Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jHTCSfkmmoi2fas1wYQO-Pl3BY.cer
File:                     4jHTCSfkmmoi2fas1wYQO-Pl3BY.cer (raw, json)
Hash identifier:          7Eq2wq0iqtC3ZV68OFj7dcqKgl7akk1ZBDiIE+UTV3E=
Subject key identifier:   E2:31:D3:09:27:E4:9A:6A:22:D9:F6:AC:D7:06:10:3B:E3:E5:DC:16
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01C7FD
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 01 Nov 2023 08:42:47 +0000
Certificate not after:    Thu 31 Oct 2024 00:00:00 +0000
Subordinate resources:    AS: 55734
                          IP: 43.245.0.0/22
                          IP: 103.232.184.0/22
                          IP: 223.27.120.0/22
                          IP: 2401:4ce0::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 04:27:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116733 (0x1c7fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov  1 08:42:47 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=A9188CCC/serialNumber=E231D30927E49A6A22D9F6ACD706103BE3E5DC16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6d:73:46:2c:ee:6d:6c:00:44:2b:f5:42:40:
                    63:b8:89:53:f8:c6:5f:5b:1e:9a:f2:32:1d:c8:69:
                    dc:44:be:19:cb:08:6c:07:38:0d:30:c1:75:7b:f7:
                    e3:a3:7a:e6:00:1e:42:73:c0:de:1f:0b:94:6d:0f:
                    49:4c:23:98:50:45:ee:f7:f5:c6:0f:44:83:2c:06:
                    63:1e:e7:0d:a8:48:1a:d1:d6:64:c4:18:ef:63:12:
                    c5:62:0e:03:1e:21:ed:c9:a0:a6:62:ea:8d:38:89:
                    20:e2:de:90:5b:4b:d0:8b:8d:c9:20:b2:af:53:3d:
                    d7:5f:18:9e:78:44:bf:66:89:37:ed:31:2c:f8:11:
                    24:03:cc:e4:f5:4e:dd:01:bb:16:86:89:0c:52:c7:
                    4a:0d:2e:a1:56:e5:d1:77:f9:91:aa:74:94:c2:fa:
                    d3:d0:9e:d0:51:33:30:1e:4a:65:17:fc:b0:f1:f2:
                    71:97:c4:cf:d3:76:54:3e:66:a4:a1:03:d7:36:f8:
                    4e:a7:7f:23:2e:a6:0f:e8:d5:86:91:d8:1e:c0:8f:
                    62:53:8d:86:94:e8:c5:36:bb:97:60:56:de:fe:0d:
                    1f:44:00:25:b5:9a:19:96:b7:ff:ea:65:f0:cc:35:
                    1b:2f:9c:32:1a:ca:e2:d6:3a:56:d5:7b:6b:20:cf:
                    31:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:31:D3:09:27:E4:9A:6A:22:D9:F6:AC:D7:06:10:3B:E3:E5:DC:16
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  55734

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.245.0.0/22
                  103.232.184.0/22
                  223.27.120.0/22
                IPv6:
                  2401:4ce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:68:04:55:79:83:8f:c0:94:cc:23:d0:27:68:54:29:14:cb:
         64:9c:88:ae:82:c0:da:96:49:ea:ad:2f:4a:dd:08:43:d4:02:
         57:75:90:d8:01:af:33:d2:e0:24:6c:8c:c1:57:4f:cd:b7:a0:
         dc:c8:ff:8e:fb:b4:c9:4f:eb:05:09:d0:ac:9a:e8:35:42:3a:
         9f:90:99:f2:fa:cc:90:e0:0a:c8:46:7b:cd:ea:7d:1f:22:8f:
         fd:20:e8:22:34:82:e2:59:9f:e3:4e:f9:f0:9d:a2:51:7c:cf:
         23:a3:0d:51:a3:9b:e5:fc:5b:49:a0:f0:52:2a:74:de:92:aa:
         0e:0a:ad:e0:e6:2f:92:90:bf:c7:c2:10:09:a8:8d:29:45:24:
         10:88:f0:01:98:fb:98:2a:f9:ae:ef:5c:07:8c:85:42:1c:2d:
         5e:b0:a4:ce:62:08:a2:de:5d:b9:23:36:ba:b6:ca:9f:4b:c2:
         ee:ab:0e:20:6d:3e:bb:07:dc:88:d3:eb:08:d7:c3:28:eb:84:
         47:3c:d1:41:ac:ca:cd:4e:b1:20:ce:25:b8:74:5a:c4:50:cd:
         0f:b6:5c:84:1a:34:77:78:1b:cf:80:21:74:85:b7:cc:de:56:
         4a:d9:4f:d1:0d:97:ed:f7:d4:ef:cb:27:06:61:6e:86:64:f3:
         79:1a:dd:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 05:27:30 2024 by rpki-client on console-fra.rpki-client.org