Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer
File:                     ED-ovf_7nwVXByxHMyuBqegO3TU.cer (raw, json)
Hash identifier:          0pciRR/3VW5JJj2ujeazNi3oBj8o9RPedPPDno7vxe0=
Subject key identifier:   10:3F:A8:BD:FF:FB:9F:05:57:07:2C:47:33:2B:81:A9:E8:0E:DD:35
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01B793
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 18 Aug 2023 13:51:28 +0000
Certificate not after:    Thu 31 Oct 2024 00:00:00 +0000
Subordinate resources:    AS: 64061
                          IP: 103.237.100.0/22
                          IP: 163.53.244.0/22

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 21:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112531 (0x1b793)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 18 13:51:28 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=A9140D69/serialNumber=103FA8BDFFFB9F0557072C47332B81A9E80EDD35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:57:8f:e2:b0:5d:2a:58:0c:35:4b:d8:c8:fc:
                    f7:c0:ad:2a:23:ea:ef:50:8d:e0:2b:fc:72:03:06:
                    cf:dd:ac:50:54:51:b7:2d:e3:4f:d1:85:8e:75:11:
                    2a:85:ce:ae:eb:07:dc:3c:59:5b:66:1f:b7:b3:4f:
                    19:ed:9a:35:52:bd:c4:69:b8:73:7b:80:74:5a:7d:
                    92:43:35:c4:e8:4b:ec:60:2a:88:17:84:4f:ae:a1:
                    c5:6f:6a:d4:b2:6e:87:c0:69:fa:61:39:88:91:c2:
                    09:79:2e:f2:29:0d:3a:2f:27:eb:d5:3b:9e:06:32:
                    4c:70:a4:df:71:a9:0e:87:53:ef:57:78:f3:3a:86:
                    23:e2:fe:4f:50:d5:f4:af:c2:31:25:9c:3e:bb:1a:
                    a5:9d:ff:a9:dc:01:5c:f4:48:c7:27:2b:ca:14:3b:
                    24:8a:7e:df:8c:dd:5e:38:05:b7:da:8c:fb:15:fb:
                    e5:09:1c:d6:b8:a5:02:a9:b5:ff:c1:0d:87:8e:10:
                    95:34:b5:c7:43:75:86:aa:93:cb:98:c0:6e:36:41:
                    2c:5f:d2:44:46:42:a2:e2:1a:f0:5d:1a:b3:9b:f0:
                    8e:68:37:f9:35:62:46:ba:64:ef:a4:96:78:26:15:
                    da:d0:7d:ff:fa:14:20:ac:4b:96:4b:2c:b6:4d:ea:
                    02:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:3F:A8:BD:FF:FB:9F:05:57:07:2C:47:33:2B:81:A9:E8:0E:DD:35
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  64061

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.237.100.0/22
                  163.53.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c3:33:72:49:5d:c0:d2:93:18:d6:b4:60:14:97:ab:4d:8d:d0:
         85:7d:06:6a:cb:ea:07:91:06:32:91:75:a0:40:14:eb:0a:a6:
         cb:86:4d:be:61:31:45:08:a3:27:4c:8a:69:2a:2c:e4:2e:f4:
         f7:21:3d:15:96:d8:82:5f:c9:f7:4f:a4:9a:bb:f1:99:8c:63:
         a4:48:db:fa:40:b0:23:8a:89:c6:a6:29:5a:da:de:1b:98:75:
         bf:a7:14:2e:90:30:9e:f8:39:2e:e2:40:88:0d:f1:09:7d:3b:
         ba:0c:8a:cd:77:86:87:f5:2b:54:c0:ff:d3:f4:a0:20:ab:8f:
         17:2d:f3:37:5e:7b:9c:55:ec:76:f6:fb:6d:52:ef:a9:02:88:
         ef:bb:bb:30:e2:0c:ca:68:6c:68:f0:ed:f3:47:35:1a:aa:95:
         87:6e:49:7a:23:f4:55:fe:07:1a:4e:75:b7:f3:53:54:29:89:
         b4:6b:ef:ea:bd:07:89:66:ba:c3:e8:9f:51:4b:b4:1a:6b:33:
         64:ae:7f:76:e5:95:b3:bd:82:cb:54:25:17:30:10:4c:4f:5d:
         0a:db:bd:45:9c:80:d6:af:e9:09:bd:3d:e0:0e:23:4a:48:08:
         29:cd:a9:f8:41:31:58:d2:dd:5f:f8:db:03:e0:ea:c9:91:94:
         f3:42:9a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 22:16:29 2024 by rpki-client on console-fra.rpki-client.org