Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C1O4Cmyciut01te7VxpSAM5V2PM.cer
File:                     C1O4Cmyciut01te7VxpSAM5V2PM.cer (raw, json)
Hash identifier:          J8P49gjezmY2tMkQw+o88npQXWZviLx3/pgE9vNO+So=
Subject key identifier:   0B:53:B8:0A:6C:9C:8A:EB:74:D6:D7:BB:57:1A:52:00:CE:55:D8:F3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01B6FE
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 15 Aug 2023 15:44:35 +0000
Certificate not after:    Sat 31 Aug 2024 00:00:00 +0000
Subordinate resources:    AS: 135494
                          IP: 103.219.232.0/23
                          IP: 2406:53c0::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 21:10:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112382 (0x1b6fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 15 15:44:35 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=A9155DEB/serialNumber=0B53B80A6C9C8AEB74D6D7BB571A5200CE55D8F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:04:87:b1:d6:3d:59:0e:2f:b5:03:11:aa:03:
                    b6:db:60:69:f9:ef:2d:2d:58:7f:b3:6e:26:2b:e8:
                    de:c6:90:70:2d:7e:bb:28:1a:d9:0b:5a:0b:8d:eb:
                    d8:63:9c:d4:66:c7:9c:f3:96:76:13:b0:06:b4:9e:
                    4f:52:f5:82:b5:eb:8e:16:c9:b2:01:93:b6:65:a7:
                    41:81:cd:26:40:4c:c1:e9:4d:92:3b:46:34:71:72:
                    16:0e:a9:dd:c3:2d:1a:c6:61:b6:af:70:50:6c:81:
                    9f:f8:85:0e:ea:16:dc:7b:45:4e:63:f3:45:14:b0:
                    39:55:e3:36:d3:a8:ab:2e:32:98:25:5c:fe:c0:cd:
                    16:cf:09:cd:1f:bd:b1:cd:27:f7:0f:ca:fa:20:70:
                    ad:aa:d8:d4:f7:5f:10:fe:13:91:eb:f7:24:69:90:
                    2a:8b:5c:a8:1b:b8:1a:e0:d1:40:40:b4:76:be:b6:
                    8a:03:1d:6c:e7:f1:1b:7c:31:56:c3:2d:31:ed:37:
                    78:56:8d:37:e1:39:f1:41:20:30:68:47:fc:84:19:
                    e9:bd:fa:37:26:26:e3:4a:d2:11:e6:b0:00:b4:82:
                    1d:1f:3c:50:46:a9:86:85:de:e6:4d:de:f0:14:a6:
                    af:ec:26:d6:06:c3:11:18:51:91:9f:87:1a:4c:65:
                    2b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:53:B8:0A:6C:9C:8A:EB:74:D6:D7:BB:57:1A:52:00:CE:55:D8:F3
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  135494

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.219.232.0/23
                IPv6:
                  2406:53c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:df:c4:4c:01:53:60:4b:c7:ef:84:22:18:f4:4b:61:08:2b:
         8d:38:ec:1d:89:f8:a7:eb:91:a7:8a:e2:0e:f4:f3:a4:e4:24:
         ef:db:a1:f0:ca:94:84:0c:7c:7f:92:cd:35:1d:45:ea:4c:e8:
         dc:a4:e7:da:69:7b:9a:0a:33:68:da:0f:57:cf:50:00:d7:bf:
         67:4d:24:37:01:3c:0e:aa:7d:c9:28:39:5e:75:35:48:ed:77:
         34:08:ab:4f:71:2e:5e:0c:f2:02:96:0a:69:e5:42:ef:be:ab:
         e6:68:f4:5c:3a:78:58:0b:1f:99:98:be:df:38:f5:c3:34:c4:
         39:42:39:f9:07:b2:8c:c6:e5:5b:79:c5:84:20:50:5d:c7:6f:
         a8:f5:8b:67:82:1c:74:f2:c6:01:70:e9:b1:c7:04:d5:14:77:
         92:54:b1:68:29:e8:14:ed:37:36:92:f6:e8:6f:cb:ff:be:62:
         45:39:af:4e:64:7c:87:87:72:1f:75:14:ae:a2:c3:ea:54:6b:
         22:8f:3a:44:30:48:94:d1:ba:c9:cc:50:cf:4f:8b:d1:ea:85:
         b5:6c:42:82:26:87:eb:7a:13:a2:78:86:49:51:d3:f3:36:a6:
         5c:75:44:f1:44:c9:72:d7:30:af:85:81:a2:26:d3:a9:f6:ec:
         2a:49:11:48
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAbb+MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMDgxNTE1NDQzNVoXDTI0MDgzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNTVERUIxMTAvBgNVBAUTKDBCNTNCODBBNkM5QzhBRUI3NEQ2RDdC
QjU3MUE1MjAwQ0U1NUQ4RjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDyBIex1j1ZDi+1AxGqA7bbYGn57y0tWH+zbiYr6N7GkHAtfrsoGtkLWguN69hj
nNRmx5zzlnYTsAa0nk9S9YK1644WybIBk7Zlp0GBzSZATMHpTZI7RjRxchYOqd3D
LRrGYbavcFBsgZ/4hQ7qFtx7RU5j80UUsDlV4zbTqKsuMpglXP7AzRbPCc0fvbHN
J/cPyvogcK2q2NT3XxD+E5Hr9yRpkCqLXKgbuBrg0UBAtHa+tooDHWzn8Rt8MVbD
LTHtN3hWjTfhOfFBIDBoR/yEGem9+jcmJuNK0hHmsAC0gh0fPFBGqYaF3uZN3vAU
pq/sJtYGwxEYUZGfhxpMZSuvAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUC1O4Cmyc
iut01te7VxpSAM5V2PMwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTU1REVCLzE2MkNCMjc0RUE0QzExRUFBMjU3QjkzOUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE1NURFQi8xNjJDQjI3NEVBNEMxMUVBQTI1N0I5MzlDNEY5QUUwMi9DMU80Q215
Y2l1dDAxdGU3VnhwU0FNNVYyUE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhFGMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZ9voMA0EAgAC
MAcDBQAkBlPAMA0GCSqGSIb3DQEBCwUAA4IBAQBR38RMAVNgS8fvhCIY9EthCCuN
OOwdifin65GniuIO9POk5CTv26HwypSEDHx/ks01HUXqTOjcpOfaaXuaCjNo2g9X
z1AA179nTSQ3ATwOqn3JKDledTVI7Xc0CKtPcS5eDPIClgpp5ULvvqvmaPRcOnhY
Cx+ZmL7fOPXDNMQ5Qjn5B7KMxuVbecWEIFBdx2+o9Ytnghx08sYBcOmxxwTVFHeS
VLFoKegU7Tc2kvbob8v/vmJFOa9OZHyHh3IfdRSuosPqVGsijzpEMEiU0brJzFDP
T4vR6oW1bEKCJofrehOieIZJUdPzNqZcdUTxRMly1zCvhYGiJtOp9uwqSRFI
-----END CERTIFICATE-----