Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer
File:                     84ggnKyyxrgUysV4XUv002zElx8.cer (raw, json)
Hash identifier:          UXAeHWHtTmX5D7HKt6EyaRlvc6qD4/rt5yW2BjSk9FU=
Subject key identifier:   F3:88:20:9C:AC:B2:C6:B8:14:CA:C5:78:5D:4B:F4:D3:6C:C4:97:1F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01A46B
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 22 May 2023 13:40:46 +0000
Certificate not after:    Tue 30 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 133451
                          IP: 103.132.232.0/24
                          IP: 103.212.192.0/23
                          IP: 103.229.248.0/24
                          IP: 2001:df1:200::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 14:11:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107627 (0x1a46b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May 22 13:40:46 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=A9138A50/serialNumber=F388209CACB2C6B814CAC5785D4BF4D36CC4971F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f3:f7:85:b1:b6:8b:66:44:94:5a:d5:6e:4a:
                    30:8a:14:fc:e9:d2:54:fa:2c:fa:75:4a:36:f4:d9:
                    38:b0:8e:cd:25:57:ba:61:34:70:36:5e:56:1a:c0:
                    b9:a6:6c:2a:83:f4:62:26:5e:b3:76:6b:fc:a2:f9:
                    2c:3f:50:56:79:56:ed:2c:b0:3f:83:68:57:c3:ba:
                    ab:0b:b1:c4:e0:b8:6d:16:33:f9:15:54:91:c9:cc:
                    0b:03:bd:92:da:83:e9:70:06:70:ed:d7:4e:e6:d5:
                    a7:89:44:e9:d5:3a:b2:c7:27:b1:3a:09:41:2c:5a:
                    18:9c:38:bc:ec:81:26:d2:52:19:7f:1b:04:55:c1:
                    98:9a:95:0e:a1:58:ab:92:9c:59:c6:fe:fd:e4:07:
                    80:c4:21:02:04:01:e6:29:22:1b:96:65:6b:5f:06:
                    db:12:72:4f:40:3a:36:59:b3:48:45:cf:05:ed:d3:
                    37:47:88:a4:21:5f:a4:80:d2:72:66:a1:c8:58:71:
                    cd:01:b4:fb:19:30:f3:71:b6:b8:a6:d4:1b:9a:ba:
                    25:d6:50:aa:97:ef:32:15:6a:69:ce:e3:73:58:88:
                    83:be:e7:42:87:28:2b:1c:f8:d2:92:d0:85:63:16:
                    88:55:71:22:9c:76:35:09:af:88:4e:e1:c9:35:49:
                    c6:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:88:20:9C:AC:B2:C6:B8:14:CA:C5:78:5D:4B:F4:D3:6C:C4:97:1F
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  133451

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.232.0/24
                  103.212.192.0/23
                  103.229.248.0/24
                IPv6:
                  2001:df1:200::/48

    Signature Algorithm: sha256WithRSAEncryption
         d8:02:80:05:f2:c7:4e:56:bd:ec:71:98:88:56:9a:bf:c1:57:
         52:90:8a:3e:1f:be:d5:3e:9b:05:2b:4d:93:0e:a2:ab:ff:0b:
         0e:d9:51:4b:e1:ba:69:bf:b8:1b:69:36:3b:98:65:82:91:53:
         07:1f:72:8d:22:b0:71:ff:14:e1:a9:ab:a9:94:8e:a5:ec:eb:
         a6:da:e7:5f:06:a3:31:c0:40:2b:94:2c:44:52:1a:7f:8f:40:
         ec:3b:06:47:50:25:60:bf:83:ba:57:b0:a8:77:09:a4:fe:a0:
         c5:5d:ab:c4:e4:b3:3f:ab:2d:5e:a4:90:c8:7d:ec:9b:b9:14:
         a5:4b:e2:b3:f5:2e:84:a2:e1:05:5b:3f:25:41:b3:d7:83:e0:
         f6:72:91:8f:82:f7:3b:7e:b9:94:9d:61:6c:dd:0e:40:d2:61:
         a3:ad:70:ff:cc:c6:d6:31:87:d5:3d:bb:ea:40:e7:66:2c:c4:
         db:6a:69:84:eb:2a:89:4f:8f:a5:9d:cc:cd:ca:4e:3e:77:57:
         66:2a:65:ff:4b:93:16:21:be:83:87:20:3c:72:b6:e0:6a:e3:
         14:33:46:20:3d:a0:d1:ba:26:72:7b:37:81:c5:e8:88:1f:f6:
         c7:a9:32:e3:a8:9f:24:d3:43:e8:2f:4d:19:1e:72:ee:3a:d4:
         bb:b7:8a:73
-----BEGIN CERTIFICATE-----
MIIGNzCCBR+gAwIBAgIDAaRrMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMDUyMjEzNDA0NloXDTI0MDczMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMzhBNTAxMTAvBgNVBAUTKEYzODgyMDlDQUNCMkM2QjgxNENBQzU3
ODVENEJGNEQzNkNDNDk3MUYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC58/eFsbaLZkSUWtVuSjCKFPzp0lT6LPp1Sjb02Tiwjs0lV7phNHA2XlYawLmm
bCqD9GImXrN2a/yi+Sw/UFZ5Vu0ssD+DaFfDuqsLscTguG0WM/kVVJHJzAsDvZLa
g+lwBnDt107m1aeJROnVOrLHJ7E6CUEsWhicOLzsgSbSUhl/GwRVwZialQ6hWKuS
nFnG/v3kB4DEIQIEAeYpIhuWZWtfBtsSck9AOjZZs0hFzwXt0zdHiKQhX6SA0nJm
ochYcc0BtPsZMPNxtrim1BuauiXWUKqX7zIVamnO43NYiIO+50KHKCsc+NKS0IVj
FohVcSKcdjUJr4hO4ck1ScYVAgMBAAGjggMsMIIDKDAdBgNVHQ4EFgQU84ggnKyy
xrgUysV4XUv002zElx8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTM4QTUwL0M5QTdBNDM4NTZGOTExRUM4MzZFOTEwREM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEzOEE1MC9DOUE3QTQzODU2RjkxMUVDODM2RTkxMERDNEY5QUUwMi84NGdnbkt5
eXhyZ1V5c1Y0WFV2MDAyekVseDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAglLMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQAZ4ToAwQBZ9TA
AwQAZ+X4MA8EAgACMAkDBwAgAQ3xAgAwDQYJKoZIhvcNAQELBQADggEBANgCgAXy
x05WvexxmIhWmr/BV1KQij4fvtU+mwUrTZMOoqv/Cw7ZUUvhumm/uBtpNjuYZYKR
Uwcfco0isHH/FOGpq6mUjqXs66ba518GozHAQCuULERSGn+PQOw7BkdQJWC/g7pX
sKh3CaT+oMVdq8Tksz+rLV6kkMh97Ju5FKVL4rP1LoSi4QVbPyVBs9eD4PZykY+C
9zt+uZSdYWzdDkDSYaOtcP/MxtYxh9U9u+pA52YsxNtqaYTrKolPj6WdzM3KTj53
V2YqZf9LkxYhvoOHIDxytuBq4xQzRiA9oNG6JnJ7N4HF6Igf9sepMuOonyTTQ+gv
TRkecu461Lu3inM=
-----END CERTIFICATE-----
Generated at Sat Apr 20 15:06:09 2024 by rpki-client on console-fra.rpki-client.org