Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BrsRoyhN4e7OJvuvvOs7TNI13Eg.cer
File:                     BrsRoyhN4e7OJvuvvOs7TNI13Eg.cer (raw, json)
Hash identifier:          Kpi7NasRzMrPwVI5D+UvuWYMt3U6aKsutBwY/KVkq/k=
Subject key identifier:   06:BB:11:A3:28:4D:E1:EE:CE:26:FB:AF:BC:EB:3B:4C:D2:35:DC:48
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01BCFC
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9158015/F6DA0F1CF90311EB9E122D7AC4F9AE02/BrsRoyhN4e7OJvuvvOs7TNI13Eg.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9158015/F6DA0F1CF90311EB9E122D7AC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 12 Sep 2023 15:26:14 +0000
Certificate not after:    Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 142571
                          IP: 103.169.181.0/24
                          IP: 103.172.190.0/24
                          IP: 2001:df6:fe80::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 06:50:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113916 (0x1bcfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep 12 15:26:14 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=A9158015/serialNumber=06BB11A3284DE1EECE26FBAFBCEB3B4CD235DC48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:1c:c7:1c:1f:e2:9a:08:43:ce:8d:84:6f:20:
                    ca:91:cb:99:13:d3:b3:5f:37:bd:09:64:82:1a:b8:
                    cc:7c:0a:46:fc:ae:7e:5e:ff:86:cb:ad:27:96:6a:
                    be:0b:17:b4:e1:55:e3:fd:ee:a1:f7:aa:bc:d9:8b:
                    24:cf:12:73:ab:58:75:44:fe:6e:a5:07:41:3f:cb:
                    00:b4:d6:d3:81:8f:88:d3:05:54:9c:da:2b:e8:e1:
                    dd:5d:1c:57:89:da:2d:bf:e5:87:7e:39:83:98:bd:
                    a5:c6:31:fc:31:a6:f5:11:24:04:6f:20:83:0a:25:
                    1f:f6:36:af:20:c8:40:73:fd:e4:9e:6f:1e:69:ed:
                    cf:c8:c3:1a:5f:1c:8f:37:28:10:30:5f:f0:01:bb:
                    01:04:bc:0c:a5:84:3d:7d:16:ef:95:e6:7a:56:fa:
                    7b:67:1c:45:df:1f:64:12:82:3c:df:51:ab:fb:31:
                    47:2c:ea:f5:b8:63:12:87:52:f1:55:a4:fc:0e:82:
                    81:74:a7:ae:e9:45:84:e6:f1:d7:6f:77:c5:68:0f:
                    ce:3f:70:e2:4b:ae:82:7d:b3:30:12:59:ba:d2:58:
                    9c:be:cb:70:09:df:14:32:40:78:53:d4:85:69:03:
                    f1:7f:7a:2a:fb:49:af:e0:d1:ef:f8:c2:b0:7f:9d:
                    5a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:BB:11:A3:28:4D:E1:EE:CE:26:FB:AF:BC:EB:3B:4C:D2:35:DC:48
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9158015/F6DA0F1CF90311EB9E122D7AC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9158015/F6DA0F1CF90311EB9E122D7AC4F9AE02/BrsRoyhN4e7OJvuvvOs7TNI13Eg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  142571

