Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JI7Cl99XGi66s5BQV9CpSDXSyo.cer
File:                     4JI7Cl99XGi66s5BQV9CpSDXSyo.cer (raw, json)
Hash identifier:          X8ZqVTHDTO6tcQfCzfw3ntmBeAehJXEK9YTG8OBUCKs=
Subject key identifier:   E0:92:3B:0A:5F:7D:5C:68:BA:EA:CE:41:41:5F:42:A5:20:D7:4B:2A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01E282
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sun 03 Mar 2024 19:24:06 +0000
Certificate not after:    Wed 28 May 2025 00:00:00 +0000
Subordinate resources:    AS: 59321
                          IP: 103.213.28.0/23
                          IP: 103.226.122.0/24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Apr 2024 15:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123522 (0x1e282)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Mar  3 19:24:06 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=A91D9E49/serialNumber=E0923B0A5F7D5C68BAEACE41415F42A520D74B2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:33:00:bf:f9:f0:30:53:e4:41:c0:f3:48:d3:
                    35:e1:17:d8:f2:75:f9:fb:ce:7d:50:4c:af:7b:3d:
                    01:da:90:a4:b7:c4:fb:9a:6d:76:f1:74:b2:d6:25:
                    7d:ee:59:13:b3:ef:0b:a8:32:75:83:29:2a:c8:4e:
                    50:54:d3:71:a4:6e:c4:d8:c4:d9:80:83:7c:37:40:
                    9f:03:10:00:4c:ee:15:8f:d9:a0:61:69:84:6b:fb:
                    7f:a9:8b:db:03:64:fb:ba:3d:d5:2c:19:af:12:fb:
                    b9:e9:5d:8b:f4:84:0f:5f:ff:8a:ae:31:85:15:ad:
                    5c:d8:ae:61:01:d2:7a:f5:a6:5a:1d:6e:af:93:a3:
                    25:f9:99:1a:6e:7c:b0:9e:dc:3e:7d:59:92:92:71:
                    b4:5e:fd:30:7a:57:d0:1c:c6:3e:c3:a7:e8:b2:7a:
                    8a:97:39:f9:85:12:06:e2:a4:7b:a1:6d:c0:6b:31:
                    77:f8:75:27:25:79:24:44:58:e1:60:91:fe:d8:f7:
                    5a:8d:85:8f:08:89:d4:7a:14:26:06:ac:f1:a2:4c:
                    60:32:35:74:d4:80:65:50:5a:7c:04:b4:44:94:c4:
                    f9:d4:7c:f0:bb:de:9b:39:89:55:ce:cd:5b:08:70:
                    59:53:26:61:6d:30:a1:ca:ab:82:2d:6c:76:79:bc:
                    d2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:92:3B:0A:5F:7D:5C:68:BA:EA:CE:41:41:5F:42:A5:20:D7:4B:2A
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59321

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.213.28.0/23
                  103.226.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:be:a3:83:03:1b:88:42:f0:78:e1:60:27:f2:9e:82:bd:3f:
         fb:8f:28:68:2e:2e:57:95:24:31:89:c3:cb:f4:b7:26:8c:92:
         d3:20:de:d7:a9:6f:0e:a4:52:59:9c:44:79:fd:10:ea:81:72:
         a4:43:93:4f:24:78:51:f7:74:be:43:3e:29:2d:ac:02:06:74:
         47:11:4b:c1:c6:28:e3:fb:07:88:e8:f9:59:cf:00:e1:bc:1b:
         dd:f0:ad:90:e0:ae:90:ad:f5:72:0e:36:ec:7c:3e:4d:21:55:
         05:8b:8f:c4:70:59:1b:91:02:05:9e:17:00:e6:7e:c9:bf:c3:
         8e:de:8c:1c:c2:df:a3:22:04:98:dc:1a:4d:e5:d2:2c:3c:51:
         63:36:61:aa:01:cd:1e:1c:de:bc:97:c3:44:8d:1a:5c:64:6e:
         6f:33:50:8b:19:33:8d:a2:c0:39:af:02:48:9e:49:bd:3f:94:
         34:2d:92:8c:96:ed:f6:2b:86:e0:e2:2d:99:5b:11:b3:47:f5:
         35:4d:73:18:33:9b:d5:01:1e:e5:f9:01:a7:8b:72:6f:5b:21:
         5f:d9:0c:b4:7a:06:2b:8e:85:01:0e:a9:c1:18:c2:c2:83:72:
         d6:a0:40:3d:4c:39:c6:2f:c1:0f:60:89:a6:89:64:6d:9a:72:
         c8:12:8c:db
-----BEGIN CERTIFICATE-----
MIIGIDCCBQigAwIBAgIDAeKCMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDMwMzE5MjQwNloXDTI1MDUyODAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRDlFNDkxMTAvBgNVBAUTKEUwOTIzQjBBNUY3RDVDNjhCQUVBQ0U0
MTQxNUY0MkE1MjBENzRCMkEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDWMwC/+fAwU+RBwPNI0zXhF9jydfn7zn1QTK97PQHakKS3xPuabXbxdLLWJX3u
WROz7wuoMnWDKSrITlBU03GkbsTYxNmAg3w3QJ8DEABM7hWP2aBhaYRr+3+pi9sD
ZPu6PdUsGa8S+7npXYv0hA9f/4quMYUVrVzYrmEB0nr1plodbq+ToyX5mRpufLCe
3D59WZKScbRe/TB6V9Acxj7Dp+iyeoqXOfmFEgbipHuhbcBrMXf4dScleSREWOFg
kf7Y91qNhY8IidR6FCYGrPGiTGAyNXTUgGVQWnwEtESUxPnUfPC73ps5iVXOzVsI
cFlTJmFtMKHKq4ItbHZ5vNKpAgMBAAGjggMVMIIDETAdBgNVHQ4EFgQU4JI7Cl99
XGi66s5BQV9CpSDXSyowHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUQ5RTQ5LzA0MDQ5RDA4NDFBMjExRUE5RjI2OTU4N0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFEOUU0OS8wNDA0OUQwODQxQTIxMUVBOUYyNjk1ODdDNEY5QUUwMi80Skk3Q2w5
OVhHaTY2czVCUVY5Q3BTRFhTeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAOe5MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBZ9UcAwQAZ+J6
MA0GCSqGSIb3DQEBCwUAA4IBAQBnvqODAxuIQvB44WAn8p6CvT/7jyhoLi5XlSQx
icPL9LcmjJLTIN7XqW8OpFJZnER5/RDqgXKkQ5NPJHhR93S+Qz4pLawCBnRHEUvB
xijj+weI6PlZzwDhvBvd8K2Q4K6QrfVyDjbsfD5NIVUFi4/EcFkbkQIFnhcA5n7J
v8OO3owcwt+jIgSY3BpN5dIsPFFjNmGqAc0eHN68l8NEjRpcZG5vM1CLGTONosA5
rwJInkm9P5Q0LZKMlu32K4bg4i2ZWxGzR/U1TXMYM5vVAR7l+QGni3JvWyFf2Qy0
egYrjoUBDqnBGMLCg3LWoEA9TDnGL8EPYImmiWRtmnLIEozb
-----END CERTIFICATE-----
Generated at Thu Mar 28 16:48:09 2024 by rpki-client on console-fra.rpki-client.org