Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7VRR-GERmCtnraCkwGxR1KCAAXA.cer
File:                     7VRR-GERmCtnraCkwGxR1KCAAXA.cer (raw, json)
Hash identifier:          fZZVfSckmV4nXj416ghx+CkD1z9aiaFmvmxk65isL6o=
Subject key identifier:   ED:54:51:F8:61:11:98:2B:67:AD:A0:A4:C0:6C:51:D4:A0:80:01:70
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01BD4A
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 13 Sep 2023 14:45:08 +0000
Certificate not after:    Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 58684
                          IP: 103.14.204.0/22
                          IP: 2407:980::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 21:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113994 (0x1bd4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep 13 14:45:08 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=A9154786/serialNumber=ED5451F86111982B67ADA0A4C06C51D4A0800170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:fe:08:6d:e9:64:20:8b:2f:db:46:f3:9b:48:
                    73:72:1d:23:5a:50:99:ad:91:3f:36:9a:c9:e6:e1:
                    a3:5c:f5:22:49:14:a6:74:f4:4d:8d:c1:97:6c:99:
                    31:11:e9:3a:85:8d:14:f0:e8:b6:24:f0:72:a8:bb:
                    31:a9:29:c5:42:dc:43:fd:80:78:16:9a:3f:97:50:
                    44:10:9e:2d:2e:89:7f:ab:18:96:d3:ff:42:e9:18:
                    7a:79:a2:82:08:16:16:ff:ed:9f:ce:73:cc:11:8e:
                    1a:2a:50:7f:b3:98:a8:f7:cc:2f:78:cf:7c:01:db:
                    f6:b3:c9:62:34:88:e4:bf:1f:16:48:f4:78:5f:28:
                    c8:6a:a2:88:b3:ba:5f:d5:01:d8:0b:19:73:cb:63:
                    70:ca:07:2c:47:2e:fb:23:1b:29:f6:80:43:4f:d0:
                    f9:e8:30:5f:52:c2:ff:ff:7f:d5:8c:02:08:29:6a:
                    1a:2e:33:82:44:0f:84:4f:e9:a6:74:34:5c:b5:8a:
                    55:48:3f:be:de:31:95:a9:3c:21:04:7a:be:c4:9c:
                    c6:c7:d6:fb:e4:b4:df:ee:e9:fd:db:de:e7:4a:9c:
                    8b:3b:d6:d8:56:28:e5:89:a8:bf:cc:a5:a7:9f:20:
                    69:a8:d9:c6:3e:f1:20:98:70:5b:16:6c:0a:9d:9a:
                    a9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:54:51:F8:61:11:98:2B:67:AD:A0:A4:C0:6C:51:D4:A0:80:01:70
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58684

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.14.204.0/22
                IPv6:
                  2407:980::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:71:e1:7e:9e:e4:8c:2d:66:93:7b:e5:d3:d5:cc:e9:e5:1f:
         6d:c4:3a:23:b8:0e:d2:2e:77:6b:e8:93:de:94:6e:78:5f:f2:
         a6:ff:6a:3c:90:cc:bf:e6:a0:0d:7f:42:02:cc:e5:72:a6:c0:
         f2:12:e7:65:39:63:18:b7:06:2f:0e:79:2b:a4:1b:cc:7f:73:
         e4:c2:8b:a8:cc:fa:5d:35:c5:a0:14:44:80:43:05:b6:59:c9:
         a4:4c:fe:91:b9:56:bf:a6:be:7a:57:48:c3:62:83:49:c1:80:
         89:e3:0c:f8:a2:8e:09:91:5e:e0:97:47:d9:1d:0e:ee:5d:bd:
         43:fb:3d:75:41:44:09:7a:cf:d3:6b:d3:b3:bb:b2:ef:c6:3f:
         f3:d1:cf:27:26:80:30:a6:fc:46:c0:ae:d9:5c:79:fa:a4:7d:
         3e:b7:48:4a:f1:66:c6:a5:6b:64:40:b8:51:64:8b:0b:00:fc:
         e2:f7:15:0e:86:ea:e7:db:64:35:85:ee:2a:c2:58:82:03:ef:
         4e:5b:e4:ac:54:e3:c6:06:16:00:44:33:b8:f0:b0:aa:d4:a9:
         2d:86:47:e2:8a:fe:09:03:82:ab:01:19:5b:ed:5d:cf:ea:3c:
         b9:4b:2e:f2:2b:ca:64:f4:e3:c8:5b:fa:80:92:06:4c:b7:06:
         06:63:a9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 22:16:24 2024 by rpki-client on console-fra.rpki-client.org