Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mmSZEF8IotR_hWzsey3hn8qJ0M.cer
File:                     9mmSZEF8IotR_hWzsey3hn8qJ0M.cer (raw, json)
Hash identifier:          R/eIL3bU8sD6YPz40mchpMqqlh9grRDhOBMglmvth+s=
Subject key identifier:   F6:69:92:64:41:7C:22:8B:51:FE:15:B3:B1:EC:B7:86:7F:2A:27:43
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       021AB8
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/9mmSZEF8IotR_hWzsey3hn8qJ0M.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 11 Nov 2024 14:21:21 +0000
Certificate not after:    Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources:    AS: 137020
                          IP: 103.126.60.0/23
                          IP: 2404:af40::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137912 (0x21ab8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov 11 14:21:21 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=A9154020/serialNumber=F6699264417C228B51FE15B3B1ECB7867F2A2743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:32:62:3b:d1:4e:64:79:d4:eb:8a:6b:39:2c:
                    7f:7d:40:9b:5b:6c:98:31:cf:51:8e:bb:12:b6:7b:
                    29:6a:b0:13:2c:4c:27:1d:7b:83:69:4b:fd:42:88:
                    f9:63:8d:d7:68:f8:15:54:d1:7f:11:6d:c0:ab:db:
                    e0:cc:cc:2d:55:bb:3e:82:c3:8d:ae:c4:7e:ac:92:
                    00:6f:c2:b5:b2:87:ea:02:8c:63:2e:f8:f7:51:07:
                    17:7d:ee:71:50:ed:0e:f5:39:f8:fc:27:e5:a0:27:
                    b2:b7:33:8b:a5:62:b4:7c:bc:76:e6:83:57:0c:b5:
                    b1:7d:ed:a5:f6:1c:fb:ef:70:2e:48:1b:da:44:7c:
                    2f:fa:18:29:0e:96:9a:d2:0d:3f:15:c4:31:83:0d:
                    71:c4:f4:19:73:ac:96:c1:54:d5:03:da:8e:c1:3f:
                    70:12:f2:6d:78:0c:0b:83:e2:68:96:e4:a6:cf:06:
                    b4:a8:b4:a6:78:61:4b:2b:04:34:c3:de:97:5a:3d:
                    d0:31:6d:43:8e:a8:39:ba:fc:c0:63:33:c2:a1:e0:
                    4e:97:d3:56:58:13:2e:26:94:2b:e3:f7:6e:cd:c0:
                    e3:d9:72:53:c7:10:75:b6:8a:61:73:83:c6:a3:78:
                    02:88:e4:96:96:13:eb:74:19:02:ae:71:3a:56:df:
                    84:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:69:92:64:41:7C:22:8B:51:FE:15:B3:B1:EC:B7:86:7F:2A:27:43
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/9mmSZEF8IotR_hWzsey3hn8qJ0M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137020

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.60.0/23
                IPv6:
                  2404:af40::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:91:a4:fd:e4:3d:31:2f:71:e6:14:51:94:f7:87:9f:d7:6b:
         e4:7d:16:09:fb:41:a3:8e:76:47:32:d2:64:68:6d:12:31:f7:
         3a:59:c9:c4:9f:e2:39:65:f7:59:bf:28:e5:25:c6:ff:55:41:
         70:93:68:22:9a:f4:b8:2f:05:bc:87:1b:a5:0a:90:73:6f:20:
         b4:d7:ee:f8:7f:a1:66:3f:f1:0e:a3:3a:b6:8a:61:8c:58:b0:
         4f:93:89:f0:f1:77:d0:36:be:ad:38:bd:41:3e:9f:75:d1:ef:
         14:2a:78:15:8e:40:33:04:d8:a3:c2:9a:e2:dc:33:df:c2:84:
         4d:99:9f:13:a7:52:c1:2b:e3:5e:9e:9a:27:30:6c:df:64:3b:
         31:90:a8:8a:cd:7f:04:1e:cf:bd:fd:13:36:cd:05:0e:12:57:
         b7:05:92:4c:b0:aa:eb:d7:1c:98:7e:be:11:07:fd:69:26:36:
         60:ed:10:25:9b:5d:70:21:ea:ee:94:bd:db:6d:36:dd:a5:c9:
         5e:26:29:6c:03:54:7d:73:ba:03:b3:f6:bb:5e:ea:35:ce:65:
         92:07:97:d9:73:c6:97:a8:fa:5b:ba:5c:4d:3a:63:76:5e:73:
         e3:7c:dd:94:b6:bd:a8:02:1b:91:e9:f2:03:88:fd:2b:b9:ab:
         49:72:bc:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----