Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/41zkTnGXKXWROY2C8z0RhhdN6Do.cer
File:                     41zkTnGXKXWROY2C8z0RhhdN6Do.cer (raw, json)
Hash identifier:          gi0TBgAHoSVJOIVbSpOiGUKQwg1BfxKnBrmYAVb0gPc=
Subject key identifier:   E3:5C:E4:4E:71:97:29:75:91:39:8D:82:F3:3D:11:86:17:4D:E8:3A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01AA7E
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 16 Jun 2023 17:54:47 +0000
Certificate not after:    Tue 30 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 59363
                          IP: 103.231.176.0/22
                          IP: 116.206.56.0/22
                          IP: 2400:4cc0::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 06:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109182 (0x1aa7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun 16 17:54:47 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=A91A9E55/serialNumber=E35CE44E7197297591398D82F33D1186174DE83A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:88:bc:e2:50:b7:1a:27:8f:e2:e8:69:7a:03:
                    8d:08:61:02:76:10:7c:96:47:c2:bf:4b:a3:a4:28:
                    3c:45:dd:12:59:62:c7:90:0a:b1:fe:44:30:fd:b3:
                    15:ff:7a:a0:a9:47:cf:3e:f5:a6:8a:5f:3d:36:51:
                    ee:1e:cb:f3:bb:29:fa:78:cc:77:b2:e9:66:5d:fb:
                    ed:a2:55:df:3a:f7:20:8d:6b:c7:e1:ac:b6:37:9f:
                    3d:77:cb:70:5c:25:59:25:58:41:e6:d1:87:87:a8:
                    b1:49:38:a0:ad:7d:6a:4c:5b:2a:2f:64:82:09:df:
                    75:1e:a2:7f:84:8c:6e:29:42:25:b0:c0:f8:9a:08:
                    b1:8c:84:1b:04:ea:39:f4:15:a3:58:fb:37:79:fc:
                    09:7e:c5:44:5a:e0:0d:14:4a:65:ce:1e:32:f9:16:
                    e2:8c:6d:85:ab:3c:b6:80:eb:de:1a:38:8a:8f:1b:
                    aa:30:16:b5:d1:d4:67:df:72:9a:c0:b6:92:46:bc:
                    59:ba:88:ce:00:8d:ee:25:c8:ae:7c:85:06:f8:cd:
                    81:5c:5a:2f:a0:d4:83:6b:a7:2f:d5:02:98:4d:d9:
                    2f:a7:f8:ce:14:a1:d3:6c:c7:fe:c9:d3:20:85:e4:
                    e8:94:5d:6e:b1:6a:45:25:aa:ea:38:e6:13:6b:80:
                    ef:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:5C:E4:4E:71:97:29:75:91:39:8D:82:F3:3D:11:86:17:4D:E8:3A
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59363

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.231.176.0/22
                  116.206.56.0/22
                IPv6:
                  2400:4cc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:08:6e:b2:dc:ff:c5:14:75:36:cd:49:e9:1c:ad:11:63:55:
         37:c8:9e:45:65:f7:bf:6e:31:83:c5:1d:9f:67:70:99:5b:45:
         b7:f9:5f:5f:bc:54:19:49:2f:70:e5:a1:03:aa:94:c6:41:7f:
         33:a3:2a:47:0c:05:6d:45:f8:af:9c:53:05:cc:79:ff:b3:4f:
         99:28:0e:d0:39:4d:a7:be:3e:58:b5:a2:30:a4:9a:08:8b:65:
         33:f7:4b:c2:bc:36:25:5c:a0:d1:f5:a6:a3:7b:fc:8d:59:26:
         f2:61:0f:f6:ad:2c:13:90:90:e6:ec:89:0f:63:3b:73:3b:a1:
         37:ba:f4:58:62:89:7a:58:58:a5:f5:1f:72:f3:e9:4a:f8:66:
         5d:c5:8a:c0:90:ec:fa:60:cd:9d:85:83:63:dc:c2:13:bb:f5:
         fd:c6:ee:3b:f3:3b:c8:86:47:dc:a7:ed:ec:cf:42:30:4f:f4:
         42:bb:96:4b:97:47:9f:1c:29:fc:04:9b:0c:24:04:e2:5d:7f:
         49:ca:88:ee:61:dd:b8:41:91:ba:92:c3:59:bf:49:78:93:12:
         d8:e9:c1:d9:79:e2:82:33:c9:c3:4e:67:f6:aa:02:ba:72:ab:
         96:35:5c:04:76:83:d3:4c:42:13:43:58:7e:f2:29:1d:46:59:
         94:1d:3c:fc
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIDAap+MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMDYxNjE3NTQ0N1oXDTI0MDczMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQTlFNTUxMTAvBgNVBAUTKEUzNUNFNDRFNzE5NzI5NzU5MTM5OEQ4
MkYzM0QxMTg2MTc0REU4M0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDniLziULcaJ4/i6Gl6A40IYQJ2EHyWR8K/S6OkKDxF3RJZYseQCrH+RDD9sxX/
eqCpR88+9aaKXz02Ue4ey/O7Kfp4zHey6WZd++2iVd869yCNa8fhrLY3nz13y3Bc
JVklWEHm0YeHqLFJOKCtfWpMWyovZIIJ33Ueon+EjG4pQiWwwPiaCLGMhBsE6jn0
FaNY+zd5/Al+xURa4A0USmXOHjL5FuKMbYWrPLaA694aOIqPG6owFrXR1GffcprA
tpJGvFm6iM4Aje4lyK58hQb4zYFcWi+g1INrpy/VAphN2S+n+M4UodNsx/7J0yCF
5OiUXW6xakUlquo45hNrgO8dAgMBAAGjggMkMIIDIDAdBgNVHQ4EFgQU41zkTnGX
KXWROY2C8z0RhhdN6DowHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUE5RTU1L0Q5NTE3Njg0MERGMzExRUI5MzA3NkY2NUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFBOUU1NS9EOTUxNzY4NDBERjMxMUVCOTMwNzZGNjVDNEY5QUUwMi80MXprVG5H
WEtYV1JPWTJDOHowUmhoZE42RG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAOfjMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCZ+ewAwQCdM44
MA0EAgACMAcDBQAkAEzAMA0GCSqGSIb3DQEBCwUAA4IBAQA6CG6y3P/FFHU2zUnp
HK0RY1U3yJ5FZfe/bjGDxR2fZ3CZW0W3+V9fvFQZSS9w5aEDqpTGQX8zoypHDAVt
RfivnFMFzHn/s0+ZKA7QOU2nvj5YtaIwpJoIi2Uz90vCvDYlXKDR9aaje/yNWSby
YQ/2rSwTkJDm7IkPYztzO6E3uvRYYol6WFil9R9y8+lK+GZdxYrAkOz6YM2dhYNj
3MITu/X9xu478zvIhkfcp+3sz0IwT/RCu5ZLl0efHCn8BJsMJATiXX9JyojuYd24
QZG6ksNZv0l4kxLY6cHZeeKCM8nDTmf2qgK6cquWNVwEdoPTTEITQ1h+8ikdRlmU
HTz8
-----END CERTIFICATE-----
Generated at Thu Apr 25 07:21:06 2024 by rpki-client on console-ams.rpki-client.org