Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ad9hVyR3ojDnn48oz91tKDd_Iis.cer
File:                     Ad9hVyR3ojDnn48oz91tKDd_Iis.cer (raw, json)
Hash identifier:          q6dEwr1Dwva+6YbauMODJzQU/llPrt8qj8iNUL7hyQM=
Subject key identifier:   01:DF:61:57:24:77:A2:30:E7:9F:8F:28:CF:DD:6D:28:37:7F:22:2B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       019738
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 11 Apr 2023 14:18:48 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 133415
                          IP: 103.116.170.0/23
                          IP: 103.227.234.0/23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 21:10:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104248 (0x19738)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Apr 11 14:18:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=A914E5AE/serialNumber=01DF61572477A230E79F8F28CFDD6D28377F222B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:52:da:7f:8f:db:7b:b9:78:26:50:1e:31:9b:
                    2a:e1:bf:5b:c4:77:dd:d9:9d:53:1a:c3:92:39:36:
                    43:ed:42:ba:90:78:3b:23:03:3b:26:64:65:91:4d:
                    20:d5:c6:88:9a:66:68:9e:ec:ee:95:fb:c6:14:9e:
                    6a:9f:ad:c4:92:0a:20:01:64:1d:8a:cc:ed:3e:2e:
                    28:ed:6a:e2:7d:e3:cd:f9:87:59:cb:03:ec:0f:07:
                    fd:5d:d7:af:fd:d3:30:78:c1:0b:09:c0:15:33:23:
                    cd:85:7a:28:78:33:80:0a:da:67:eb:08:81:08:49:
                    55:7e:24:9d:ab:26:b4:77:6b:08:7c:62:8d:3b:c8:
                    75:85:4f:6e:f9:00:2a:f2:7c:18:41:6e:c0:3e:19:
                    c6:6f:4c:ff:fe:68:6a:91:0f:da:59:39:64:81:bb:
                    6f:73:7d:9f:f9:bb:8e:fc:93:48:25:d5:ff:ad:08:
                    e6:97:0d:83:52:60:e2:b3:28:5b:5c:4b:f0:c9:39:
                    04:60:16:f8:88:21:90:83:cc:9e:17:05:da:fa:26:
                    36:92:6a:5e:1a:64:7a:8d:bb:11:4b:e0:4b:c9:e1:
                    af:12:bf:2a:a5:e8:74:c2:ee:34:8c:4d:b8:d5:b2:
                    68:50:fb:7e:c6:1e:aa:9e:da:84:47:c7:1b:1d:c6:
                    fe:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:DF:61:57:24:77:A2:30:E7:9F:8F:28:CF:DD:6D:28:37:7F:22:2B
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  133415

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.170.0/23
                  103.227.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:4b:03:d1:1e:68:33:1b:4d:d7:74:22:82:28:1d:7f:28:ba:
         38:2f:e0:82:c9:a0:8e:fa:fb:99:79:2c:aa:2e:38:72:48:5a:
         6e:0f:80:30:7a:d7:b5:16:94:d1:c7:93:e0:0e:6a:11:92:0f:
         31:bb:57:43:8a:51:52:95:21:44:80:60:52:ae:fe:31:2a:10:
         42:da:b6:45:33:a6:99:05:2d:0b:ef:0e:6d:12:b5:28:bb:5b:
         ae:74:7f:05:d3:87:01:d7:c9:0a:51:5a:19:77:77:b1:f3:78:
         0b:80:99:4d:37:07:67:bf:f3:fb:c7:a4:c5:7d:9c:7b:0b:37:
         0e:8d:62:d8:a5:43:9e:9d:a3:b0:59:a2:04:ab:2b:b7:20:c0:
         4e:db:7b:d7:78:44:ec:8f:41:30:39:24:3d:ca:34:c4:1a:59:
         97:cc:90:2b:a5:87:f5:44:e4:f0:97:01:de:d2:cd:ca:8b:25:
         69:9e:30:96:03:3f:5a:2f:d2:7d:46:95:87:65:6e:97:5c:46:
         dd:4f:f5:9e:85:8a:1a:3b:40:7a:5b:ed:22:87:fc:fb:41:b2:
         59:3d:e2:20:e8:7b:65:27:13:c7:c6:91:98:cb:0e:df:65:73:
         09:1f:7a:1d:5d:e0:39:fe:92:d4:87:21:15:a3:24:4b:58:17:
         6f:a5:f6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:34:14 2024 by rpki-client on console-fra.rpki-client.org