Certificate

$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OsB-DbeVsouLoeTPawJZ2T6_j4.cer
File:                     5OsB-DbeVsouLoeTPawJZ2T6_j4.cer (raw, json)
Hash identifier:          PuGaaf/l58mYuBXpURqUQtDJCEQg+I/a9MYRqeRKuBw=
Subject key identifier:   E4:EB:01:F8:36:DE:56:CA:2E:2E:87:93:3D:AC:09:67:64:FA:FE:3E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02D70A
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/4/E4EB01F836DE56CA2E2E87933DAC096764FAFE3E.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/4/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Fri 18 Sep 2026 15:39:26 +0000
Certificate not after:    Thu 30 Dec 2027 00:00:00 +0000
Subordinate resources:    AS: 154936
                          IP: 163.52.212.0/23
                          IP: 2001:df7:8bc0::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 10:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 186122 (0x2d70a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep 18 15:39:26 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=A9143C360000, serialNumber=E4EB01F836DE56CA2E2E87933DAC096764FAFE3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:31:a1:57:d4:f8:0b:45:04:8f:d7:c8:22:44:
                    c3:bf:2c:a4:24:6f:7d:2b:c3:3b:b1:ae:d3:bf:83:
                    d3:4e:17:47:16:ff:d5:5f:7c:70:c3:c4:ac:54:af:
                    e4:45:7d:42:62:f5:ef:5c:29:e7:2d:3f:45:8f:24:
                    0f:40:8b:10:8e:46:52:6d:85:9d:19:39:fc:a8:65:
                    d5:1e:b7:74:b4:84:a2:61:53:5f:a9:34:7c:a7:89:
                    37:4a:11:d2:e2:7d:ac:95:38:ed:35:11:d3:83:87:
                    64:e1:82:e2:07:60:cc:7f:71:03:0e:77:e5:96:d9:
                    6e:d0:ac:15:f9:da:80:f8:e1:e7:18:b0:e9:bc:76:
                    08:48:50:34:1b:d3:b0:53:0c:c5:c4:b3:8d:17:e6:
                    34:ac:1b:4d:ad:9b:22:a6:26:6a:10:6c:d7:d1:3a:
                    6b:22:00:4f:e4:37:35:26:3d:bb:6e:cd:38:51:56:
                    94:b0:80:30:ea:c2:e6:7a:e1:e3:7a:0e:7b:1d:94:
                    7d:a6:5a:a5:52:70:35:b3:4f:f8:14:ff:ac:ae:00:
                    19:18:23:74:00:6a:ef:ad:ed:c5:50:ad:04:94:90:
                    ed:5e:8e:2f:10:4e:31:5c:e3:2a:5c:96:37:bb:74:
                    2e:66:8f:b0:48:a5:e9:a4:f5:05:95:13:c5:5d:27:
                    a5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:EB:01:F8:36:DE:56:CA:2E:2E:87:93:3D:AC:09:67:64:FA:FE:3E
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/4/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/4/E4EB01F836DE56CA2E2E87933DAC096764FAFE3E.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  154936

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.52.212.0/23
                IPv6:
                  2001:df7:8bc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:6e:f2:d1:f0:10:a7:bf:2f:10:0f:e4:d3:1b:a0:69:8c:e5:
         c3:61:f3:b9:db:d3:1d:e8:bd:c6:91:7f:13:bc:a3:79:ca:69:
         ed:dd:d1:66:56:e0:f7:4e:82:18:8b:93:46:79:f7:6a:53:84:
         a5:e0:02:1e:6f:aa:f6:7b:ab:87:95:ec:4f:8a:22:53:3a:19:
         5e:dc:86:86:73:b1:dc:66:ea:9d:cc:e3:56:8d:98:d6:b6:42:
         f7:c7:90:f2:53:03:f3:db:24:38:e8:c9:e1:92:91:be:7e:f4:
         81:b9:4e:2d:43:55:a0:64:8e:cf:59:f3:49:36:f0:69:2e:77:
         10:9a:17:eb:c3:d3:be:03:7b:d2:dc:07:00:8a:56:86:dd:8b:
         e1:d0:fb:e1:18:c2:ae:90:69:5f:38:95:67:51:0c:eb:77:82:
         ab:e0:5b:d2:4e:f4:66:65:67:d9:c9:e7:12:4a:e6:02:e8:45:
         b4:26:90:36:7e:09:12:c4:57:91:16:23:4c:43:7a:5c:94:a3:
         9d:aa:b6:5e:f1:e0:78:8a:e1:40:91:28:4a:bd:af:5d:6d:59:
         fc:4e:cd:ea:fd:2e:e8:75:f7:24:f2:b8:4c:dd:e1:c5:24:a2:
         8f:4f:3f:c6:07:71:8e:33:59:76:00:85:29:60:1b:df:8d:dc:
         80:69:d1:a1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Oct 5 12:58:15 2026 by rpki-client