7:b6:38:8c:d4:8b:
         f6:df:2c:8c:b6:c2:7c:2b:20:77:86:ba:ff:64:d0:cb:0e:d1:
         bf:fb:f3:69:07:d6:a7:ef:26:b0:1c:d3:d2:39:ae:45:a5:ee:
         e8:0d:31:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:02:41 2024 by rpki-client on console-ams.rpki-client.org