Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EYuDYeRNUFJcthNQslJrWfbeLc0.cer
File:                     EYuDYeRNUFJcthNQslJrWfbeLc0.cer (raw, json)
Hash identifier:          2/LkQDLSby3HFcxaGBhXYqx016sQ0rC2cUkZdwa72rc=
Subject key identifier:   11:8B:83:61:E4:4D:50:52:5C:B6:13:50:B2:52:6B:59:F6:DE:2D:CD
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01ADB8
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/EYuDYeRNUFJcthNQslJrWfbeLc0.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 03 Jul 2023 06:52:39 +0000
Certificate not after:    Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources:    AS: 151476
                          IP: 103.231.34.0/23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 10:14:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110008 (0x1adb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul  3 06:52:39 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=A912F76A/serialNumber=118B8361E44D50525CB61350B2526B59F6DE2DCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4b:53:60:f5:73:45:a2:7c:c0:97:23:e0:81:
                    59:a5:d4:5e:c1:ef:34:6d:07:df:d8:6b:63:28:40:
                    55:91:44:01:c9:0f:50:a3:79:20:ff:d1:73:a8:31:
                    ae:02:39:fa:57:48:42:c1:32:d0:2b:6a:f3:80:21:
                    b4:ca:a6:3d:bf:6a:90:9d:92:49:e8:8b:ca:ed:09:
                    90:bc:0a:91:1e:8a:20:c8:50:f0:47:88:44:dd:b9:
                    56:14:e9:3e:bd:88:aa:c2:6e:1c:16:75:36:5e:63:
                    04:19:05:80:1a:60:cc:14:82:86:5a:c5:f6:3d:3e:
                    b1:3d:87:f2:bf:bb:21:a4:23:2f:ef:46:b4:98:50:
                    55:19:82:5a:97:1a:fe:bd:33:ab:af:f5:9f:a6:66:
                    ec:9b:bd:c9:03:24:bc:1b:73:dc:ff:47:c2:32:f3:
                    0b:9c:b5:c5:8b:f0:93:b9:87:ca:2d:45:cd:b2:d4:
                    54:de:32:36:a4:f0:7f:d5:ab:62:16:6d:95:84:6c:
                    da:20:93:c1:f5:6e:29:b3:f6:c5:c3:21:8d:2c:b9:
                    b6:37:36:6c:f3:a3:9e:de:30:df:af:74:39:1f:3d:
                    af:97:88:a1:f6:be:54:54:fa:f0:81:06:86:50:37:
                    b0:21:2d:e7:94:8c:bd:1e:97:6a:c0:74:e1:7b:45:
                    7d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:8B:83:61:E4:4D:50:52:5C:B6:13:50:B2:52:6B:59:F6:DE:2D:CD
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/EYuDYeRNUFJcthNQslJrWfbeLc0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  151476

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.231.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:34:0a:9f:1e:8d:a6:59:ab:51:7c:2c:e5:de:2e:0f:9a:22:
         09:9b:a8:1a:69:cc:37:0f:2a:99:81:60:4d:47:2a:73:7f:91:
         49:31:22:19:51:43:0d:e4:fb:27:c5:51:66:da:bc:a4:fb:04:
         2d:10:97:6f:9b:03:71:bb:61:b3:e8:34:65:f5:95:39:e3:f7:
         ae:f0:59:9c:7d:dc:ef:7a:ed:c0:3c:57:3d:03:b6:70:eb:59:
         c1:b1:2b:ef:5a:15:d5:34:64:43:98:47:24:2a:a9:46:67:29:
         ba:21:ec:98:7c:42:03:fb:fd:4e:c9:51:5a:aa:2e:8d:72:21:
         93:43:ab:b9:4b:4a:b2:6a:58:1c:03:7d:ae:d7:71:ce:37:a0:
         d2:dd:11:6e:16:b8:ed:2f:36:ea:76:65:81:1f:56:a5:ee:ea:
         e5:31:cf:51:23:a6:2b:04:1f:6a:3d:ed:00:9a:c0:53:eb:2b:
         78:97:99:ad:aa:cd:95:54:c7:1d:4a:9a:8d:cb:ca:a3:2d:52:
         6c:5d:97:29:f7:67:88:f8:f2:9b:cd:15:a9:d4:f2:14:e9:a6:
         38:b4:26:1b:67:a3:af:e1:1a:22:f1:c6:a1:23:f0:59:47:40:
         a9:f9:61:3e:70:70:af:76:d9:ad:94:a6:55:01:69:0c:de:0d:
         ee:b6:4a:be
-----BEGIN CERTIFICATE-----
MIIGGjCCBQKgAwIBAgIDAa24MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMDcwMzA2NTIzOVoXDTI0MDkzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMkY3NkExMTAvBgNVBAUTKDExOEI4MzYxRTQ0RDUwNTI1Q0I2MTM1
MEIyNTI2QjU5RjZERTJEQ0QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCsS1Ng9XNFonzAlyPggVml1F7B7zRtB9/Ya2MoQFWRRAHJD1CjeSD/0XOoMa4C
OfpXSELBMtAravOAIbTKpj2/apCdkknoi8rtCZC8CpEeiiDIUPBHiETduVYU6T69
iKrCbhwWdTZeYwQZBYAaYMwUgoZaxfY9PrE9h/K/uyGkIy/vRrSYUFUZglqXGv69
M6uv9Z+mZuybvckDJLwbc9z/R8Iy8wuctcWL8JO5h8otRc2y1FTeMjak8H/Vq2IW
bZWEbNogk8H1bimz9sXDIY0subY3Nmzzo57eMN+vdDkfPa+XiKH2vlRU+vCBBoZQ
N7AhLeeUjL0el2rAdOF7RX0FAgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUEYuDYeRN
UFJcthNQslJrWfbeLc0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTJGNzZBLzJGQkE4QkZFMTk2RTExRUVBQjQ1REI1NEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEyRjc2QS8yRkJBOEJGRTE5NkUxMUVFQUI0NURCNTRDNEY5QUUwMi9FWXVEWWVS
TlVGSmN0aE5Rc2xKcldmYmVMYzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAk+0MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ+ciMA0GCSqG
SIb3DQEBCwUAA4IBAQBlNAqfHo2mWatRfCzl3i4PmiIJm6gaacw3DyqZgWBNRypz
f5FJMSIZUUMN5PsnxVFm2ryk+wQtEJdvmwNxu2Gz6DRl9ZU54/eu8Fmcfdzveu3A
PFc9A7Zw61nBsSvvWhXVNGRDmEckKqlGZym6IeyYfEID+/1OyVFaqi6NciGTQ6u5
S0qyalgcA32u13HON6DS3RFuFrjtLzbqdmWBH1al7urlMc9RI6YrBB9qPe0AmsBT
6yt4l5mtqs2VVMcdSpqNy8qjLVJsXZcp92eI+PKbzRWp1PIU6aY4tCYbZ6Ov4Roi
8cahI/BZR0Cp+WE+cHCvdtmtlKZVAWkM3g3utkq+
-----END CERTIFICATE-----
Generated at Thu May 2 11:35:07 2024 by rpki-client on console-fra.rpki-client.org