Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer
File:                     FyPctBoEJopYeqzoz9na5fn1Hfc.cer (raw, json)
Hash identifier:          z9ukUW+Zhhlu+0fNu9wdo25Q8vcVRSJd/YLjQHf8x6Q=
Subject key identifier:   17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01A353
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 15 May 2023 12:37:27 +0000
Certificate not after:    Tue 30 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 10228 -- 10230
                          AS: 17457
                          AS: 18293
                          AS: 23879 -- 23880
                          AS: 23926
                          AS: 24018
                          AS: 24031
                          AS: 24376
                          AS: 38032 -- 38033
                          AS: 38072
                          AS: 45863
                          AS: 45915
                          AS: 55416 -- 55418
                          AS: 55517
                          AS: 56173
                          AS: 58525
                          AS: 58720 -- 58721
                          AS: 134706
                          IP: 27.123.32.0/19
                          IP: 27.123.192.0/20
                          IP: 106.10.128.0/17
                          IP: 115.178.0.0/20
                          IP: 121.101.144.0/20
                          IP: 124.108.64.0/18
                          IP: 180.222.96.0 -- 180.222.119.255
                          IP: 180.233.112.0/21
                          IP: 183.177.64.0/19
                          IP: 202.4.164.0/24
                          IP: 202.43.192.0/19
                          IP: 202.86.4.0/22
                          IP: 202.160.176.0/20
                          IP: 202.165.96.0/20
                          IP: 202.171.234.0/24
                          IP: 203.30.168.0/23
                          IP: 203.55.48.0/23
                          IP: 203.84.192.0/19
                          IP: 203.104.16.0/21
                          IP: 2001:df0:ed::/48
                          IP: 2406:6e00::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 May 2024 11:36:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107347 (0x1a353)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May 15 12:37:27 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=A9119DCB/serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:08:f3:d1:38:88:44:86:23:ff:66:07:4e:5f:
                    1c:ae:72:32:62:50:f6:d5:1b:90:ef:ae:07:d2:2c:
                    cc:fc:16:13:8a:45:a9:86:5b:4d:07:34:67:68:96:
                    c1:79:f7:97:be:8d:49:c6:0e:95:9b:97:5b:c9:72:
                    ac:de:8b:91:51:a5:79:83:41:2c:fa:22:a9:f1:cc:
                    29:6a:00:57:c2:d0:e4:59:d0:55:3e:52:64:2c:8b:
                    97:e2:a4:39:3d:51:29:c2:94:a8:b3:b2:d5:e6:1b:
                    8e:70:31:0f:54:7d:e4:eb:a1:d7:94:48:f3:cc:6f:
                    a2:13:8f:df:3f:65:18:6d:f3:6f:c0:7f:d8:a3:3b:
                    52:dd:e5:98:1d:95:5d:ee:13:3c:0a:36:91:2d:84:
                    1f:f0:fc:49:1d:a9:be:78:c6:be:05:79:64:38:43:
                    f6:bb:a6:8a:e3:10:be:78:fd:69:a8:c3:3a:ed:a6:
                    a7:bf:f8:63:e8:ee:1d:63:22:7a:87:a4:33:72:cb:
                    df:ab:42:3e:e1:56:43:b5:c8:df:1a:a5:18:d2:25:
                    d0:c2:d1:ec:15:9a:dd:89:58:e4:68:70:59:62:2c:
                    92:cc:da:fc:eb:42:cf:23:d0:5d:43:27:c8:8f:0b:
                    47:5d:b5:34:0a:01:a9:b6:66:34:61:ed:68:2c:54:
                    c3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  10228-10230
                  17457
                  18293
                  23879-23880
                  23926
                  24018
                  24031
                  24376
                  38032-38033
                  38072
                  45863
                  45915
                  55416-55418
                  55517
                  56173
                  58525
                  58720-58721
                  134706

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.123.32.0/19
                  27.123.192.0/20
                  106.10.128.0/17
                  115.178.0.0/20
                  121.101.144.0/20
                  124.108.64.0/18
                  180.222.96.0-180.222.119.255
                  180.233.112.0/21
                  183.177.64.0/19
                  202.4.164.0/24
                  202.43.192.0/19
                  202.86.4.0/22
                  202.160.176.0/20
                  202.165.96.0/20
                  202.171.234.0/24
                  203.30.168.0/23
                  203.55.48.0/23
                  203.84.192.0/19
                  203.104.16.0/21
                IPv6:
                  2001:df0:ed::/48
                  2406:6e00::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:74:09:23:04:65:a2:b9:75:53:11:ae:1d:31:53:ad:1b:05:
         b5:63:61:94:6f:6e:1c:e2:34:0f:c1:9d:f6:70:31:27:43:4a:
         88:27:3a:66:d0:3b:3c:9d:9d:b8:89:1a:2f:85:60:b1:3a:e4:
         a0:e1:17:fa:7a:0c:42:b8:92:e0:86:fd:bf:45:ea:43:dc:37:
         a7:9a:04:ab:29:d5:68:6c:d7:c3:48:7c:a8:24:93:5f:d3:5a:
         ee:a1:90:90:b4:80:76:88:a0:19:80:a8:31:38:3e:1f:b5:d5:
         b3:fd:0c:41:67:26:fd:bb:4c:88:c0:f7:e8:01:a0:68:99:92:
         e7:8e:55:37:e3:0f:e0:f7:4c:b0:56:45:d0:d5:72:ad:29:ae:
         00:06:25:5c:a8:0b:87:7e:48:9d:1a:d0:96:fc:1f:6d:79:dd:
         a3:95:ce:59:3b:61:3f:bd:11:ac:45:a8:60:98:34:e2:37:27:
         6f:a7:02:ce:d9:e7:90:c6:2f:68:c6:bb:e1:6a:0f:7a:ac:c9:
         49:51:e0:6d:db:41:b4:7d:61:ee:e1:43:30:0a:b1:92:3a:c7:
         f9:81:21:17:60:17:51:a2:00:4a:89:77:71:d2:87:e4:ce:49:
         9c:f7:17:05:2d:6d:bd:93:41:08:f8:c5:26:91:fb:6c:b9:0e:
         f8:6e:72:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 12:31:20 2024 by rpki-client on console-fra.rpki-client.org