Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHotNbr5BXwPC40mLS5dYiajI4I.cer
File:                     GHotNbr5BXwPC40mLS5dYiajI4I.cer (raw, json)
Hash identifier:          jowE5EN/owB3wS9gwkgNWnWRAMVjNEB+PEUkzZ7px+A=
Subject key identifier:   18:7A:2D:35:BA:F9:05:7C:0F:0B:8D:26:2D:2E:5D:62:26:A3:23:82
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01BE50
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 19 Sep 2023 09:36:23 +0000
Certificate not after:    Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 151799
                          IP: 103.77.180.0/23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 05:14:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114256 (0x1be50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep 19 09:36:23 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=A91FD1C3/serialNumber=187A2D35BAF9057C0F0B8D262D2E5D6226A32382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:02:b7:81:3a:04:5d:ff:9a:1b:c1:b1:69:c2:
                    75:ee:e1:6d:d2:64:5b:e4:1d:11:aa:c8:df:b6:29:
                    ec:c9:40:ff:a0:21:97:20:f9:b1:30:b5:e5:76:a9:
                    ef:04:80:8b:10:54:a9:16:78:c6:42:a1:d8:87:14:
                    fb:51:55:8e:11:68:1e:ef:c0:65:34:f4:3f:89:73:
                    c3:b1:93:ce:0e:9f:ae:07:7c:ab:17:52:a9:6c:77:
                    5e:49:c3:48:78:a5:c0:d0:36:27:58:16:97:19:7c:
                    e9:8a:0e:42:81:92:b6:02:36:6f:76:e6:dd:e6:f1:
                    83:9e:eb:8f:bc:44:09:94:c5:0a:8d:b9:26:67:11:
                    c3:00:b8:1e:dc:34:bf:a0:55:9d:9e:5e:2c:73:29:
                    41:b8:4b:da:bb:2f:ff:56:96:f0:be:d5:36:c3:c4:
                    d4:b1:08:9d:3d:7f:47:36:e6:aa:3d:ca:91:2a:6c:
                    0d:c7:e0:6f:37:db:85:da:c5:5b:22:ed:89:5f:73:
                    f5:d9:31:c4:ab:36:d5:af:e0:b8:a9:21:53:2b:58:
                    04:c4:20:95:5f:ed:8b:0f:96:23:85:13:3d:04:e5:
                    b4:e6:90:0f:ca:44:11:1c:0d:eb:ca:b5:40:64:24:
                    5c:1e:c7:27:05:41:50:86:7c:15:ff:61:39:56:cd:
                    03:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:7A:2D:35:BA:F9:05:7C:0F:0B:8D:26:2D:2E:5D:62:26:A3:23:82
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  151799

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:fe:b1:a4:59:13:43:fa:8d:5d:fe:90:fa:d1:14:c0:ba:60:
         97:74:15:ee:39:f0:e2:e1:68:eb:20:92:76:12:79:2d:9f:84:
         3a:05:48:0d:7a:26:6f:87:3b:22:f3:ea:e5:a1:f7:aa:78:cf:
         a7:6a:9b:36:c6:5a:cf:56:de:b5:ff:86:15:11:51:65:75:2e:
         95:8a:88:9e:d2:5c:99:62:a3:31:51:60:ef:da:7e:64:f7:a3:
         52:b7:d7:db:e2:4f:7e:c5:57:fe:84:69:0b:5d:f6:5b:ca:50:
         ac:6e:cb:47:e0:0d:29:d3:e3:82:f3:60:2d:6e:18:d6:95:7c:
         9b:0a:8e:b8:0a:69:2d:d9:50:06:9a:fb:44:a2:bd:af:eb:a7:
         67:3e:90:c3:4e:5d:61:4c:1c:b8:af:f0:94:c0:55:36:ea:13:
         ec:1f:b8:6a:74:df:00:ac:b0:b2:ac:28:0b:98:08:6c:72:be:
         df:ec:d8:b8:3d:fd:5d:70:0e:89:5c:e1:8c:f0:49:2d:54:9b:
         d6:3a:ad:dd:6c:fd:1f:58:c4:92:03:af:a7:5a:34:7c:2f:13:
         76:19:79:06:0a:2c:72:79:75:d5:7b:64:3c:d6:20:4a:b7:04:
         a6:22:b3:37:cd:74:61:90:8f:31:73:5b:d6:ed:89:6d:5a:f6:
         ec:6d:3f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 05:58:18 2024 by rpki-client on console-ams.rpki-client.org