Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer
File:                     7Yy8VM2G8sH5LexryQnbxvpjTIE.cer (raw, json)
Hash identifier:          ukQvgZl/tc9LsbVH+MpqB6VYaw0YO/cYmTPuoo6LCL8=
Subject key identifier:   ED:8C:BC:54:CD:86:F2:C1:F9:2D:EC:6B:C9:09:DB:C6:FA:63:4C:81
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01C12C
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sun 01 Oct 2023 18:40:58 +0000
Certificate not after:    Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 141166
                          IP: 103.155.150.0/23
                          IP: 2001:df4:ce80::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Apr 2024 06:56:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114988 (0x1c12c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct  1 18:40:58 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=A918A3E6/serialNumber=ED8CBC54CD86F2C1F92DEC6BC909DBC6FA634C81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:f2:24:dd:2c:ae:e0:c5:80:47:03:2e:84:1b:
                    01:e7:bb:2c:a4:82:31:29:c8:17:04:e0:42:5b:93:
                    dd:e5:92:22:2c:a8:10:34:73:92:0e:33:65:d6:ee:
                    09:9f:08:2c:74:39:60:e1:40:3a:a9:e9:94:30:64:
                    ff:be:b5:68:60:4e:22:d0:fb:d6:26:8c:79:83:85:
                    0a:f3:c7:16:34:2b:db:f2:c1:68:aa:54:0e:ad:aa:
                    6f:e4:9e:d6:0a:4c:2d:c7:be:91:ac:97:fa:af:f2:
                    e1:a8:cd:c1:12:ec:cc:a8:bf:d1:ef:42:a5:30:6d:
                    45:8e:b5:fc:73:0b:9a:6a:4e:e5:34:93:cb:4d:90:
                    1e:0b:4c:ab:74:c7:54:21:39:dc:8f:4d:13:ef:03:
                    6b:4f:16:b3:42:70:a7:07:92:ff:df:cc:cf:48:4d:
                    3c:45:55:a2:db:70:f9:f5:40:b5:58:d8:27:8f:63:
                    c3:11:da:12:b8:e5:2c:f5:07:3c:82:e2:40:47:48:
                    f9:29:fb:67:2b:2a:f7:4b:33:9b:b1:03:f4:d9:83:
                    0a:7c:89:5c:e4:3e:d0:01:b4:92:1c:c4:54:fc:e5:
                    1d:4f:6e:14:6e:4f:a6:7c:41:c5:bc:b1:35:c0:03:
                    e3:5e:a3:e6:fd:f2:60:68:54:11:ac:ad:42:15:68:
                    40:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:8C:BC:54:CD:86:F2:C1:F9:2D:EC:6B:C9:09:DB:C6:FA:63:4C:81
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  141166

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.150.0/23
                IPv6:
                  2001:df4:ce80::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:78:42:94:3e:c6:63:38:00:27:57:e9:8d:63:a2:25:7b:2a:
         30:3b:7f:0e:ab:ab:4b:09:53:42:b9:a2:ad:f2:b3:f3:ad:5c:
         83:fe:f5:1a:6d:69:04:a6:d2:26:53:a5:bf:7f:eb:ea:9b:6e:
         5c:d1:f1:76:e4:38:57:b0:75:60:76:01:bb:ab:7b:4c:6d:e9:
         ac:b4:84:0d:83:1f:2c:29:35:30:9a:61:da:ea:c4:45:4c:4a:
         6e:e2:0d:35:83:7f:c5:38:98:88:4b:2c:f6:4f:2d:cd:92:fc:
         dc:bb:4c:3a:06:ea:5b:22:99:9f:31:f2:29:09:a1:9d:48:e4:
         05:6e:1c:01:68:0c:39:b2:9c:93:ba:80:86:05:3d:4e:b4:7f:
         ce:9b:f4:27:ec:a1:5d:25:99:7e:d8:cd:7f:db:fa:32:7d:7f:
         df:31:a0:a0:cb:c6:bb:46:b4:b2:50:61:25:ef:c6:4c:02:50:
         58:73:73:e0:1a:2d:ad:d7:f7:5f:cd:1b:13:3a:8d:69:e6:21:
         d5:45:cc:b1:41:4d:c5:c8:9e:49:45:97:5f:e4:90:ab:5b:74:
         fa:c5:64:a8:94:68:2b:b0:d0:1c:78:d0:c6:2c:0e:98:cd:b5:
         ff:ae:91:99:a9:13:77:3c:36:62:62:2f:7d:32:63:6f:d4:64:
         2f:9c:70:8e
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAcEsMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMTAwMTE4NDA1OFoXDTI0MTIwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxOEEzRTYxMTAvBgNVBAUTKEVEOENCQzU0Q0Q4NkYyQzFGOTJERUM2
QkM5MDlEQkM2RkE2MzRDODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQD48iTdLK7gxYBHAy6EGwHnuyykgjEpyBcE4EJbk93lkiIsqBA0c5IOM2XW7gmf
CCx0OWDhQDqp6ZQwZP++tWhgTiLQ+9YmjHmDhQrzxxY0K9vywWiqVA6tqm/kntYK
TC3HvpGsl/qv8uGozcES7Myov9HvQqUwbUWOtfxzC5pqTuU0k8tNkB4LTKt0x1Qh
OdyPTRPvA2tPFrNCcKcHkv/fzM9ITTxFVaLbcPn1QLVY2CePY8MR2hK45Sz1BzyC
4kBHSPkp+2crKvdLM5uxA/TZgwp8iVzkPtABtJIcxFT85R1PbhRuT6Z8QcW8sTXA
A+Neo+b98mBoVBGsrUIVaED9AgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQU7Yy8VM2G
8sH5LexryQnbxvpjTIEwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThBM0U2LzY0MEQ2MThFRjJDOTExRUE4NkYxMjcxN0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE4QTNFNi82NDBENjE4RUYyQzkxMUVBODZGMTI3MTdDNEY5QUUwMi83WXk4Vk0y
RzhzSDVMZXhyeVFuYnh2cGpUSUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAiduMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ5uWMA8EAgAC
MAkDBwAgAQ30zoAwDQYJKoZIhvcNAQELBQADggEBAFN4QpQ+xmM4ACdX6Y1joiV7
KjA7fw6rq0sJU0K5oq3ys/OtXIP+9RptaQSm0iZTpb9/6+qbblzR8XbkOFewdWB2
Abure0xt6ay0hA2DHywpNTCaYdrqxEVMSm7iDTWDf8U4mIhLLPZPLc2S/Ny7TDoG
6lsimZ8x8ikJoZ1I5AVuHAFoDDmynJO6gIYFPU60f86b9CfsoV0lmX7YzX/b+jJ9
f98xoKDLxrtGtLJQYSXvxkwCUFhzc+AaLa3X91/NGxM6jWnmIdVFzLFBTcXInklF
l1/kkKtbdPrFZKiUaCuw0Bx40MYsDpjNtf+ukZmpE3c8NmJiL30yY2/UZC+ccI4=
-----END CERTIFICATE-----
Generated at Thu Mar 28 08:40:16 2024 by rpki-client on console-fra.rpki-client.org