Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0iYvB-xsaJGF6zZvIMq6D6vni0.cer
File:                     A0iYvB-xsaJGF6zZvIMq6D6vni0.cer (raw, json)
Hash identifier:          skjgQY7D6VNRvot61QB6vpwkrolWjOfkROn1e5rMbCw=
Subject key identifier:   03:48:98:BC:1F:B1:B1:A2:46:17:AC:D9:BC:83:2A:E8:3E:AF:9E:2D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       020138
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 18 Jul 2024 17:08:10 +0000
Certificate not after:    Fri 31 Oct 2025 00:00:00 +0000
Subordinate resources:    AS: 151653
                          IP: 103.250.77.0/24
                          IP: 2001:df2:cac0::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131384 (0x20138)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 18 17:08:10 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=A918D727/serialNumber=034898BC1FB1B1A24617ACD9BC832AE83EAF9E2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:81:e4:b7:1d:07:6b:42:39:da:1f:57:dd:97:
                    c6:bc:fd:86:90:57:39:d8:ae:61:1f:58:1b:4b:9d:
                    df:f1:60:58:cf:4f:a0:a6:67:ea:b2:38:7b:1f:41:
                    1b:75:cd:31:c4:7b:c2:ba:08:d9:26:da:18:f7:b2:
                    51:45:55:fd:72:98:35:e4:c3:c8:11:51:80:d3:f6:
                    d9:47:24:b8:59:d9:7e:cd:0e:29:e6:88:e4:2b:e2:
                    ae:a2:3a:4f:25:82:05:85:f2:f1:bb:96:57:ba:d4:
                    19:9a:ab:13:35:d2:7d:0e:80:34:0f:2f:67:a4:e3:
                    5b:50:71:da:13:49:ac:c3:4a:16:b3:51:24:38:29:
                    26:a7:de:db:f9:85:ec:e1:44:7e:a5:14:cb:d7:c1:
                    7e:f1:af:07:c4:12:34:cc:e8:ee:50:b5:3f:b7:09:
                    d3:f5:c1:15:2d:ea:cc:17:86:46:37:c2:d9:ad:40:
                    ee:52:a6:51:f2:08:a3:ac:da:88:75:7c:1f:31:cc:
                    28:8f:8b:65:25:17:3d:51:ec:8b:f9:6e:3b:fb:a5:
                    a0:a0:50:f3:2f:3b:8f:3b:51:45:54:ae:1d:39:18:
                    c7:2f:19:ed:e5:52:fd:86:a6:56:93:e5:4a:40:30:
                    f2:9d:74:b0:d5:24:b4:f0:07:7b:aa:09:c1:93:16:
                    95:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:48:98:BC:1F:B1:B1:A2:46:17:AC:D9:BC:83:2A:E8:3E:AF:9E:2D
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  151653

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.250.77.0/24
                IPv6:
                  2001:df2:cac0::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:ce:40:37:a6:39:e2:68:d0:7f:2e:12:07:17:76:3e:0f:dc:
         7f:89:49:27:8b:8f:f1:43:8d:46:7f:3c:d4:cc:8e:e1:05:65:
         86:db:4f:a8:f4:3b:f4:e1:01:31:0c:0d:86:4f:eb:42:a4:21:
         ce:09:d4:b8:67:b4:c2:87:4e:8e:2e:ea:57:9c:05:fe:b6:26:
         dd:07:2c:a5:3b:bc:fe:2c:4d:bb:c7:58:0b:85:e2:5c:c0:f9:
         8c:e7:3b:3b:87:f7:17:8e:19:68:97:26:b9:3e:26:30:2a:2c:
         55:e2:ff:dd:ac:86:c2:b2:a0:22:35:7e:70:50:0e:b2:0d:c5:
         53:eb:73:90:a3:fc:b5:5f:72:0a:13:c5:79:51:41:2c:55:0c:
         c6:75:46:7c:32:07:dc:aa:0f:ab:50:47:cd:b9:70:66:b9:98:
         91:43:49:09:ad:5a:35:01:c0:3f:d2:61:da:95:7b:1e:b0:3e:
         d1:06:35:7b:c5:50:d2:7c:a3:19:52:f1:87:85:70:7c:d4:d3:
         34:ab:c7:af:24:7d:0c:f9:98:c4:25:6b:8c:db:0b:4f:1c:09:
         5d:49:b4:cf:75:8e:aa:f6:a9:26:b6:48:33:d9:cb:73:e1:1c:
         08:79:ec:15:2a:51:bf:3d:08:fa:f2:ac:1f:96:3c:75:02:d1:
         21:15:6b:6a
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAgE4MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDcxODE3MDgxMFoXDTI1MTAzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxOEQ3MjcxMTAvBgNVBAUTKDAzNDg5OEJDMUZCMUIxQTI0NjE3QUNE
OUJDODMyQUU4M0VBRjlFMkQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDHgeS3HQdrQjnaH1fdl8a8/YaQVznYrmEfWBtLnd/xYFjPT6CmZ+qyOHsfQRt1
zTHEe8K6CNkm2hj3slFFVf1ymDXkw8gRUYDT9tlHJLhZ2X7NDinmiOQr4q6iOk8l
ggWF8vG7lle61BmaqxM10n0OgDQPL2ek41tQcdoTSazDShazUSQ4KSan3tv5hezh
RH6lFMvXwX7xrwfEEjTM6O5QtT+3CdP1wRUt6swXhkY3wtmtQO5SplHyCKOs2oh1
fB8xzCiPi2UlFz1R7Iv5bjv7paCgUPMvO487UUVUrh05GMcvGe3lUv2GplaT5UpA
MPKddLDVJLTwB3uqCcGTFpVnAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUA0iYvB+x
saJGF6zZvIMq6D6vni0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThENzI3LzQ3OThGQjA2MzdGQjExRUVCNDI5NkQzREM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE4RDcyNy80Nzk4RkIwNjM3RkIxMUVFQjQyOTZEM0RDNEY5QUUwMi9BMGlZdkIt
eHNhSkdGNnpadklNcTZENnZuaTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlBlMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAZ/pNMA8EAgAC
MAkDBwAgAQ3yysAwDQYJKoZIhvcNAQELBQADggEBABfOQDemOeJo0H8uEgcXdj4P
3H+JSSeLj/FDjUZ/PNTMjuEFZYbbT6j0O/ThATEMDYZP60KkIc4J1LhntMKHTo4u
6lecBf62Jt0HLKU7vP4sTbvHWAuF4lzA+YznOzuH9xeOGWiXJrk+JjAqLFXi/92s
hsKyoCI1fnBQDrINxVPrc5Cj/LVfcgoTxXlRQSxVDMZ1RnwyB9yqD6tQR825cGa5
mJFDSQmtWjUBwD/SYdqVex6wPtEGNXvFUNJ8oxlS8YeFcHzU0zSrx68kfQz5mMQl
a4zbC08cCV1JtM91jqr2qSa2SDPZy3PhHAh57BUqUb89CPryrB+WPHUC0SEVa2o=
-----END CERTIFICATE-----