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.181.0/24
                  103.172.190.0/24
                IPv6:
                  2001:df6:fe80::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:c7:af:e8:5f:c3:c8:68:12:b5:fd:9b:6c:30:18:94:28:34:
         d6:4c:17:9c:4f:93:b5:00:77:02:3f:9b:97:b8:b6:77:fa:ae:
         0b:5b:46:d0:98:cb:fa:e9:a1:ad:2a:79:dc:f6:a8:0a:f7:6d:
         15:cc:45:6c:ce:92:63:ef:c6:3d:9e:2a:cb:4f:09:83:8c:70:
         a9:e6:c6:2d:be:ec:be:4f:45:4d:4f:39:54:7c:1e:63:bd:c7:
         4c:51:a1:c6:e2:db:74:a6:52:ac:2b:8e:99:ac:e3:9d:52:c4:
         ad:98:e4:0c:68:f5:8f:06:52:be:93:93:68:3d:a6:02:01:c7:
         69:a8:cf:a1:02:0f:9f:4f:ca:50:07:4d:41:04:14:3a:e6:4e:
         3e:f0:fd:69:1c:b4:7f:8d:42:65:01:45:29:57:8b:4c:d5:33:
         0f:45:07:ea:44:18:a9:ff:f6:2c:78:fe:7d:e9:98:a0:b2:f6:
         fc:b1:29:1f:70:41:a5:c4:37:52:d5:15:b5:c0:a8:9a:ab:d5:
         d8:e9:98:fc:25:2a:93:22:db:58:5e:cb:20:04:38:d7:1d:f5:
         02:34:7a:f0:64:00:c9:14:f9:50:83:7d:92:5a:8a:54:9c:9c:
         7d:7d:4e:0c:e9:14:5f:a0:bb:e8:41:6f:24:52:3e:b3:63:5a:
         4f:a0:94:61
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIDAbz8MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMDkxMjE1MjYxNFoXDTI0MTIwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNTgwMTUxMTAvBgNVBAUTKDA2QkIxMUEzMjg0REUxRUVDRTI2RkJB
RkJDRUIzQjRDRDIzNURDNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDjHMccH+KaCEPOjYRvIMqRy5kT07NfN70JZIIauMx8Ckb8rn5e/4bLrSeWar4L
F7ThVeP97qH3qrzZiyTPEnOrWHVE/m6lB0E/ywC01tOBj4jTBVSc2ivo4d1dHFeJ
2i2/5Yd+OYOYvaXGMfwxpvURJARvIIMKJR/2Nq8gyEBz/eSebx5p7c/IwxpfHI83
KBAwX/ABuwEEvAylhD19Fu+V5npW+ntnHEXfH2QSgjzfUav7MUcs6vW4YxKHUvFV
pPwOgoF0p67pRYTm8ddvd8VoD84/cOJLroJ9szASWbrSWJy+y3AJ3xQyQHhT1IVp
A/F/eir7Sa/g0e/4wrB/nVqPAgMBAAGjggMmMIIDIjAdBgNVHQ4EFgQUBrsRoyhN
4e7OJvuvvOs7TNI13EgwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTU4MDE1L0Y2REEwRjFDRjkwMzExRUI5RTEyMkQ3QUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE1ODAxNS9GNkRBMEYxQ0Y5MDMxMUVCOUUxMjJEN0FDNEY5QUUwMi9CcnNSb3lo
TjRlN09KdnV2dk9zN1ROSTEzRWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAizrMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAZ6m1AwQAZ6y+
MA8EAgACMAkDBwAgAQ32/oAwDQYJKoZIhvcNAQELBQADggEBAFDHr+hfw8hoErX9
m2wwGJQoNNZMF5xPk7UAdwI/m5e4tnf6rgtbRtCYy/rpoa0qedz2qAr3bRXMRWzO
kmPvxj2eKstPCYOMcKnmxi2+7L5PRU1POVR8HmO9x0xRocbi23SmUqwrjpms451S
xK2Y5Axo9Y8GUr6Tk2g9pgIBx2moz6ECD59PylAHTUEEFDrmTj7w/WkctH+NQmUB
RSlXi0zVMw9FB+pEGKn/9ix4/n3pmKCy9vyxKR9wQaXEN1LVFbXAqJqr1djpmPwl
KpMi21heyyAEONcd9QI0evBkAMkU+VCDfZJailScnH19TgzpFF+gu+hBbyRSPrNj
Wk+glGE=
-----END CERTIFICATE-----
Generated at Fri Apr 19 07:43:13 2024 by rpki-client on console-fra.rpki-client.org