Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EobObnRy-d6N8qVtj9oUScpz7dw.cer
File:                     EobObnRy-d6N8qVtj9oUScpz7dw.cer (raw, json)
Hash identifier:          BErA+weaqsj6mcqoRRyUdVXrwkoNZZeABywKuQLDnjM=
Subject key identifier:   12:86:CE:6E:74:72:F9:DE:8D:F2:A5:6D:8F:DA:14:49:CA:73:ED:DC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0201E1
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91D9196/438F5D965A1A11E6A3864910C4F9AE02/EobObnRy-d6N8qVtj9oUScpz7dw.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91D9196/438F5D965A1A11E6A3864910C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 23 Jul 2024 21:46:21 +0000
Certificate not after:    Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources:    AS: 17465
                          IP: 43.252.92.0/22
                          IP: 103.233.64.0/22
                          IP: 111.92.0.0/17
                          IP: 116.68.64.0/18
                          IP: 202.83.32.0/19
                          IP: 202.88.224.0/19
                          IP: 202.164.128.0/19
                          IP: 2406:8800::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131553 (0x201e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 23 21:46:21 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=A91D9196/serialNumber=1286CE6E7472F9DE8DF2A56D8FDA1449CA73EDDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:45:45:f7:4e:93:4b:ef:8d:ab:83:ad:73:86:
                    2f:d5:12:76:b9:23:3b:a5:8a:ed:dd:ee:c8:1b:c2:
                    70:ad:c3:ad:6b:fe:4a:84:e3:1b:49:e4:b9:e6:95:
                    4c:42:28:b0:f4:93:47:50:d7:30:32:69:9e:10:97:
                    06:91:56:a2:62:96:f9:88:d6:2a:02:58:3b:a7:c8:
                    f4:12:7e:16:b9:24:51:9c:79:06:95:c4:88:f9:c5:
                    b3:7e:20:82:fe:84:15:a8:74:63:06:48:02:2c:e5:
                    db:e2:97:35:cf:3a:ff:13:ae:79:69:45:37:dc:9d:
                    a7:5a:a9:dd:5a:9d:2e:c8:64:5f:03:40:bb:f2:69:
                    91:5e:28:4d:d1:08:02:be:93:73:49:d8:5f:5f:1f:
                    39:ea:63:45:32:d8:ac:b8:7b:33:23:7f:f7:96:ab:
                    a3:f9:72:cc:06:79:c6:9b:fb:6e:07:c1:c1:53:d6:
                    14:69:b8:c5:bf:a1:0e:85:de:69:73:93:08:24:ac:
                    3e:64:03:54:00:47:55:82:5d:72:12:39:9f:c4:c2:
                    df:16:0f:c0:6d:97:f6:1c:c4:d3:84:e1:30:21:de:
                    f6:b9:6b:65:b2:8f:b7:c6:e0:c7:3f:8e:f9:75:f8:
                    7a:33:ff:e5:12:0f:fb:51:e7:18:d5:1c:fe:8c:a2:
                    45:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:86:CE:6E:74:72:F9:DE:8D:F2:A5:6D:8F:DA:14:49:CA:73:ED:DC
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D9196/438F5D965A1A11E6A3864910C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D9196/438F5D965A1A11E6A3864910C4F9AE02/EobObnRy-d6N8qVtj9oUScpz7dw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  17465

