Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer
File:                     4Loijq-YEvBn0v87-AaJVpjJOXc.cer (raw, json)
Hash identifier:          vTfpr8EriFR/Y/Sd8+QUxz4nWPXirpvQ7IqFEmRi98s=
Subject key identifier:   E0:BA:22:8E:AF:98:12:F0:67:D2:FF:3B:F8:06:89:56:98:C9:39:77
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01AEB6
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 06 Jul 2023 15:29:03 +0000
Certificate not after:    Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources:    AS: 38186
                          AS: 55331
                          IP: 27.126.176.0/20
                          IP: 103.237.72.0/22
                          IP: 115.126.0.0/17
                          IP: 116.212.112.0/20
                          IP: 118.99.0.0/18
                          IP: 118.102.8.0/21
                          IP: 119.47.80.0/21
                          IP: 163.53.216.0/22
                          IP: 202.59.152.0/21
                          IP: 2404:ee00::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Apr 2024 23:54:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110262 (0x1aeb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul  6 15:29:03 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=A9164D60/serialNumber=E0BA228EAF9812F067D2FF3BF806895698C93977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4a:52:5d:9f:de:4c:f2:58:cf:4b:83:ed:79:
                    51:b8:c2:a3:1f:45:e9:bc:f6:e1:e3:2d:d5:ff:8f:
                    be:bf:f0:2b:57:64:8a:8e:44:54:29:e8:59:ea:1f:
                    6a:3f:b3:96:90:40:83:55:da:1b:7f:90:58:f6:7f:
                    88:b4:66:5b:1b:cb:60:49:89:8f:d8:c5:f5:1d:5e:
                    90:a8:92:e7:1a:a2:5d:e8:b0:aa:b9:0a:53:13:01:
                    d5:3e:a6:0f:69:3f:f4:dd:57:b6:98:d0:c8:36:2e:
                    ef:c8:fd:66:ad:8f:26:b0:f8:31:1a:e9:bb:ca:cc:
                    b1:21:ae:8d:ae:ae:b9:66:18:69:46:fe:ab:1d:c2:
                    40:bb:f8:a5:38:26:a0:25:56:13:6d:bb:71:a6:e8:
                    ee:68:40:f6:54:08:1a:45:50:b1:99:5d:5a:c6:93:
                    17:58:c0:af:7a:2b:32:9b:34:41:88:76:25:bf:17:
                    6d:ee:22:f3:70:97:fd:30:34:db:b9:14:ea:16:bb:
                    74:f7:28:26:05:5a:bb:60:a4:fb:0a:36:c3:ae:aa:
                    7f:e7:20:4b:4c:67:ff:39:7b:54:2a:a8:67:f5:e7:
                    77:58:d9:52:2a:a8:4b:d3:af:9a:67:9f:5d:dc:39:
                    59:da:e8:2e:ee:74:c3:14:b0:28:e5:0d:f7:51:83:
                    55:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:BA:22:8E:AF:98:12:F0:67:D2:FF:3B:F8:06:89:56:98:C9:39:77
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  38186
                  55331

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.126.176.0/20
                  103.237.72.0/22
                  115.126.0.0/17
                  116.212.112.0/20
                  118.99.0.0/18
                  118.102.8.0/21
                  119.47.80.0/21
                  163.53.216.0/22
                  202.59.152.0/21
                IPv6:
                  2404:ee00::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:ce:54:7a:f0:e0:0a:95:ff:8e:b7:0e:1f:7a:1d:f0:31:a8:
         4f:8c:e7:ca:02:fd:88:2b:dd:5a:63:81:f3:c2:da:87:80:d4:
         8a:e3:2a:ef:27:77:ef:44:2f:cf:f1:b7:4d:46:32:38:36:b5:
         02:50:48:0a:74:7c:02:0c:9c:de:ed:cb:60:13:2e:ab:72:3b:
         93:c1:1b:a7:89:d4:33:d8:a0:94:40:53:f8:ed:ed:ec:30:73:
         3d:c9:b8:c9:b1:67:bd:59:79:7f:84:4c:dc:8f:0b:22:59:7c:
         53:c5:a2:5a:b5:4d:d0:53:4b:66:7d:78:df:48:20:3e:95:3d:
         73:03:e1:62:38:1a:53:de:ed:ee:29:5f:59:a8:dc:a3:ae:80:
         0e:63:23:d2:e5:72:d5:5c:3a:20:ff:4d:7f:1c:5c:44:7f:e9:
         8d:09:34:c3:4e:de:83:c9:c3:62:05:1e:8f:e8:d2:57:a2:28:
         fd:2b:86:7e:30:dd:1a:42:72:2d:b2:b9:7b:8f:c9:9c:19:ce:
         cb:6f:ab:0e:71:d5:d9:92:ac:98:51:de:23:88:52:77:db:6d:
         1c:61:da:31:5a:74:13:6e:fd:6e:a1:d3:25:4e:57:58:aa:bb:
         72:7c:81:9c:18:41:04:df:49:a4:eb:89:f7:8e:ec:7b:e8:92:
         37:d3:05:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 00:52:39 2024 by rpki-client on console-ams.rpki-client.org