Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G395gdniwsMPbyw0hxophthfiQ4.cer
File:                     G395gdniwsMPbyw0hxophthfiQ4.cer (raw, json)
Hash identifier:          M2uoJ3ecVTYOVPd2rBkRHlv/dkRneQ1RlDV4oP21H5w=
Subject key identifier:   1B:7F:79:81:D9:E2:C2:C3:0F:6F:2C:34:87:1A:29:86:D8:5F:89:0E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01BD92
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 14 Sep 2023 15:27:30 +0000
Certificate not after:    Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 147017
                          IP: 103.173.2.0/23
                          IP: 2001:df7:8280::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Apr 2024 02:50:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114066 (0x1bd92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep 14 15:27:30 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=A9170AE9/serialNumber=1B7F7981D9E2C2C30F6F2C34871A2986D85F890E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c8:38:67:a9:b4:39:44:e3:e7:02:8a:7d:31:
                    7f:39:77:8c:cc:4d:d3:cf:1b:c6:67:4d:de:dc:06:
                    57:92:2f:47:67:eb:78:81:a2:dc:3e:03:f3:51:cf:
                    bb:cc:f4:6f:fc:7b:46:ec:b0:cb:f5:6d:7a:74:bf:
                    12:d4:99:51:01:0c:e5:3b:cd:6b:06:34:32:4c:1d:
                    3b:65:6c:e0:42:ce:da:c3:23:7d:d2:bb:69:12:f6:
                    34:02:01:9e:eb:e1:4c:fb:2c:b2:f3:cc:9d:9a:11:
                    d7:98:fd:8e:04:c6:37:94:b9:29:77:4b:56:47:d0:
                    72:25:cb:5f:0a:2c:7e:20:13:a5:76:05:2a:b7:d4:
                    31:c2:52:58:36:4c:32:73:d9:38:80:8e:09:51:d8:
                    0a:ae:f0:da:d0:9b:c2:00:7d:11:c9:8c:c5:c5:3b:
                    f6:e9:37:4d:e0:72:e9:48:7a:83:81:ad:ff:26:5d:
                    a8:ff:4b:4e:66:5a:07:83:1f:3a:f6:d5:ce:6a:64:
                    d9:d0:98:bc:d1:91:a5:b4:04:34:95:43:bc:7f:be:
                    2a:69:19:ab:f3:fb:2b:b4:85:6b:7a:97:d5:6c:89:
                    f1:cc:de:f5:01:c5:6c:7a:4c:0e:55:f1:e2:d3:31:
                    27:81:ac:64:1c:27:28:8c:01:85:29:fc:cf:9d:51:
                    bf:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:7F:79:81:D9:E2:C2:C3:0F:6F:2C:34:87:1A:29:86:D8:5F:89:0E
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  147017

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.2.0/23
                IPv6:
                  2001:df7:8280::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:d7:41:8b:03:d3:71:31:e2:5c:03:ef:b9:3f:39:c8:1c:25:
         0c:0d:2e:cc:84:b4:1f:42:f1:30:8e:cf:3c:93:90:9c:a3:45:
         9f:89:cb:9c:ac:14:a2:39:42:58:9b:cb:b1:33:f6:ca:c0:5a:
         1d:c5:e4:43:ea:01:2e:8e:ca:b7:d4:de:5b:2b:80:85:eb:c3:
         e3:45:5c:1b:fc:c5:2e:f5:4d:ea:bf:46:10:97:22:d1:ff:6a:
         c2:ba:a3:ae:4e:78:5e:ae:c9:19:05:95:eb:59:69:3c:da:bf:
         ce:97:7d:04:83:65:97:8c:94:db:43:11:58:c5:a9:cd:85:da:
         16:b3:fc:3a:ba:df:9e:62:a1:06:b9:fd:6f:75:ce:e1:f1:58:
         09:21:79:08:66:c0:3d:69:f8:8f:7c:71:16:9f:42:4f:d1:52:
         13:9c:70:29:2c:33:cb:b1:cb:99:84:e1:a2:b2:63:ed:5b:31:
         de:7c:75:2c:48:23:c9:ca:93:59:cf:b1:0d:56:d5:3a:5a:5a:
         d9:2f:40:6c:7c:f6:7d:e1:6a:db:e8:5e:ca:1b:0c:77:42:16:
         9b:69:79:c8:6d:cc:dc:27:00:8f:e3:47:e9:3c:f1:12:98:27:
         a3:fd:c9:a4:85:81:86:28:6b:5c:64:90:a0:dc:89:05:d3:4e:
         ae:cb:ce:63
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Mar 29 03:44:10 2024 by rpki-client on console-fra.rpki-client.org