Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer
File:                     AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer (raw, json)
Hash identifier:          HFcsLY4FeoJAloOwnIOYl6nhuZhS4vDiapPmNzcfEjo=
Subject key identifier:   01:1D:61:B2:33:AD:F3:0C:D2:47:56:21:24:BB:71:8B:C6:3A:D6:4E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01D3C3
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 22 Dec 2023 15:20:11 +0000
Certificate not after:    Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 55879
                          IP: 49.143.252.0/22
                          IP: 103.5.184.0/22
                          IP: 124.155.240.0/20
                          IP: 2406:d600::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 21:10:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119747 (0x1d3c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec 22 15:20:11 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=A917AB5E/serialNumber=011D61B233ADF30CD247562124BB718BC63AD64E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:55:07:32:b6:0a:15:21:dc:16:2b:d3:46:bd:
                    0f:d0:60:be:bd:d6:01:fb:a1:79:e9:3d:53:cf:10:
                    e1:57:28:9d:23:83:85:36:0e:41:5a:0c:85:76:8a:
                    eb:e4:f2:4c:0d:6f:bb:6f:fe:f3:be:f9:ad:04:4a:
                    90:80:29:14:13:d8:51:85:47:d8:11:e5:58:2e:7d:
                    63:a2:a8:7b:8a:e0:ac:26:76:35:f0:fc:0a:e8:fa:
                    e8:f8:11:ae:04:3b:be:5e:cb:34:a5:57:a6:83:03:
                    14:6e:6e:2c:7b:47:6f:1a:22:54:a3:41:e9:33:7e:
                    6a:83:29:e8:03:0d:ec:54:cb:47:84:a6:04:61:ee:
                    b0:99:ce:af:22:65:1b:bc:95:16:33:24:60:04:e5:
                    1a:1d:ec:63:dd:b2:d4:e4:ca:a3:cb:1d:ed:03:1f:
                    50:e2:d1:f8:03:11:80:2f:e3:bf:32:a4:0a:b5:26:
                    73:66:c0:35:85:81:18:8b:ce:78:13:44:65:89:22:
                    c6:d9:2f:dc:2c:3a:69:ed:ff:31:23:0f:7b:45:01:
                    1c:0d:78:47:96:26:4f:0c:f6:78:45:18:79:ae:6f:
                    2d:b4:f5:9d:1b:18:73:8c:af:02:51:41:d2:17:36:
                    8c:ce:98:d7:fd:86:47:ca:c1:09:95:3b:90:47:c6:
                    bd:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:1D:61:B2:33:AD:F3:0C:D2:47:56:21:24:BB:71:8B:C6:3A:D6:4E
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  55879

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.143.252.0/22
                  103.5.184.0/22
                  124.155.240.0/20
                IPv6:
                  2406:d600::/32

    Signature Algorithm: sha256WithRSAEncryption
         d6:05:92:fe:e4:99:7c:65:2b:a7:7c:8a:36:56:da:37:d2:76:
         3e:e7:ef:f2:56:75:23:1a:c2:bc:e0:0a:ad:ae:14:4d:52:86:
         e9:53:10:91:5c:69:3d:50:06:4f:0c:f2:6d:8b:a0:d3:5b:85:
         dc:0c:6f:8f:f4:18:f0:8b:d7:c7:59:e8:af:1a:f7:a7:a7:a5:
         b1:fe:20:0e:61:6a:79:c1:f9:0a:b2:f1:e9:b4:a9:b5:87:19:
         ea:e1:92:96:0d:59:7e:bc:fd:8b:86:f6:56:ba:89:80:b6:62:
         26:e9:57:17:29:7e:f6:5c:b5:c0:51:61:3f:70:87:9e:87:59:
         c9:70:84:b4:54:ae:89:f9:3b:64:73:ce:a3:cd:cb:49:f1:c8:
         ef:d2:a3:4c:76:31:28:6b:6e:0e:c2:e6:11:ba:5c:34:fa:5f:
         53:ca:47:25:25:2f:ad:01:69:74:f9:7d:63:e7:02:88:46:e6:
         50:05:2e:0d:aa:95:14:d0:bc:a4:9b:a0:05:c4:a2:b8:58:4f:
         ed:3f:09:5d:81:95:a0:9f:97:e1:0c:cd:ef:b4:d7:c5:a1:99:
         18:1c:48:37:50:e4:4d:cd:54:55:13:fa:a5:fa:e3:48:4d:ed:
         74:34:04:05:2a:ad:da:74:8a:52:ba:a5:5a:f8:fe:6a:98:f9:
         f0:3a:91:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:34:14 2024 by rpki-client on console-fra.rpki-client.org