Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4190GdVyqG920uv3gpq22dA0CQU.cer
File:                     4190GdVyqG920uv3gpq22dA0CQU.cer (raw, json)
Hash identifier:          d5OPNjS0YcwO5MLbNxEarJhpSqQJQgLm50GZuqRh5bo=
Subject key identifier:   E3:5F:74:19:D5:72:A8:6F:76:D2:EB:F7:82:9A:B6:D9:D0:34:09:05
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01B2B4
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 28 Jul 2023 06:37:26 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 151342
                          IP: 103.219.146.0/24
                          IP: 2001:df2:2840::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 10:14:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111284 (0x1b2b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 28 06:37:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=A91E8AF5/serialNumber=E35F7419D572A86F76D2EBF7829AB6D9D0340905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:09:f4:f8:99:a3:43:2e:4e:28:0f:0e:03:d1:
                    c9:a6:4e:ae:16:dd:62:d6:4c:9f:ef:5c:69:3e:38:
                    75:a1:65:ce:0d:76:65:88:d8:2c:3b:35:68:fa:95:
                    61:8e:ee:df:df:fd:6c:2c:99:eb:f7:de:bc:a5:76:
                    b3:7d:71:71:34:7e:e2:31:c4:83:ea:a8:79:b8:3e:
                    3d:d7:74:fc:35:c3:cb:38:b5:3e:74:f9:30:83:80:
                    2c:1c:31:39:c7:dc:e4:bb:6f:47:1d:91:f7:47:db:
                    e1:51:e0:b1:b3:1c:a2:53:c5:31:3a:18:ce:0d:7d:
                    79:c7:c3:fe:77:63:13:8a:68:79:75:e5:9e:b2:50:
                    64:a1:11:b2:91:b2:bc:d7:ee:5b:c4:94:6d:96:6f:
                    8e:02:67:8d:be:ad:ce:27:00:ad:66:0b:a5:05:e8:
                    b4:1c:20:dd:98:c8:f4:93:37:27:89:78:83:a1:49:
                    69:f5:c7:c7:c0:fe:92:ee:88:46:44:76:71:83:52:
                    d6:ce:1a:3c:a8:0d:1a:f3:56:39:4c:f0:38:44:ca:
                    ca:b9:b7:a5:ab:b6:09:43:f5:0b:2f:4d:06:f5:64:
                    24:30:2d:73:ba:0a:d1:b0:56:41:0d:69:7c:3c:91:
                    96:e8:f8:2b:87:e2:6c:f3:28:db:80:ef:c4:f4:f9:
                    f8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:5F:74:19:D5:72:A8:6F:76:D2:EB:F7:82:9A:B6:D9:D0:34:09:05
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  151342

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.219.146.0/24
                IPv6:
                  2001:df2:2840::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:04:13:49:49:f6:7d:27:53:79:74:e8:27:03:de:f2:af:89:
         63:26:cd:d4:b0:6d:7a:b8:43:7a:9f:01:7b:ea:8c:97:58:17:
         15:22:65:9e:e7:df:67:35:ec:ef:66:52:df:1d:32:5c:1a:5e:
         d2:cb:81:1a:88:12:5d:18:83:90:86:80:37:ad:1e:3b:78:21:
         5e:fa:3e:96:77:eb:86:22:d5:96:ba:72:22:eb:1a:c4:e3:68:
         3a:84:55:27:fe:d0:bd:55:4f:b5:58:21:82:70:49:87:48:c8:
         c6:63:1e:bd:2a:1f:9e:5d:03:78:d9:58:14:62:b4:09:6e:e4:
         2a:8c:24:a2:6e:62:cf:81:f9:5e:fe:e5:c4:4e:4a:84:d4:b8:
         3e:ce:c1:a0:a4:b5:5b:1f:79:ef:4e:a9:3d:28:03:78:a2:89:
         85:47:91:75:e2:6b:04:12:fa:3e:e8:61:37:b0:d3:60:94:12:
         7e:70:5c:c4:ac:7f:55:d9:c1:ba:cc:e2:3b:16:73:48:77:c9:
         75:b3:f3:7f:fa:0d:2d:10:e4:56:7c:fa:65:d1:b9:98:0b:04:
         0a:e6:b4:75:d5:52:71:c0:6e:6f:e8:55:4f:ec:65:84:77:6d:
         83:6f:a7:f1:26:b4:d3:bf:88:4c:2d:e2:37:48:bf:fc:2f:a2:
         10:df:40:83
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAbK0MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMDcyODA2MzcyNloXDTI0MDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRThBRjUxMTAvBgNVBAUTKEUzNUY3NDE5RDU3MkE4NkY3NkQyRUJG
NzgyOUFCNkQ5RDAzNDA5MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDACfT4maNDLk4oDw4D0cmmTq4W3WLWTJ/vXGk+OHWhZc4NdmWI2Cw7NWj6lWGO
7t/f/Wwsmev33ryldrN9cXE0fuIxxIPqqHm4Pj3XdPw1w8s4tT50+TCDgCwcMTnH
3OS7b0cdkfdH2+FR4LGzHKJTxTE6GM4NfXnHw/53YxOKaHl15Z6yUGShEbKRsrzX
7lvElG2Wb44CZ42+rc4nAK1mC6UF6LQcIN2YyPSTNyeJeIOhSWn1x8fA/pLuiEZE
dnGDUtbOGjyoDRrzVjlM8DhEysq5t6WrtglD9QsvTQb1ZCQwLXO6CtGwVkENaXw8
kZbo+CuH4mzzKNuA78T0+fhpAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQU4190GdVy
qG920uv3gpq22dA0CQUwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUU4QUY1LzMzRjcyNTg2MkQxMTExRUU5OTZDQzYxMEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFFOEFGNS8zM0Y3MjU4NjJEMTExMUVFOTk2Q0M2MTBDNEY5QUUwMi80MTkwR2RW
eXFHOTIwdXYzZ3BxMjJkQTBDUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAk8uMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAZ9uSMA8EAgAC
MAkDBwAgAQ3yKEAwDQYJKoZIhvcNAQELBQADggEBAFIEE0lJ9n0nU3l06CcD3vKv
iWMmzdSwbXq4Q3qfAXvqjJdYFxUiZZ7n32c17O9mUt8dMlwaXtLLgRqIEl0Yg5CG
gDetHjt4IV76PpZ364Yi1Za6ciLrGsTjaDqEVSf+0L1VT7VYIYJwSYdIyMZjHr0q
H55dA3jZWBRitAlu5CqMJKJuYs+B+V7+5cROSoTUuD7OwaCktVsfee9OqT0oA3ii
iYVHkXXiawQS+j7oYTew02CUEn5wXMSsf1XZwbrM4jsWc0h3yXWz83/6DS0Q5FZ8
+mXRuZgLBArmtHXVUnHAbm/oVU/sZYR3bYNvp/EmtNO/iEwt4jdIv/wvohDfQIM=
-----END CERTIFICATE-----
Generated at Thu May 2 11:34:57 2024 by rpki-client on console-fra.rpki-client.org