Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer
File:                     788TGtZIDR3QTx1EduNZVFL_RBw.cer (raw, json)
Hash identifier:          Gx717AqchcIj63rRIEtk0E9nVk13Xp5fhe/FmVhy65M=
Subject key identifier:   EF:CF:13:1A:D6:48:0D:1D:D0:4F:1D:44:76:E3:59:54:52:FF:44:1C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01A672
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 31 May 2023 15:14:52 +0000
Certificate not after:    Tue 30 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 136506
                          AS: 137072
                          IP: 103.52.236.0/22
                          IP: 103.59.136.0/22
                          IP: 103.95.28.0/22
                          IP: 103.215.172.0/22
                          IP: 157.119.52.0/22
                          IP: 2401:d440::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 23:35:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108146 (0x1a672)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May 31 15:14:52 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=A9140D20/serialNumber=EFCF131AD6480D1DD04F1D4476E3595452FF441C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:85:44:33:ee:5a:c0:70:97:a9:db:cb:df:6d:
                    73:9e:b8:1d:77:6c:73:d5:5b:a0:75:f4:27:35:e4:
                    d9:d3:8e:31:61:b9:31:9b:f4:fa:bd:5e:68:fe:4e:
                    16:08:f0:70:52:ef:5a:fc:97:2d:46:df:44:81:60:
                    91:73:c0:6e:a1:50:11:c0:21:bf:ce:04:3a:45:5d:
                    9b:97:25:f4:71:15:59:9b:23:54:2e:3b:33:bf:4d:
                    98:dd:ea:f8:7d:a9:4e:54:69:b4:b1:94:9f:ec:1b:
                    6e:ff:94:11:79:df:83:56:eb:23:8d:10:0f:54:44:
                    48:06:df:85:9f:37:2f:54:33:db:bd:e1:bd:a7:5c:
                    35:d2:52:5f:c4:65:f6:d9:59:e0:83:42:86:7f:de:
                    26:f9:31:30:62:f5:ad:91:b6:c6:0d:ce:9e:51:ec:
                    b5:2d:c2:fc:55:33:8f:e0:40:7e:16:5b:de:a5:e3:
                    dd:1d:22:cd:57:56:61:a6:75:cf:3c:c5:71:62:5b:
                    7a:5b:02:7c:ed:72:dd:6f:91:a9:ae:62:9f:be:34:
                    44:43:48:3d:21:a2:bc:bd:ae:13:68:46:7d:eb:9e:
                    cf:9a:70:12:9b:aa:fb:7d:9d:ee:b6:c9:9a:66:00:
                    8c:44:8d:13:a3:f0:18:8c:81:c4:05:8a:a7:d8:bf:
                    94:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:CF:13:1A:D6:48:0D:1D:D0:4F:1D:44:76:E3:59:54:52:FF:44:1C
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  136506
                  137072

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.52.236.0/22
                  103.59.136.0/22
                  103.95.28.0/22
                  103.215.172.0/22
                  157.119.52.0/22
                IPv6:
                  2401:d440::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:cf:a1:c3:7c:55:5e:56:35:33:e3:88:ee:77:9f:a8:d7:d7:
         78:3c:f4:22:5a:d9:c6:27:95:a0:33:38:8d:f4:c0:b0:c3:9f:
         af:28:cd:b1:b9:3e:47:35:41:c0:a7:64:bc:81:a7:5b:2c:42:
         c7:c6:1a:92:d7:bc:1b:fa:5e:9e:7d:a1:e2:8b:97:18:43:18:
         03:2f:d2:6a:2a:63:dc:d8:d8:fb:6e:e0:92:18:fc:ba:35:7b:
         6b:2f:2a:d7:9e:ba:26:09:1e:ff:c2:e5:7e:e9:4c:09:b7:ca:
         4a:81:72:25:dd:33:af:b4:f4:bc:ea:63:68:10:c0:50:80:f1:
         bf:87:f5:da:98:e8:ad:75:a5:81:27:eb:b6:43:52:71:cc:47:
         24:09:d8:7f:1b:da:06:d0:5f:74:41:7a:c7:68:7f:28:34:4c:
         14:1c:c2:29:62:01:d4:39:59:51:69:e4:db:8e:0c:f5:54:fd:
         2b:27:6c:da:ab:f5:84:31:14:0c:de:cb:29:d7:38:91:4f:1a:
         0a:3a:0e:99:e6:29:88:a7:c5:1d:ec:3e:71:c7:a4:cd:b3:f3:
         56:0f:15:ca:23:72:92:6a:a6:98:61:df:82:c5:05:41:8a:53:
         85:d3:ad:6b:00:25:b3:5f:15:76:92:c8:42:28:87:d9:99:78:
         c6:03:20:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 01:09:57 2024 by rpki-client on console-ams.rpki-client.org