Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6rJKkMbQRs2D-170o8WY5OqaFow.cer
File:                     6rJKkMbQRs2D-170o8WY5OqaFow.cer (raw, json)
Hash identifier:          tONbfXxPjYyBp3YCW+5Nak8MwZJQ2+r/8gmgwEW23fo=
Subject key identifier:   EA:B2:4A:90:C6:D0:46:CD:83:FB:5E:F4:A3:C5:98:E4:EA:9A:16:8C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01B1DA
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 24 Jul 2023 18:28:39 +0000
Certificate not after:    Sat 31 Aug 2024 00:00:00 +0000
Subordinate resources:    AS: 139192
                          IP: 103.139.144.0/23
                          IP: 2001:df0:8080::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 23:18:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111066 (0x1b1da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 24 18:28:39 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=A9137242/serialNumber=EAB24A90C6D046CD83FB5EF4A3C598E4EA9A168C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ae:57:26:4c:c9:8b:98:03:4f:3c:e8:31:25:
                    64:a1:04:8b:a5:79:e5:99:72:0f:e8:5c:56:e0:b8:
                    28:33:82:ad:6a:ea:fe:5a:63:29:84:a1:77:97:bb:
                    2c:ac:fc:a9:cf:03:48:60:7e:6a:6d:ed:00:f8:7d:
                    b7:7a:b8:61:a5:e6:a9:8a:5e:ed:60:bf:85:6d:57:
                    86:c7:bf:b6:22:06:f5:0b:21:96:cd:02:dd:dd:20:
                    20:12:88:bb:7b:0b:b8:c2:54:e6:23:d0:5c:27:68:
                    57:c8:9c:37:04:d7:77:56:e1:51:6d:b1:19:0d:b7:
                    96:52:82:5b:e2:51:39:de:3e:72:d7:c5:65:64:21:
                    c5:f6:1e:59:8c:4e:af:6a:76:89:36:93:c5:5c:32:
                    d7:0a:12:c7:15:fc:b7:a4:74:90:fd:66:15:2d:fa:
                    49:f4:7b:b7:5a:96:2f:b5:76:31:e1:5f:74:ba:fd:
                    fb:bc:88:7c:86:68:43:d5:50:37:94:73:7f:aa:51:
                    ab:1c:b6:4e:e7:73:03:3d:93:66:9f:39:e2:0e:ad:
                    30:48:4e:e7:cf:1a:c5:b3:4b:bc:c0:65:ce:ce:3d:
                    aa:5f:94:4d:62:a5:8c:ea:5f:c0:1a:7e:a3:ca:88:
                    79:64:37:4c:0d:a8:f7:60:11:fe:56:08:85:7d:a0:
                    15:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B2:4A:90:C6:D0:46:CD:83:FB:5E:F4:A3:C5:98:E4:EA:9A:16:8C
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  139192

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.144.0/23
                IPv6:
                  2001:df0:8080::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:a9:98:43:a6:85:ba:e1:1b:98:b9:a2:f8:16:08:99:95:28:
         cc:8c:a5:55:7d:a2:2f:bc:c7:ec:47:89:59:74:cf:db:67:c4:
         24:b3:86:89:78:a6:a5:57:14:7c:93:9c:7d:fe:9b:11:0d:a3:
         ae:2f:1a:d3:5f:cc:a7:df:a5:27:86:d2:6e:54:e9:30:54:e8:
         0a:5a:66:cb:d5:66:dd:7f:35:ea:a2:04:11:c8:46:63:fe:be:
         0d:43:14:93:4e:64:89:1a:42:35:f3:93:b9:2b:89:e8:4c:be:
         4f:fb:4f:5d:0b:ca:37:00:3a:f5:ff:b4:67:28:fc:4c:df:a7:
         c9:e1:4e:fb:cc:f0:7a:38:86:f5:71:75:04:29:ea:99:31:f8:
         a7:2c:a6:03:97:91:bf:42:4d:14:a1:fb:9a:e7:4e:2a:ce:79:
         cc:40:f5:7b:d3:23:4b:e4:76:79:ed:a4:b9:ab:2f:bd:2c:8f:
         c4:27:30:28:89:b3:14:67:2e:9a:94:24:47:c3:bf:e3:ec:a1:
         bc:2c:ff:a9:b7:9b:c7:1a:c7:46:dc:7a:be:41:8d:1c:b2:b4:
         04:0e:84:60:c4:23:d6:a7:ce:0a:2a:3c:6f:fb:0e:b6:26:eb:
         ee:9e:d1:18:51:0f:b9:aa:70:d6:21:3b:f4:96:d1:f7:8f:83:
         0f:66:4d:aa
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 20 00:10:41 2024 by rpki-client on console-fra.rpki-client.org