Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FwBKozEFsKDm0-tOR8UTBj2SzsI.cer
File:                     FwBKozEFsKDm0-tOR8UTBj2SzsI.cer (raw, json)
Hash identifier:          IKgUidOkZZJhCQuxv/hAgzE+q8fccxT6i/elzsRy82I=
Subject key identifier:   17:00:4A:A3:31:05:B0:A0:E6:D3:EB:4E:47:C5:13:06:3D:92:CE:C2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       019FF4
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sat 29 Apr 2023 01:20:43 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 56209
                          IP: 103.17.80.0/22
                          IP: 150.129.172.0/22
                          IP: 202.47.112.0/21
                          IP: 202.71.0.0/19
                          IP: 2406:2100::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Apr 2024 04:49:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106484 (0x19ff4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Apr 29 01:20:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=A91DD4A6/serialNumber=17004AA33105B0A0E6D3EB4E47C513063D92CEC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:93:e9:1c:07:56:d9:d9:20:b4:de:e0:a4:e5:
                    96:7a:86:c5:d7:29:09:21:bc:59:34:48:c4:1d:d7:
                    d3:ab:41:b9:07:f9:49:99:13:7c:d6:96:32:f2:81:
                    e8:c7:89:b3:38:03:25:c1:83:8f:b3:ea:92:5a:98:
                    c6:96:b5:42:ae:bb:64:92:9b:54:00:18:a4:ec:1c:
                    99:d7:75:6c:9e:9c:0b:0e:be:2a:c0:a0:1b:e8:a9:
                    42:68:d5:cd:12:09:2c:f6:d4:f5:a6:95:c7:aa:0d:
                    bf:ea:6e:bd:5d:29:14:3d:9a:70:3e:66:b5:9d:71:
                    04:27:1a:d6:6d:30:6f:c1:f3:16:85:e7:0a:f0:f9:
                    b9:8a:bc:89:0e:d3:71:c8:04:fd:fc:8c:8d:f2:cb:
                    bb:f4:ba:7b:7b:b6:25:15:f9:f2:93:dd:e1:9f:80:
                    af:24:a7:8b:dd:19:a9:6b:ae:c0:94:b1:48:88:96:
                    8b:96:6d:92:f2:d6:b9:93:e5:27:cb:e6:de:f9:3e:
                    7a:d9:85:83:f3:b0:20:27:e9:c9:77:2c:7b:6d:ee:
                    6c:f0:cf:c3:35:f6:60:42:fc:28:7c:b7:29:15:87:
                    4c:31:a6:d2:33:2f:ee:33:b0:85:7e:7d:78:de:42:
                    eb:64:fe:3d:6e:29:29:27:5f:49:4e:aa:3c:48:0c:
                    79:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:00:4A:A3:31:05:B0:A0:E6:D3:EB:4E:47:C5:13:06:3D:92:CE:C2
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  56209

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.17.80.0/22
                  150.129.172.0/22
                  202.47.112.0/21
                  202.71.0.0/19
                IPv6:
                  2406:2100::/32

    Signature Algorithm: sha256WithRSAEncryption
         c1:96:5b:4d:44:fc:3a:53:fb:57:0d:cc:34:83:72:9f:a5:88:
         a0:9b:ba:09:80:53:13:e5:4e:90:6b:8a:9b:92:4e:92:a7:64:
         6f:45:2b:de:49:7a:90:4d:bb:05:db:f1:db:0d:14:bc:af:cf:
         d7:3b:45:02:fe:d5:2d:74:24:dc:f2:a8:af:04:14:f7:87:d1:
         af:98:21:d6:f7:bf:11:aa:b3:0e:ca:44:92:9a:a0:e1:86:6c:
         0c:3b:be:a3:b2:54:20:e2:a1:56:f7:62:9d:04:1f:76:18:f3:
         75:9c:2a:14:a3:9f:d7:a5:6a:f1:a5:69:f1:6a:0d:8f:2c:a7:
         9d:4f:13:aa:86:73:43:c4:d4:6c:35:61:20:d2:35:aa:5a:8e:
         dc:a4:84:59:53:54:70:09:59:20:99:56:b0:ce:05:97:4d:b7:
         56:ec:65:0c:82:93:df:2e:47:17:fe:ac:32:8f:55:da:ed:8e:
         c7:0b:d1:13:95:4e:15:d7:30:d6:2b:90:30:ab:bc:54:19:7d:
         3c:fc:8c:d4:56:40:e9:7b:3f:5b:3f:98:3c:6b:86:1e:c0:e2:
         eb:b7:68:06:cc:67:47:63:58:ad:a1:76:d1:2a:66:94:b5:d5:
         c4:1c:3a:a3:6c:2d:40:de:b8:cb:25:ac:85:26:c7:2c:9e:eb:
         e6:73:af:ab
-----BEGIN CERTIFICATE-----
MIIGOzCCBSOgAwIBAgIDAZ/0MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMDQyOTAxMjA0M1oXDTI0MDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxREQ0QTYxMTAvBgNVBAUTKDE3MDA0QUEzMzEwNUIwQTBFNkQzRUI0
RTQ3QzUxMzA2M0Q5MkNFQzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDmk+kcB1bZ2SC03uCk5ZZ6hsXXKQkhvFk0SMQd19OrQbkH+UmZE3zWljLygejH
ibM4AyXBg4+z6pJamMaWtUKuu2SSm1QAGKTsHJnXdWyenAsOvirAoBvoqUJo1c0S
CSz21PWmlceqDb/qbr1dKRQ9mnA+ZrWdcQQnGtZtMG/B8xaF5wrw+bmKvIkO03HI
BP38jI3yy7v0unt7tiUV+fKT3eGfgK8kp4vdGalrrsCUsUiIlouWbZLy1rmT5SfL
5t75PnrZhYPzsCAn6cl3LHtt7mzwz8M19mBC/Ch8tykVh0wxptIzL+4zsIV+fXje
Qutk/j1uKSknX0lOqjxIDHmjAgMBAAGjggMwMIIDLDAdBgNVHQ4EFgQUFwBKozEF
sKDm0+tOR8UTBj2SzsIwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MURENEE2LzZBNTk2OUE4N0U5NTExRUM4MkVFNTIwQUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFERDRBNi82QTU5NjlBODdFOTUxMUVDODJFRTUyMEFDNEY5QUUwMi9Gd0JLb3pF
RnNLRG0wLXRPUjhVVEJqMlN6c0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDANuRMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCZxFQAwQCloGs
AwQDyi9wAwQFykcAMA0EAgACMAcDBQAkBiEAMA0GCSqGSIb3DQEBCwUAA4IBAQDB
lltNRPw6U/tXDcw0g3KfpYigm7oJgFMT5U6Qa4qbkk6Sp2RvRSveSXqQTbsF2/Hb
DRS8r8/XO0UC/tUtdCTc8qivBBT3h9GvmCHW978RqrMOykSSmqDhhmwMO76jslQg
4qFW92KdBB92GPN1nCoUo5/XpWrxpWnxag2PLKedTxOqhnNDxNRsNWEg0jWqWo7c
pIRZU1RwCVkgmVawzgWXTbdW7GUMgpPfLkcX/qwyj1Xa7Y7HC9ETlU4V1zDWK5Aw
q7xUGX08/IzUVkDpez9bP5g8a4YewOLrt2gGzGdHY1itoXbRKmaUtdXEHDqjbC1A
3rjLJayFJscsnuvmc6+r
-----END CERTIFICATE-----
Generated at Fri Mar 29 06:02:09 2024 by rpki-client on console-fra.rpki-client.org