Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8yjXnK7LFF8i39-M3sLQVpxpdnw.cer
File:                     8yjXnK7LFF8i39-M3sLQVpxpdnw.cer (raw, json)
Hash identifier:          9q9QEXZdxEoGsCrldiTGoUQDZ5jyD/x97jGr0v3HM00=
Subject key identifier:   F3:28:D7:9C:AE:CB:14:5F:22:DF:DF:8C:DE:C2:D0:56:9C:69:76:7C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01A549
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 26 May 2023 14:17:00 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 139025
                          IP: 103.138.155.0/24
                          IP: 103.160.158.0/24
                          IP: 2001:df2:c080::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 07:49:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107849 (0x1a549)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May 26 14:17:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=A91415AA/serialNumber=F328D79CAECB145F22DFDF8CDEC2D0569C69767C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:26:be:4a:fb:84:08:d7:c3:98:eb:d9:d2:71:
                    00:98:ba:67:c5:ab:d3:04:f2:de:86:cc:d0:0d:23:
                    bc:0e:53:f5:2b:f2:ad:00:17:17:ed:f1:0b:89:fe:
                    3d:a3:36:9e:9d:5e:d5:ec:f0:0d:74:34:c8:f7:45:
                    ab:b9:14:39:64:78:d2:b7:3c:1b:c3:cb:32:85:e5:
                    80:d7:f5:6a:e1:37:b2:18:8c:fd:ab:dd:e6:30:f9:
                    94:6e:73:b7:b2:38:84:4b:ff:e0:17:5b:c7:a3:8e:
                    9a:56:3f:db:e0:ed:b4:1b:d0:8b:e3:ab:94:6a:67:
                    bc:61:7e:81:05:cf:2c:fe:e3:d4:6f:e6:7f:ea:e3:
                    9f:1f:79:b3:7d:88:94:30:3f:63:e2:8a:4e:6d:94:
                    19:c1:82:a3:a3:55:8a:ae:5c:18:8a:cf:4c:78:2b:
                    a7:e5:89:35:e5:99:62:a4:f6:96:07:1b:20:08:4b:
                    e6:3e:b6:10:19:0c:7a:bd:a1:1d:24:c1:97:95:6c:
                    87:49:8b:7d:69:89:52:16:4b:39:0e:62:19:f8:a1:
                    b3:ce:cc:b9:f4:ed:02:49:1d:f9:7b:3f:d1:56:32:
                    49:d2:ec:aa:1b:ab:41:1f:c2:d7:1e:1e:44:0e:28:
                    3f:45:25:98:c4:a3:ca:00:90:6c:4c:5c:76:14:c7:
                    b3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:28:D7:9C:AE:CB:14:5F:22:DF:DF:8C:DE:C2:D0:56:9C:69:76:7C
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  139025

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.155.0/24
                  103.160.158.0/24
                IPv6:
                  2001:df2:c080::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:29:de:22:28:f1:91:89:a9:6f:da:d9:59:ff:5c:51:00:9b:
         e1:e1:b2:56:ad:48:e4:48:0f:63:b9:2e:b3:d4:9c:ca:1a:04:
         59:66:2c:2b:a6:c3:3f:e3:97:b2:b9:c3:50:12:aa:c6:9d:88:
         47:92:4d:fa:b7:5b:51:1a:24:61:ac:18:9e:d6:27:27:64:e1:
         cd:a6:0a:aa:18:8a:e8:d7:d9:88:6a:f3:9d:c6:f3:68:8b:96:
         6d:d8:d8:db:ed:4b:80:16:91:e3:00:a0:65:09:1c:f7:35:29:
         5d:f8:72:f1:2a:c3:1a:a8:9a:f7:ee:9a:be:3f:97:45:a8:7e:
         f0:b3:28:87:1f:62:e2:25:b4:81:24:35:cc:88:ea:8b:6d:3f:
         5f:ac:9e:38:8e:a5:a8:07:98:b7:f3:b7:e0:af:ca:1e:a2:98:
         2b:3b:e8:0c:cd:87:0c:86:37:4f:f9:aa:8c:0b:06:c2:fa:d1:
         c8:52:72:b0:d3:b8:67:b3:6e:19:d6:2b:ea:52:85:17:b0:f6:
         cc:d1:bf:18:e5:00:4c:33:91:59:9a:80:fd:43:70:27:a1:ed:
         93:3e:f3:d6:8f:7f:81:5d:1d:e6:07:a0:e0:88:62:1f:d9:cc:
         25:02:3f:78:aa:c5:fe:42:4a:68:fa:cf:d7:91:04:22:f9:99:
         85:63:21:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:02:45 2024 by rpki-client on console-ams.rpki-client.org