Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UTm_uoP5rnfex2j2aWS_Lispik.cer
File:                     9UTm_uoP5rnfex2j2aWS_Lispik.cer (raw, json)
Hash identifier:          ZjZVZOFkoAQGPvSQoKdYdMwr0Ky123i9T3d84aRfrwo=
Subject key identifier:   F5:44:E6:FE:EA:0F:E6:B9:DF:7B:1D:A3:D9:A5:92:FC:B8:AC:A6:29
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01C4BF
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 18 Oct 2023 05:31:23 +0000
Certificate not after:    Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources:    AS: 151965
                          IP: 103.67.50.0/23
                          IP: 2401:4760::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 03:13:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115903 (0x1c4bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct 18 05:31:23 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=A91DD55B/serialNumber=F544E6FEEA0FE6B9DF7B1DA3D9A592FCB8ACA629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:12:0b:37:1d:ea:cc:c5:38:f2:23:f3:36:0a:
                    35:c2:d8:73:f4:f9:fb:47:18:5b:4b:73:90:77:47:
                    78:92:81:dc:db:d9:f2:3f:d4:a0:85:73:70:43:93:
                    2d:c0:95:a9:6b:84:db:1e:21:d6:70:c1:41:f6:e9:
                    cc:96:fc:9f:bb:4b:dd:78:59:f9:39:de:9d:f3:7d:
                    5e:a3:99:6e:76:6f:1c:d7:a9:ff:a2:e6:a7:8e:61:
                    e4:8d:dd:fc:06:13:98:f2:8c:ce:cb:17:6d:53:fe:
                    8e:76:88:7e:bc:66:38:8b:52:d1:30:49:46:62:91:
                    43:fd:45:2f:08:d6:cc:a6:31:87:25:2b:99:9e:d3:
                    04:7b:67:22:50:4e:b5:7f:08:fe:5e:70:98:a4:8a:
                    9e:fc:ef:6e:98:2a:eb:c7:dc:37:64:d8:f2:cd:cc:
                    cb:cb:e6:6c:06:b7:4a:68:f1:70:4c:14:f7:a8:82:
                    75:cf:bc:cf:81:db:fb:c0:89:17:78:59:f5:02:e2:
                    51:60:73:f8:a2:59:fc:02:65:b6:af:09:f3:b1:0a:
                    d3:22:ce:e8:ec:62:2f:8b:47:7d:83:b4:a5:09:84:
                    67:ac:fc:c4:fd:1f:c5:77:54:d4:57:65:ef:4d:bb:
                    cc:bf:07:f0:1e:2b:b3:a3:fe:12:cb:87:ba:93:0b:
                    62:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:44:E6:FE:EA:0F:E6:B9:DF:7B:1D:A3:D9:A5:92:FC:B8:AC:A6:29
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  151965

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.67.50.0/23
                IPv6:
                  2401:4760::/32

    Signature Algorithm: sha256WithRSAEncryption
         bf:ac:1d:a5:94:2a:bf:ed:fe:da:23:19:66:4f:0c:02:56:87:
         6b:07:65:88:a9:62:5f:f5:94:3f:15:38:3e:3a:d6:c6:6e:ab:
         bb:bb:f9:ae:00:a9:b1:3b:c1:f1:5e:ff:3b:e0:70:21:f9:a2:
         ac:61:07:0c:2e:4a:58:01:88:1a:8f:e6:ed:23:10:1b:a1:be:
         ba:4d:8d:68:e4:9f:97:f2:50:6d:07:1c:35:85:47:bc:58:2b:
         f8:16:6e:22:75:c0:1c:7a:2d:65:62:7e:0c:62:76:5a:2d:4a:
         bb:ad:47:25:fc:49:78:ee:b7:13:ac:ef:d4:ee:b7:92:a6:db:
         1f:c4:d3:e1:f6:cf:e3:83:83:48:33:37:89:8c:84:2f:91:47:
         86:3b:f9:4f:b5:79:ef:d6:71:6c:85:bc:ce:40:aa:03:81:10:
         e6:85:f8:1d:f9:3d:ed:62:90:d5:78:6e:75:ea:ca:04:ee:bd:
         81:b9:fc:3f:6d:ab:84:a7:ab:3a:bc:21:0f:a1:10:9b:8b:69:
         5b:26:e6:bd:44:2e:4a:65:91:30:e3:b5:c8:d5:fc:8d:df:9a:
         37:1c:4c:4b:d4:ea:79:3d:94:22:c1:bb:8b:61:50:42:ec:58:
         c0:e9:f7:00:ae:c6:cb:07:05:1e:4d:47:ff:42:fa:38:1c:87:
         1b:b7:66:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:20:36 2024 by rpki-client on console-ams.rpki-client.org