Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.cer
File:                     5Gu_AXaJVuhmrsRD8rsTUB8uc3k.cer (raw, json)
Hash identifier:          rVsI7PEF3tYkbE5ynGM76KNgQwW7ZJPgsFbpah2Bvjg=
Subject key identifier:   E4:6B:BF:01:76:89:56:E8:66:AE:C4:43:F2:BB:13:50:1F:2E:73:79
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01E6A4
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 26 Mar 2024 17:34:58 +0000
Certificate not after:    Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 138043
                          IP: 103.130.196.0/23
                          IP: 2400:9860::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Apr 2024 12:49:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124580 (0x1e6a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Mar 26 17:34:58 2024 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=A91D9F0A/serialNumber=E46BBF01768956E866AEC443F2BB13501F2E7379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:19:d9:3c:e6:20:50:2a:f9:0e:d1:dc:52:d8:
                    79:23:5c:6f:41:31:3c:83:48:66:4e:73:46:dd:b3:
                    19:00:af:79:1c:a9:c5:6d:6b:77:5c:dd:5d:35:bc:
                    c6:84:76:d4:8c:0d:da:7b:4b:00:be:3e:cd:33:04:
                    05:8c:9d:59:24:45:e6:bd:29:44:98:89:9f:7c:32:
                    fe:e1:ef:4d:28:55:5f:90:29:06:c1:3e:a6:b2:9c:
                    ef:9b:93:d4:0e:fe:ea:76:f5:19:5b:23:85:e1:0d:
                    62:ae:9a:04:f2:ed:2b:5c:05:e0:3e:b8:0b:17:ef:
                    f0:c2:94:15:91:3a:ca:bc:9f:60:7f:ce:f7:c9:2c:
                    31:22:32:df:51:68:06:37:16:37:1c:7c:1a:a6:db:
                    8f:ad:ae:f4:0a:1d:b3:81:44:81:18:5b:30:5e:c0:
                    f1:05:20:9f:82:93:b0:d5:2c:d8:a8:8e:83:3c:43:
                    f2:c0:ee:b3:20:0b:b1:06:f5:17:f9:be:8c:e4:cb:
                    47:d0:82:62:ff:22:50:d1:e9:99:db:34:cd:2d:fc:
                    07:e0:4a:67:57:91:d2:a2:ba:05:a8:8e:50:f1:19:
                    28:4b:21:93:de:c9:71:76:b5:6e:87:8a:e4:bc:c8:
                    11:87:57:50:93:b5:5d:cd:71:be:dc:4c:59:69:b9:
                    65:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:6B:BF:01:76:89:56:E8:66:AE:C4:43:F2:BB:13:50:1F:2E:73:79
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  138043

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.196.0/23
                IPv6:
                  2400:9860::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:0f:17:32:32:dd:f8:c8:0e:81:02:a7:d2:85:90:83:7a:fd:
         3f:60:67:e2:b3:f1:9f:87:95:3b:6f:37:f1:c7:e3:e0:a1:6e:
         2e:87:15:c7:e3:b1:bd:35:b7:08:98:76:58:79:d8:06:99:fb:
         5e:ab:42:0f:5f:51:2c:68:db:fd:88:e1:d1:da:46:76:25:16:
         c4:80:c8:64:f6:45:b6:48:ad:74:42:8e:95:30:5b:eb:d7:71:
         31:f8:42:93:62:8a:fa:cd:78:93:07:80:df:8d:4f:a1:c1:6e:
         88:18:89:ee:92:b7:3c:35:43:da:a7:99:bb:a8:9a:56:80:61:
         c8:ff:fb:0f:c5:16:01:92:e1:c7:3f:0e:2c:55:58:88:51:f4:
         9f:b8:ce:60:04:9c:31:7d:a1:55:9c:4e:47:60:5e:4f:74:a8:
         dd:3c:c9:ad:c3:7d:91:74:bc:59:ba:6d:ff:ae:91:d4:d3:93:
         48:c7:78:50:9c:91:70:dd:51:0a:2d:cd:c9:7f:87:74:13:08:
         6f:5d:dc:91:64:a5:4d:cc:2c:09:d4:b6:2f:16:00:74:96:c3:
         33:c1:62:92:82:15:57:95:4d:dd:ff:b3:39:71:21:ee:27:80:
         58:57:3d:16:e7:8b:05:a7:41:4b:f8:c5:02:28:b8:5e:9d:8d:
         24:c4:8c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 13:44:49 2024 by rpki-client on console-ams.rpki-client.org