Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/90n3b5KhbSqHFDf3LIbQ0F3imtU.cer
File:                     90n3b5KhbSqHFDf3LIbQ0F3imtU.cer (raw, json)
Hash identifier:          vpdckbQ7GmwKfy2UNNCHwd6Wec15spPe/5Y+i2/GnyU=
Subject key identifier:   F7:49:F7:6F:92:A1:6D:2A:87:14:37:F7:2C:86:D0:D0:5D:E2:9A:D5
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01DF6E
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sun 18 Feb 2024 19:31:10 +0000
Certificate not after:    Thu 01 May 2025 00:00:00 +0000
Subordinate resources:    AS: 150735
                          IP: 103.76.154.0/23
                          IP: 2001:df1:e0c0::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Apr 2024 18:26:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122734 (0x1df6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb 18 19:31:10 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=A91DDDED/serialNumber=F749F76F92A16D2A871437F72C86D0D05DE29AD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:40:91:0d:0c:b9:71:b1:6a:17:a5:68:84:0e:
                    78:62:51:30:f0:4c:d4:a2:0d:00:e7:85:0d:ed:34:
                    53:18:cb:11:55:9d:f3:1e:79:59:4b:97:e3:14:e6:
                    a4:e9:1b:22:5a:4f:97:0c:4c:5f:47:b6:1e:59:e8:
                    8e:f5:82:a5:26:08:a5:ec:c5:9a:0a:a5:a2:76:f5:
                    05:00:3b:c6:dc:45:4d:eb:49:43:4b:e1:4c:d0:d8:
                    b4:ac:0a:05:8a:ea:cf:32:9b:cb:e2:6a:4d:54:98:
                    d5:0e:7c:c2:c0:f6:7d:5c:ba:43:2a:a1:6e:00:72:
                    fc:8d:ff:20:2d:96:08:d7:49:e3:3b:36:e4:6a:76:
                    27:67:38:b1:fe:03:27:52:bd:85:e8:04:bf:0b:e4:
                    76:80:7b:0f:34:b0:4a:24:85:6a:de:b7:f6:36:fe:
                    80:c9:04:49:19:25:b8:83:94:51:82:9b:08:b5:40:
                    b1:d1:9b:f5:62:9f:22:78:ba:59:a3:ec:1c:b5:8b:
                    80:cf:3e:12:22:ea:ea:fb:f7:0b:43:0f:fe:bc:1f:
                    b3:e3:da:e9:ef:e5:fd:3d:b6:f7:81:d2:dc:a1:9c:
                    ea:01:63:6d:ae:2e:90:58:60:f0:04:5a:b0:56:86:
                    8a:2b:be:36:a8:94:12:e8:8e:da:19:b5:89:d2:b2:
                    0f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:49:F7:6F:92:A1:6D:2A:87:14:37:F7:2C:86:D0:D0:5D:E2:9A:D5
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  150735

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.76.154.0/23
                IPv6:
                  2001:df1:e0c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:3a:5d:e9:73:47:82:d5:0f:11:0c:31:34:ac:a5:e6:70:81:
         06:9a:ab:a6:b3:a7:e0:7b:5d:8d:fc:e0:18:66:ae:85:a9:b3:
         74:83:0d:b5:30:2e:7e:fd:7e:06:55:65:a3:f4:47:e4:a8:fe:
         a4:22:d8:da:fb:c8:02:20:8b:32:f4:57:b9:9c:44:c5:e0:ae:
         7a:6f:1b:af:78:d7:d5:11:77:37:8f:cb:b8:ac:b2:b5:f6:ef:
         02:4e:22:07:97:68:97:28:c5:af:53:3e:38:39:d4:3a:5f:e3:
         72:08:ed:e3:ba:a6:ea:9b:bb:bc:57:55:20:bb:8f:c1:fc:a9:
         84:66:c5:63:aa:6e:36:76:0d:27:1e:16:65:8f:41:7f:ec:95:
         2b:d0:29:f9:9e:3e:7b:84:bf:e4:20:4d:85:fb:d1:36:57:9b:
         26:d0:88:77:bf:20:13:fc:0c:94:fa:4b:f2:6e:de:a7:c4:f9:
         38:9c:09:27:b4:d1:ad:74:78:5f:bb:e4:71:82:03:32:31:8f:
         00:6c:1d:cd:d5:b0:b9:ca:8b:fe:79:a4:7e:65:ef:03:78:c6:
         1f:2d:4d:c3:87:6d:e9:6e:48:8f:9f:f3:54:de:9d:84:48:c7:
         02:00:7c:c1:0c:1a:5b:78:a2:65:38:36:90:10:97:83:eb:2c:
         ed:e4:b4:e5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 28 19:44:36 2024 by rpki-client on console-fra.rpki-client.org