Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer
File:                     EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer (raw, json)
Hash identifier:          zw9U324NPmGnBjp/MfvZ8jn3f1a4x3n4vcR0F7j2+wo=
Subject key identifier:   12:83:A2:F4:C7:BA:11:70:6C:66:E1:7B:F1:BD:3E:99:62:7A:18:13
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01BB6C
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 04 Sep 2023 19:47:12 +0000
Certificate not after:    Thu 31 Oct 2024 00:00:00 +0000
Subordinate resources:    AS: 132683
                          IP: 103.72.84.0/22
                          IP: 203.3.132.0/24
                          IP: 203.11.65.0/24
                          IP: 203.142.218.0/24
                          IP: 203.161.179.0/24
                          IP: 2406:c380::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Apr 2024 04:49:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113516 (0x1bb6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep  4 19:47:12 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=A91250FA/serialNumber=1283A2F4C7BA11706C66E17BF1BD3E99627A1813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b2:a1:d6:28:0c:62:94:76:e9:c0:78:3b:c1:
                    95:99:98:b1:19:37:f7:92:1b:c4:6d:cc:8b:a0:e9:
                    42:4a:2b:dc:d2:93:c0:06:15:d6:fd:6c:a8:c3:60:
                    e7:b0:4e:c7:5f:d7:90:7e:bb:81:6a:ce:f9:4a:ee:
                    a4:54:5b:93:e4:f2:2a:ae:09:d6:b9:67:87:62:ef:
                    2f:bc:49:7d:c5:69:7b:87:40:5f:38:1f:e2:8c:65:
                    53:90:76:ae:cf:d3:0c:7d:95:f7:36:ac:4c:e9:23:
                    a5:c2:a4:2d:ec:c1:bc:4a:24:5a:7b:44:26:4b:c1:
                    62:f4:b7:8e:9d:bc:38:ab:0d:2b:e6:8b:b7:c7:55:
                    74:f0:c2:78:75:37:5a:ea:39:bf:b2:8f:c2:60:1a:
                    40:6c:f9:73:10:a6:7b:d6:e5:16:70:6a:3a:79:8a:
                    69:a7:a7:65:e6:15:f4:e5:18:7a:da:49:a1:2a:05:
                    da:96:74:7b:2e:03:60:7c:90:59:9f:be:71:07:26:
                    6f:f7:4e:a3:ba:4a:90:9c:42:0e:a7:f2:28:7b:1d:
                    2b:7a:2e:cc:76:ef:3f:57:97:4f:18:ea:ba:50:a5:
                    48:24:44:be:0b:b1:02:b2:23:2e:d9:39:40:18:f2:
                    62:55:a6:33:94:e8:87:d9:2b:3b:e2:58:27:db:fc:
                    ee:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:83:A2:F4:C7:BA:11:70:6C:66:E1:7B:F1:BD:3E:99:62:7A:18:13
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  132683

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.72.84.0/22
                  203.3.132.0/24
                  203.11.65.0/24
                  203.142.218.0/24
                  203.161.179.0/24
                IPv6:
                  2406:c380::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:e5:73:0d:3c:d4:5c:a9:ae:d2:35:27:f7:32:25:1f:58:19:
         11:a8:4f:d9:7b:e5:ed:09:55:a8:6c:af:1e:e3:bb:be:a5:5b:
         90:0d:bc:00:bf:7d:38:ed:58:01:17:7f:b5:da:7f:73:1c:10:
         8c:c0:5e:1c:f0:41:31:22:35:80:55:a9:c6:d1:ec:0d:36:f6:
         20:73:df:b7:01:a9:0e:1e:61:a4:9f:60:af:09:1a:da:1c:86:
         2c:6b:8b:fd:80:db:9a:5e:5e:ef:bb:1b:40:58:67:12:fa:8c:
         59:6b:4a:fa:28:58:97:d1:9d:8d:0f:d8:fc:06:93:61:ef:4b:
         0c:6d:76:a9:09:8d:37:f7:d6:64:6c:25:e8:6a:aa:ca:41:2a:
         a5:be:31:ee:f0:c0:89:8f:47:43:fe:f8:01:ea:e0:d4:fa:45:
         57:59:67:a5:f7:6f:c7:9b:17:8c:76:99:cb:a2:7d:0f:d1:bb:
         3e:35:6b:7b:61:26:e3:ee:ac:7a:ee:41:96:49:78:63:74:05:
         73:a8:72:0c:2a:c8:2a:ea:d5:ae:4c:27:44:c9:16:e8:ca:f4:
         73:68:f4:d3:bd:49:aa:69:b8:71:a3:42:1c:fd:89:73:f9:75:
         93:88:41:2e:61:a4:73:82:32:5f:b1:3a:d5:ce:07:d1:a8:c4:
         06:3b:7a:3b
-----BEGIN CERTIFICATE-----
MIIGQTCCBSmgAwIBAgIDAbtsMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMDkwNDE5NDcxMloXDTI0MTAzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMjUwRkExMTAvBgNVBAUTKDEyODNBMkY0QzdCQTExNzA2QzY2RTE3
QkYxQkQzRTk5NjI3QTE4MTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDHsqHWKAxilHbpwHg7wZWZmLEZN/eSG8RtzIug6UJKK9zSk8AGFdb9bKjDYOew
Tsdf15B+u4FqzvlK7qRUW5Pk8iquCda5Z4di7y+8SX3FaXuHQF84H+KMZVOQdq7P
0wx9lfc2rEzpI6XCpC3swbxKJFp7RCZLwWL0t46dvDirDSvmi7fHVXTwwnh1N1rq
Ob+yj8JgGkBs+XMQpnvW5RZwajp5immnp2XmFfTlGHraSaEqBdqWdHsuA2B8kFmf
vnEHJm/3TqO6SpCcQg6n8ih7HSt6Lsx27z9Xl08Y6rpQpUgkRL4LsQKyIy7ZOUAY
8mJVpjOU6IfZKzviWCfb/O4xAgMBAAGjggM2MIIDMjAdBgNVHQ4EFgQUEoOi9Me6
EXBsZuF78b0+mWJ6GBMwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTI1MEZBL0FBQTBFQkUwMzY4RTExRUFBNzY4RkM3RUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEyNTBGQS9BQUEwRUJFMDM2OEUxMUVBQTc2OEZDN0VDNEY5QUUwMi9Fb09pOU1l
NkVYQnNadUY3OGIwLW1XSjZHQk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAgZLMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQCZ0hUAwQAywOE
AwQAywtBAwQAy47aAwQAy6GzMA0EAgACMAcDBQAkBsOAMA0GCSqGSIb3DQEBCwUA
A4IBAQBl5XMNPNRcqa7SNSf3MiUfWBkRqE/Ze+XtCVWobK8e47u+pVuQDbwAv304
7VgBF3+12n9zHBCMwF4c8EExIjWAVanG0ewNNvYgc9+3AakOHmGkn2CvCRraHIYs
a4v9gNuaXl7vuxtAWGcS+oxZa0r6KFiX0Z2ND9j8BpNh70sMbXapCY0399ZkbCXo
aqrKQSqlvjHu8MCJj0dD/vgB6uDU+kVXWWel92/HmxeMdpnLon0P0bs+NWt7YSbj
7qx67kGWSXhjdAVzqHIMKsgq6tWuTCdEyRboyvRzaPTTvUmqabhxo0Ic/Ylz+XWT
iEEuYaRzgjJfsTrVzgfRqMQGO3o7
-----END CERTIFICATE-----
Generated at Fri Mar 29 05:46:58 2024 by rpki-client on console-ams.rpki-client.org