Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer
File:                     C2HEdIlppE_IPIiCoCV50NWSO2E.cer (raw, json)
Hash identifier:          oOG+KrD8uJfbdXd3hxh5fs7cKwP/UUvgZKYJiDNWXN4=
Subject key identifier:   0B:61:C4:74:89:69:A4:4F:C8:3C:88:82:A0:25:79:D0:D5:92:3B:61
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01E939
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 03 Apr 2024 06:40:21 +0000
Certificate not after:    Tue 30 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 103.219.152.0/22
                          IP: 2406:17c0::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 05:04:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125241 (0x1e939)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Apr  3 06:40:21 2024 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=A917B092/serialNumber=0B61C4748969A44FC83C8882A02579D0D5923B61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a5:9c:d1:b6:e9:01:09:ba:c6:59:3f:94:20:
                    0f:90:55:31:1f:1b:8e:5c:9b:2d:26:48:07:70:93:
                    b3:45:ae:1b:03:91:15:27:cc:53:3a:29:de:f5:b3:
                    db:a7:5d:29:7f:24:92:4f:24:9e:3d:88:8e:9a:df:
                    54:02:08:26:46:fc:c0:a3:0d:d9:68:f9:18:77:a9:
                    53:06:24:a2:7d:20:56:cf:89:16:c7:6f:a5:da:59:
                    8f:dc:60:97:91:ab:b8:77:06:80:dc:76:c5:cf:fa:
                    4b:dc:10:ff:c2:1f:01:7b:69:72:e7:6b:5c:34:df:
                    bd:d0:ae:d7:44:ca:d7:0f:dc:67:cd:a5:8e:40:70:
                    88:68:2d:88:ae:6f:ea:bc:b3:69:67:2b:3f:74:80:
                    40:b3:83:d1:ce:35:a7:91:ca:b1:62:1b:ad:be:b8:
                    e3:c3:1f:b0:b7:01:fe:ff:d0:38:d8:bc:df:09:36:
                    b8:d0:13:af:3a:ce:a7:e9:23:8d:9f:15:d0:dd:92:
                    c6:4f:cb:41:40:34:e6:2c:8d:64:15:36:7b:92:14:
                    aa:63:92:63:8f:c5:7a:bd:d4:b6:59:a3:fa:7b:46:
                    89:70:d4:25:8c:48:6f:3a:24:fc:17:32:3b:99:b1:
                    af:3e:32:a2:1e:c2:32:c2:49:00:e6:80:66:19:b3:
                    bc:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:61:C4:74:89:69:A4:4F:C8:3C:88:82:A0:25:79:D0:D5:92:3B:61
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.219.152.0/22
                IPv6:
                  2406:17c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:d7:34:83:f1:69:0c:e4:85:5a:e9:30:78:a1:73:bf:a8:59:
         e0:d2:97:be:64:2f:98:0c:48:00:af:4c:6e:99:2b:a5:57:0a:
         94:9c:f6:9b:2e:e5:d6:4f:63:3a:c9:04:71:a6:b3:08:00:22:
         54:c7:72:c7:3b:84:e7:58:ee:e4:73:04:a9:1c:41:dd:dd:ce:
         52:7e:96:47:01:d5:92:e3:62:e7:a7:4f:71:7d:5a:e5:11:31:
         c9:6b:68:66:89:fe:b8:78:3a:8a:17:33:4b:88:cd:4f:6c:76:
         1f:f0:77:60:98:42:10:67:d3:5a:e3:38:f6:af:6a:68:98:84:
         a7:e2:91:88:9f:f6:84:ad:44:b3:23:4a:4b:c3:2f:bf:48:b3:
         1e:24:da:28:6f:31:e1:3f:12:a0:ca:1f:b6:87:bc:28:cd:f8:
         d0:60:02:96:61:31:a9:00:4c:be:6e:bd:c6:85:00:8a:45:1d:
         e3:54:10:a3:c7:64:4b:83:18:ae:74:95:53:a8:5e:80:30:c2:
         46:55:44:f8:c3:ab:74:f9:1f:dd:52:14:6b:1c:93:ca:77:7c:
         a0:e8:2a:0b:60:36:5c:62:f1:4b:e3:ab:10:5f:6a:67:e8:32:
         ba:d4:a5:7e:e6:d5:4e:16:23:86:96:da:f9:35:b0:16:db:b2:
         02:e4:1f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 05:37:15 2024 by rpki-client on console-fra.rpki-client.org