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.252.92.0/22
                  103.233.64.0/22
                  111.92.0.0/17
                  116.68.64.0/18
                  202.83.32.0/19
                  202.88.224.0/19
                  202.164.128.0/19
                IPv6:
                  2406:8800::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:54:f0:a2:70:ff:41:2c:99:30:f1:40:99:82:1f:7a:23:07:
         b5:ee:8c:37:ab:06:48:73:22:69:c6:74:5e:07:f2:ba:1b:bd:
         d7:dc:a9:ff:3e:a7:d3:44:77:70:0b:95:31:bb:85:98:fe:f2:
         5d:dd:23:f9:1d:ce:9b:0d:81:5d:94:8d:b9:2b:4a:44:e7:ee:
         86:33:98:fb:de:6e:79:01:10:0a:5d:da:43:5c:1e:3b:b1:e6:
         bb:88:52:a4:f6:0a:e2:ec:d5:85:95:0d:dd:51:38:35:ce:63:
         1c:ef:24:4a:a0:8a:ef:11:0f:4e:8d:1e:02:a7:9e:50:17:09:
         3e:cc:74:d2:e0:be:b4:31:78:56:92:e1:1e:79:be:c1:ab:21:
         aa:d7:74:5d:89:d7:67:4b:0f:5e:c3:b3:cf:ac:39:aa:ac:21:
         07:4c:cb:e6:35:17:8d:1d:35:51:78:35:ef:a9:93:b7:08:a0:
         47:0d:a6:e7:86:2e:d5:9d:5d:bd:29:34:39:f2:bb:6b:44:43:
         76:09:41:5e:09:e4:39:bf:16:65:11:ed:3e:d6:3a:c7:41:20:
         48:fb:83:0c:f7:f0:5c:8d:77:e5:e4:3b:64:50:ee:0c:e3:07:
         3d:6a:59:a1:e9:89:42:7e:f7:db:69:d4:ca:06:c4:66:c9:fa:
         41:43:2f:7a
-----BEGIN CERTIFICATE-----
MIIGTDCCBTSgAwIBAgIDAgHhMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDcyMzIxNDYyMVoXDTI1MDkzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRDkxOTYxMTAvBgNVBAUTKDEyODZDRTZFNzQ3MkY5REU4REYyQTU2
RDhGREExNDQ5Q0E3M0VEREMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDMRUX3TpNL742rg61zhi/VEna5Izuliu3d7sgbwnCtw61r/kqE4xtJ5LnmlUxC
KLD0k0dQ1zAyaZ4QlwaRVqJilvmI1ioCWDunyPQSfha5JFGceQaVxIj5xbN+IIL+
hBWodGMGSAIs5dvilzXPOv8TrnlpRTfcnadaqd1anS7IZF8DQLvyaZFeKE3RCAK+
k3NJ2F9fHznqY0Uy2Ky4ezMjf/eWq6P5cswGecab+24HwcFT1hRpuMW/oQ6F3mlz
kwgkrD5kA1QAR1WCXXISOZ/Ewt8WD8Btl/YcxNOE4TAh3va5a2Wyj7fG4Mc/jvl1
+Hoz/+USD/tR5xjVHP6MokVjAgMBAAGjggNBMIIDPTAdBgNVHQ4EFgQUEobObnRy
+d6N8qVtj9oUScpz7dwwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUQ5MTk2LzQzOEY1RDk2NUExQTExRTZBMzg2NDkxMEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFEOTE5Ni80MzhGNUQ5NjVBMUExMUU2QTM4NjQ5MTBDNEY5QUUwMi9Fb2JPYm5S
eS1kNk44cVZ0ajlvVVNjcHo3ZHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGQYIKwYBBQUHAQgBAf8ECjAI
oAYwBAICRDkwUgYIKwYBBQUHAQcBAf8EQzBBMDAEAgABMCoDBAIr/FwDBAJn6UAD
BAdvXAADBAZ0READBAXKUyADBAXKWOADBAXKpIAwDQQCAAIwBwMFACQGiAAwDQYJ
KoZIhvcNAQELBQADggEBADtU8KJw/0EsmTDxQJmCH3ojB7XujDerBkhzImnGdF4H
8robvdfcqf8+p9NEd3ALlTG7hZj+8l3dI/kdzpsNgV2UjbkrSkTn7oYzmPvebnkB
EApd2kNcHjux5ruIUqT2CuLs1YWVDd1RODXOYxzvJEqgiu8RD06NHgKnnlAXCT7M
dNLgvrQxeFaS4R55vsGrIarXdF2J12dLD17Ds8+sOaqsIQdMy+Y1F40dNVF4Ne+p
k7cIoEcNpueGLtWdXb0pNDnyu2tEQ3YJQV4J5Dm/FmUR7T7WOsdBIEj7gwz38FyN
d+XkO2RQ7gzjBz1qWaHpiUJ+99tp1MoGxGbJ+kFDL3o=
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:03:19 2024 by rpki-client on console-fra.rpki-client.org