Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EobObnRy-d6N8qVtj9oUScpz7dw.cer
File:                     EobObnRy-d6N8qVtj9oUScpz7dw.cer (raw, json)
Hash identifier:          3WYwx43C+S3432akPit42D2beD1Ar96XYFdGSqBIuC0=
Subject key identifier:   12:86:CE:6E:74:72:F9:DE:8D:F2:A5:6D:8F:DA:14:49:CA:73:ED:DC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01B4EB
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91D9196/438F5D965A1A11E6A3864910C4F9AE02/EobObnRy-d6N8qVtj9oUScpz7dw.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91D9196/438F5D965A1A11E6A3864910C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 03 Aug 2023 20:42:49 +0000
Certificate not after:    Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources:    AS: 17465
                          IP: 43.252.92.0/22
                          IP: 103.233.64.0/22
                          IP: 111.92.0.0/17
                          IP: 116.68.64.0/18
                          IP: 202.83.32.0/19
                          IP: 202.88.224.0/19
                          IP: 202.164.128.0/19
                          IP: 2406:8800::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Apr 2024 04:49:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111851 (0x1b4eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug  3 20:42:49 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=A91D9196/serialNumber=1286CE6E7472F9DE8DF2A56D8FDA1449CA73EDDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:45:45:f7:4e:93:4b:ef:8d:ab:83:ad:73:86:
                    2f:d5:12:76:b9:23:3b:a5:8a:ed:dd:ee:c8:1b:c2:
                    70:ad:c3:ad:6b:fe:4a:84:e3:1b:49:e4:b9:e6:95:
                    4c:42:28:b0:f4:93:47:50:d7:30:32:69:9e:10:97:
                    06:91:56:a2:62:96:f9:88:d6:2a:02:58:3b:a7:c8:
                    f4:12:7e:16:b9:24:51:9c:79:06:95:c4:88:f9:c5:
                    b3:7e:20:82:fe:84:15:a8:74:63:06:48:02:2c:e5:
                    db:e2:97:35:cf:3a:ff:13:ae:79:69:45:37:dc:9d:
                    a7:5a:a9:dd:5a:9d:2e:c8:64:5f:03:40:bb:f2:69:
                    91:5e:28:4d:d1:08:02:be:93:73:49:d8:5f:5f:1f:
                    39:ea:63:45:32:d8:ac:b8:7b:33:23:7f:f7:96:ab:
                    a3:f9:72:cc:06:79:c6:9b:fb:6e:07:c1:c1:53:d6:
                    14:69:b8:c5:bf:a1:0e:85:de:69:73:93:08:24:ac:
                    3e:64:03:54:00:47:55:82:5d:72:12:39:9f:c4:c2:
                    df:16:0f:c0:6d:97:f6:1c:c4:d3:84:e1:30:21:de:
                    f6:b9:6b:65:b2:8f:b7:c6:e0:c7:3f:8e:f9:75:f8:
                    7a:33:ff:e5:12:0f:fb:51:e7:18:d5:1c:fe:8c:a2:
                    45:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:86:CE:6E:74:72:F9:DE:8D:F2:A5:6D:8F:DA:14:49:CA:73:ED:DC
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D9196/438F5D965A1A11E6A3864910C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D9196/438F5D965A1A11E6A3864910C4F9AE02/EobObnRy-d6N8qVtj9oUScpz7dw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  17465

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.252.92.0/22
                  103.233.64.0/22
                  111.92.0.0/17
                  116.68.64.0/18
                  202.83.32.0/19
                  202.88.224.0/19
                  202.164.128.0/19
                IPv6:
                  2406:8800::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:db:a4:9f:75:e7:73:8a:ab:5c:8c:b3:06:b3:b4:73:48:32:
         02:c7:c8:91:9c:24:42:de:0e:73:6d:a7:3d:b9:cc:41:31:51:
         45:81:5c:9e:06:7a:fd:25:b8:52:c5:b8:0c:8b:5d:85:bf:26:
         9c:2d:61:95:b8:81:12:4c:8a:7c:18:06:69:e6:8d:b9:02:07:
         90:0f:76:a7:a9:52:7c:45:30:65:41:14:0d:5e:39:f3:d8:62:
         02:d5:fb:35:f5:e2:59:8b:03:34:28:94:ae:5d:93:4a:e9:c2:
         ab:b6:35:66:02:6a:a2:05:82:70:7b:c0:7e:3c:35:43:a3:69:
         b7:3b:63:6b:6e:81:a2:39:91:17:e6:fe:5a:df:25:b3:a7:7c:
         f7:1e:3e:d4:a2:f5:c7:0d:f0:7b:f5:74:f2:d5:97:f6:07:f6:
         e0:9e:79:f5:5c:53:8f:5b:54:01:73:61:63:f6:e7:54:5c:07:
         34:61:e6:80:73:f6:3b:71:13:b8:d7:d2:2c:2a:fa:f0:51:fc:
         d1:c5:38:49:1f:29:50:ba:fa:aa:9c:c1:82:2b:b4:31:41:8b:
         0e:f6:15:a2:ff:7f:6e:52:03:98:37:c5:29:08:fa:c8:46:7b:
         a5:70:ce:99:27:04:24:b7:d0:5e:d8:22:22:60:d7:27:b6:ad:
         4b:58:0d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 06:02:09 2024 by rpki-client on console-fra.rpki-client.org