Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer
File:                     D1kUy7lqcNoGsR7z3StjyeQHsxw.cer (raw, json)
Hash identifier:          uvGO9+dNTNMWA740mfAdYU/NQgNpoJx9EeIZcpb91Oo=
Subject key identifier:   0F:59:14:CB:B9:6A:70:DA:06:B1:1E:F3:DD:2B:63:C9:E4:07:B3:1C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01F904
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 13 Jun 2024 23:14:56 +0000
Certificate not after:    Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources:    AS: 152730
                          IP: 203.14.108.0/24
                          IP: 2001:df0:c340::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Oct 2024 20:54:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129284 (0x1f904)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun 13 23:14:56 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=A91D03FC/serialNumber=0F5914CBB96A70DA06B11EF3DD2B63C9E407B31C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:35:cb:09:d3:a9:c1:84:9a:37:42:e2:33:d6:
                    32:4e:8b:98:6d:bd:53:eb:fd:1e:90:e2:fa:2d:c1:
                    f6:58:5a:8f:a3:1c:a0:2c:b9:18:e7:a4:23:3c:5a:
                    13:e3:42:f7:1c:cf:2e:f0:3f:a9:fa:7a:38:f0:57:
                    83:1f:0c:9c:88:ae:9a:ca:c0:dc:f2:d3:25:c0:c2:
                    4c:86:81:e3:1c:a8:13:23:95:84:f3:b8:9b:99:54:
                    0b:8a:5e:a2:4d:08:eb:3c:5c:bf:d5:e6:3c:1e:ba:
                    c5:20:7c:ca:42:a7:c7:26:d5:39:04:ad:5d:3d:5a:
                    95:ed:06:65:8f:42:00:98:d0:e8:d1:e2:9b:c0:70:
                    f0:bf:3e:57:f3:1b:51:45:85:c4:c1:5c:22:b1:73:
                    15:d1:4f:4e:5c:66:11:5a:36:91:3b:06:66:58:67:
                    66:3a:48:f2:3e:8d:11:19:4b:11:57:8c:fd:b7:78:
                    73:51:87:f7:e5:df:45:0a:3c:33:f9:ff:33:ad:6e:
                    06:e1:0f:a6:b2:79:34:9d:ae:17:fd:c8:00:8a:13:
                    38:1a:90:30:37:38:07:1b:57:35:0a:af:f2:48:06:
                    c8:2b:49:b7:99:79:b8:bf:ed:e5:65:22:c2:83:6d:
                    f1:05:dd:c2:73:f8:3c:a3:2b:b3:58:eb:b8:1e:c1:
                    6e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:59:14:CB:B9:6A:70:DA:06:B1:1E:F3:DD:2B:63:C9:E4:07:B3:1C
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  152730

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.14.108.0/24
                IPv6:
                  2001:df0:c340::/48

    Signature Algorithm: sha256WithRSAEncryption
         c6:86:9a:56:14:62:6f:78:4b:a5:74:d2:58:1b:28:c2:05:92:
         63:76:b4:c3:e6:de:cf:23:41:96:0b:34:0d:83:e3:d1:7d:25:
         e7:a6:f5:26:c6:cd:63:0c:d3:bd:fb:77:dd:bb:37:d0:e6:94:
         63:85:aa:8d:bd:46:a3:0d:b0:5b:e3:e5:d2:8e:6d:18:56:6c:
         6d:46:fc:60:79:7b:fe:ac:ad:97:a1:4e:50:bf:ce:6c:9c:4b:
         b4:26:ca:c0:69:3c:8f:dd:4f:ab:e5:3b:23:e2:83:0f:53:5c:
         90:49:fc:50:da:e5:03:89:ef:b9:af:3c:1e:80:89:0e:08:20:
         47:a6:23:d5:b5:69:86:e8:73:be:d0:d3:13:1d:4d:82:25:4b:
         87:34:91:93:cb:20:f0:13:40:54:15:95:73:f1:f7:ea:8a:d9:
         65:c6:12:ea:6a:2b:39:98:59:69:c7:09:82:14:7b:a6:d1:83:
         ff:c9:cd:83:e4:5f:1e:28:7e:30:a6:5d:43:90:37:fb:13:0b:
         9a:77:5f:a5:1a:ce:98:3b:07:e1:7b:a4:bd:d8:a2:60:91:15:
         3e:f9:5f:cf:60:c8:84:5f:6e:fa:2f:97:01:83:17:f5:48:10:
         a0:f7:3c:09:8c:fb:bb:de:20:4b:49:10:64:7c:2b:ce:ee:f8:
         64:2d:b0:97
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----