Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer
File:                     ESlA31ZTK12aWXhprKkx54PorL8.cer (raw, json)
Hash identifier:          F7/JUDM3RFx03N0ySfBL7mIx3NAM0W4VdEJiX/EzuyA=
Subject key identifier:   11:29:40:DF:56:53:2B:5D:9A:59:78:69:AC:A9:31:E7:83:E8:AC:BF
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01B923
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sun 27 Aug 2023 21:29:16 +0000
Certificate not after:    Tue 30 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 137551
                          IP: 103.112.240.0/22
                          IP: 103.120.120.0/22
                          IP: 2402:b340::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 07:49:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112931 (0x1b923)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 27 21:29:16 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=A91D477A/serialNumber=112940DF56532B5D9A597869ACA931E783E8ACBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b2:79:48:86:87:19:54:c9:f2:06:b3:b0:48:
                    ab:0d:f6:7d:88:24:fd:b2:0b:cf:af:96:cf:3f:45:
                    2f:4f:4d:5c:3e:4e:89:ba:24:aa:28:cd:8d:af:55:
                    6b:7a:94:8f:5d:53:5e:12:61:cb:98:cb:01:6b:6a:
                    91:4b:34:28:78:ef:1b:6c:29:a7:25:fe:a6:c8:92:
                    a3:d5:71:52:be:c3:f8:c3:7c:47:e9:ea:0b:11:15:
                    a0:50:65:b4:a1:0e:dc:e4:4b:e6:f4:7a:24:06:fd:
                    3a:33:24:59:17:77:74:b6:0c:fc:a8:e8:17:19:cb:
                    c6:4e:6e:d6:08:08:c8:47:60:87:59:05:08:96:9d:
                    85:c3:7e:73:6a:31:aa:84:2e:3f:94:c1:92:59:06:
                    e1:06:42:e7:88:20:71:ea:03:06:a3:da:03:ab:f5:
                    67:49:3b:db:d6:ce:9c:8d:89:26:44:83:8e:9a:1c:
                    5b:7a:f3:ed:2f:e1:09:11:83:b3:23:e5:ba:e5:19:
                    0f:22:3f:7d:7f:7a:cf:78:b6:f4:8c:70:b4:83:73:
                    d9:f9:2d:ad:b4:14:da:e2:a7:e9:f8:d5:89:64:8e:
                    70:dd:83:85:4a:8e:36:98:95:01:aa:68:74:90:ae:
                    58:0d:78:51:12:78:0e:61:44:21:73:c8:81:d1:2a:
                    9c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:29:40:DF:56:53:2B:5D:9A:59:78:69:AC:A9:31:E7:83:E8:AC:BF
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137551

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.240.0/22
                  103.120.120.0/22
                IPv6:
                  2402:b340::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:a4:f5:51:55:05:e5:49:16:af:8d:08:eb:14:b3:97:8f:78:
         18:4d:ca:65:91:cc:89:8a:97:11:b1:9a:fa:27:6e:de:a3:d7:
         dc:8d:f6:40:da:77:e9:2f:9a:06:4c:49:98:7a:20:19:08:f5:
         37:4c:fb:7a:9e:ee:28:14:08:2c:b8:83:e2:e2:61:8a:f2:70:
         ad:58:ef:88:24:cc:c3:1f:01:44:f1:56:fa:7e:22:97:0a:79:
         d9:6e:ef:ea:ad:b7:a3:73:ec:9d:f3:de:d6:67:e0:f6:27:8e:
         d5:4c:b4:16:5d:4d:20:a6:3a:44:ca:dd:4f:04:ad:e5:8b:57:
         30:c9:8d:76:95:77:04:54:57:2c:16:e4:fc:e9:ae:22:c2:86:
         3b:89:c6:a1:e2:16:13:0a:7d:dd:b3:2e:c0:f0:d5:85:a4:e1:
         7c:c3:ad:83:10:f3:cb:d4:13:a0:8b:f6:f0:0e:03:67:39:68:
         87:ec:c8:8c:0c:43:a8:ab:8f:38:ef:f6:9c:83:6c:d0:70:11:
         1f:63:a0:0c:1f:0f:3b:03:31:21:dc:cb:8e:e0:bb:d1:86:0e:
         99:9c:20:89:d0:26:5d:47:16:35:0d:71:d0:ea:01:a1:68:59:
         07:a7:9c:d7:0b:74:5b:de:91:13:d3:db:1e:98:ab:5c:51:f9:
         3c:27:89:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:02:48 2024 by rpki-client on console-ams.rpki-client.org