Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9f0nSvJ86V9pLbgL6O9nwyRgK0g.cer
File:                     9f0nSvJ86V9pLbgL6O9nwyRgK0g.cer (raw, json)
Hash identifier:          oyP6Nalkn4xRniARY3HV7TJfuOJm8etSJhdryTaONHk=
Subject key identifier:   F5:FD:27:4A:F2:7C:E9:5F:69:2D:B8:0B:E8:EF:67:C3:24:60:2B:48
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01F982
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 17 Jun 2024 05:59:22 +0000
Certificate not after:    Wed 30 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 56231
                          IP: 103.179.70.0/24
                          IP: 103.232.219.0/24
                          IP: 117.18.99.0/24
                          IP: 2001:df0:ec0::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 11:16:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129410 (0x1f982)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun 17 05:59:22 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=A913FA48/serialNumber=F5FD274AF27CE95F692DB80BE8EF67C324602B48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:87:76:2f:6d:e9:18:e9:3a:53:99:ed:91:d9:
                    10:ea:c4:59:24:6f:f8:a3:87:da:3d:78:c5:54:3d:
                    bd:9d:1d:3e:87:64:62:ae:33:0a:82:47:b6:91:ef:
                    6d:5f:0b:18:38:eb:38:59:45:35:71:1e:5d:a7:00:
                    34:95:23:96:ae:11:2d:a4:44:68:1a:49:1d:3e:84:
                    a8:fb:f3:e8:c9:70:22:b8:3e:34:b0:ff:ae:eb:44:
                    2f:6c:94:20:d4:81:72:2c:ab:d6:57:c8:55:56:28:
                    89:1a:de:31:66:d3:7f:36:20:6c:b2:01:fd:76:e5:
                    86:6f:fc:de:f1:70:c8:f9:12:75:d0:c4:42:81:58:
                    dc:12:2b:77:f9:83:a9:3b:8e:3e:6a:97:ef:18:b9:
                    74:ee:7e:36:4c:20:ff:6a:3c:81:bf:9b:54:76:41:
                    df:c5:af:56:49:53:21:c7:8b:6e:ed:b6:f0:d5:73:
                    ac:98:56:9b:bc:79:36:55:51:b4:02:34:1d:a3:7a:
                    58:92:86:cd:01:05:67:74:5e:12:a1:bc:5d:24:50:
                    a6:99:8b:a2:52:4e:fc:07:49:b6:17:c5:12:cd:18:
                    f4:50:12:6e:c5:e7:72:10:9a:50:3c:7a:0f:c3:9c:
                    ff:e6:9d:9d:ea:7a:dd:66:4f:90:55:17:04:82:fd:
                    30:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:FD:27:4A:F2:7C:E9:5F:69:2D:B8:0B:E8:EF:67:C3:24:60:2B:48
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  56231

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.70.0/24
                  103.232.219.0/24
                  117.18.99.0/24
                IPv6:
                  2001:df0:ec0::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:43:e7:5f:02:3f:e9:ad:ca:1b:66:e4:4a:1c:df:97:66:6c:
         33:97:62:cb:63:e0:b2:81:01:31:0b:b8:da:77:97:cc:1b:cc:
         6a:a6:ff:25:a6:fe:c4:b5:f3:51:e3:bf:6c:14:33:5d:5f:2a:
         aa:f2:b5:ed:d2:7f:20:2e:a6:32:bb:c1:cd:bd:c3:a8:92:05:
         f9:ef:40:a1:35:4e:e4:5d:34:3f:78:d1:92:0a:ab:a1:44:e3:
         76:b9:83:08:7c:9f:d9:05:c2:95:d1:30:d2:26:62:3c:11:2a:
         46:c7:d7:5a:65:04:a4:9a:5d:ba:23:a4:54:e6:dd:1b:d2:6d:
         28:16:a2:5c:4c:27:f9:26:07:8b:1e:04:b6:7f:1a:4c:4c:6e:
         a0:f7:b7:99:64:8c:34:08:81:cb:0d:72:29:b1:e6:bf:24:aa:
         03:da:ad:bd:6d:d0:52:49:36:4d:52:92:d2:ef:a1:6f:d3:15:
         56:13:a0:86:31:d5:76:4f:af:99:46:95:af:7e:9c:2a:76:db:
         2e:01:12:9b:33:dd:cf:a9:f6:20:eb:60:b3:e3:21:4c:b7:80:
         59:f4:75:85:82:e8:9f:08:4f:0f:dc:af:50:3f:4c:7d:3a:8c:
         fa:67:13:d1:ee:19:6e:67:7c:14:ba:bf:38:b1:0d:a1:6a:a6:
         10:13:74:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:37:15 2024 by rpki-client on console-ams.rpki-client.org