Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer
File:                     9nLTtiRMpMjT_iAIJqikn6ssdhI.cer (raw, json)
Hash identifier:          xy8b+R0AyUmvaivhGzy/0uv9ce4ACoMw4Y7hsUA15gM=
Subject key identifier:   F6:72:D3:B6:24:4C:A4:C8:D3:FE:20:08:26:A8:A4:9F:AB:2C:76:12
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01B999
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 29 Aug 2023 19:59:05 +0000
Certificate not after:    Thu 31 Oct 2024 00:00:00 +0000
Subordinate resources:    AS: 4749
                          IP: 180.235.156.0/22
                          IP: 203.30.212.0/24
                          IP: 203.62.208.0/21
                          IP: 2407:3600::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 21:10:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113049 (0x1b999)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 29 19:59:05 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=A91DD799/serialNumber=F672D3B6244CA4C8D3FE200826A8A49FAB2C7612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:77:c3:45:8f:80:d7:78:c6:a9:3a:85:29:24:
                    7a:97:19:a6:64:02:60:92:50:c3:b4:d2:5e:e1:ff:
                    0c:74:33:c4:f6:5f:21:01:32:2d:38:a3:28:9b:db:
                    64:67:54:1c:0c:51:64:1d:9d:5f:e4:7f:68:5f:55:
                    13:a3:22:1b:27:21:44:bb:6b:89:0a:3b:c2:93:15:
                    a2:cc:bb:d1:4e:c7:40:a0:d1:71:15:94:a4:3a:ae:
                    07:80:ce:87:89:d5:52:1b:5d:81:b1:d8:4b:00:5e:
                    d5:13:5e:33:23:62:64:67:cd:33:3a:f3:c0:57:52:
                    37:57:ae:41:d5:ba:4a:16:6f:c7:c8:94:ff:4d:8b:
                    39:f1:e6:0e:90:e4:8a:6c:a0:b5:77:77:55:64:3c:
                    7c:df:01:8d:ea:ee:d2:7c:21:f1:34:a7:41:15:13:
                    23:e0:8e:10:cf:e7:83:39:e3:d3:e0:64:ad:36:b3:
                    c9:df:87:c9:b3:32:c5:f0:8a:79:c4:75:ad:84:2a:
                    f1:9e:6f:5d:39:44:9f:f9:0d:bd:1c:48:8c:0f:72:
                    49:85:9c:28:36:be:8a:46:31:e7:a1:5b:23:d5:53:
                    70:55:0f:e7:10:67:88:99:d4:9b:2e:b1:05:aa:54:
                    02:0c:87:80:7f:0d:99:fc:d0:2b:82:01:12:8c:df:
                    52:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:72:D3:B6:24:4C:A4:C8:D3:FE:20:08:26:A8:A4:9F:AB:2C:76:12
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  4749

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.235.156.0/22
                  203.30.212.0/24
                  203.62.208.0/21
                IPv6:
                  2407:3600::/32

    Signature Algorithm: sha256WithRSAEncryption
         bd:35:13:81:67:b2:a8:5f:ff:e1:9c:f2:16:73:c0:4f:12:1f:
         65:2b:58:0b:41:42:51:c6:78:d0:7f:68:95:16:7b:f0:a0:a4:
         fb:f1:71:5a:5d:84:1f:be:ef:26:8d:9f:46:f2:1f:be:02:2d:
         f9:3d:a5:d8:da:93:b9:58:31:7d:00:dc:da:6f:35:85:ed:bf:
         f6:e9:57:fd:42:0c:35:f4:a6:e9:a6:73:4d:eb:ad:a6:be:e2:
         32:b4:f3:aa:12:72:ee:3a:21:5a:d5:b9:43:39:90:71:92:73:
         28:aa:5e:c9:98:12:5a:2e:79:24:dd:bc:0f:d1:98:2d:ad:93:
         f6:81:87:7a:e7:66:de:5d:fd:2c:f9:83:61:d1:80:c5:e8:f9:
         f7:de:11:8c:b6:5c:29:8e:55:07:a1:71:ad:58:15:0d:5b:49:
         65:86:15:c8:81:b7:63:d5:c7:c2:9d:68:93:81:01:f5:f7:d8:
         45:7b:cf:c2:a4:cb:34:d0:57:e1:29:39:8f:7b:b1:df:db:f7:
         f9:d0:3a:5e:34:ef:e4:31:40:de:17:ab:4c:21:41:88:6b:64:
         5a:b5:b9:fe:27:db:91:fe:55:89:85:fc:72:7e:e8:60:9e:c4:
         79:dd:34:a4:4f:86:93:f3:ef:c1:b8:cd:4b:a6:1d:25:7c:52:
         48:0d:a8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:34:13 2024 by rpki-client on console-fra.rpki-client.org