Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSpVFaipmzCyHRhxvPr9J-saEyo.cer
File:                     HSpVFaipmzCyHRhxvPr9J-saEyo.cer (raw, json)
Hash identifier:          1p8DpmiAVrP4ufvwf8OCppKvSTtHc1TB0c17cBaMPcU=
Subject key identifier:   1D:2A:55:15:A8:A9:9B:30:B2:1D:18:71:BC:FA:FD:27:EB:1A:13:2A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01C376
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 11 Oct 2023 16:45:52 +0000
Certificate not after:    Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 150159
                          IP: 103.124.184.0/23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 07:49:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115574 (0x1c376)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct 11 16:45:52 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=A9185B30/serialNumber=1D2A5515A8A99B30B21D1871BCFAFD27EB1A132A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b1:59:76:a9:9f:ec:a8:88:11:30:83:e3:f1:
                    93:af:42:f2:84:b3:c1:76:11:59:32:c7:bf:84:43:
                    2e:b9:ee:70:55:59:1d:4b:20:d8:25:82:fe:87:f5:
                    b7:e6:7c:36:a3:13:3b:d2:0d:eb:f3:7e:44:24:26:
                    a7:a3:90:b2:6b:c5:40:74:5e:77:00:ff:ed:72:61:
                    c7:49:dc:d0:68:2b:87:5f:82:f0:ef:9b:2c:c0:ad:
                    07:57:dc:f6:40:81:0b:04:5b:a0:4b:82:a3:7b:1d:
                    07:ca:f8:c4:b9:a1:bf:39:66:82:eb:a3:67:aa:91:
                    02:5e:2f:b0:73:5e:07:ed:d8:e1:ef:b3:c8:d0:ae:
                    18:d6:8c:ad:2e:e4:fb:7b:40:fe:d2:1d:47:c3:29:
                    ae:9e:41:36:69:03:51:47:30:4a:f6:42:df:f8:46:
                    81:06:25:5b:9e:6a:55:9f:ac:7c:29:56:b9:64:08:
                    53:39:c0:4b:c1:1f:f6:30:3d:5d:fd:6b:02:b6:66:
                    ed:bf:97:89:ca:1e:00:8b:6c:b4:86:01:08:bb:5e:
                    c6:df:e1:28:77:4a:76:df:68:c1:ee:f2:fe:90:a9:
                    81:ce:28:01:8d:61:20:fa:c4:be:0f:a1:6d:a9:29:
                    69:50:f0:be:09:42:7b:ec:2b:b5:f7:87:ae:ce:10:
                    b6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:2A:55:15:A8:A9:9B:30:B2:1D:18:71:BC:FA:FD:27:EB:1A:13:2A
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  150159

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.124.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:8b:c1:a5:6b:ff:96:bc:ee:03:b9:6d:50:53:55:1f:37:e3:
         ac:de:22:fc:b0:a4:a4:3c:13:f2:54:b8:49:82:39:03:b2:a0:
         e7:03:ff:a0:26:1a:5d:5e:3d:c8:7a:49:32:08:d1:49:44:4d:
         4b:00:41:41:47:c7:51:c0:1a:e2:15:9a:ab:3e:bc:7b:de:82:
         5e:15:1e:7e:d7:77:1a:6d:fc:0e:09:a7:4a:4a:a8:6f:ba:89:
         bc:e6:c4:08:16:b1:08:16:08:64:3b:7b:30:31:fc:00:ad:1c:
         23:33:9d:df:80:35:e8:b1:dd:2b:23:88:fc:98:8c:26:c1:38:
         82:1a:54:70:52:c0:09:94:3a:48:0a:84:3b:29:27:4b:d4:55:
         0c:7f:a2:05:b3:2c:de:8d:b9:e7:46:a4:cb:d2:4b:9d:27:4f:
         6b:de:63:84:37:92:ab:a5:fc:13:dd:be:6b:53:d8:4f:22:5b:
         4d:96:8d:2c:a5:c7:59:d8:2a:a7:ce:06:7f:59:85:bc:7d:98:
         99:c4:3d:70:60:7f:07:d0:4b:76:0c:08:7a:ac:fb:20:51:24:
         3c:b5:be:3e:7c:32:1b:8d:88:09:69:88:e8:15:7b:c6:46:43:
         d7:da:c0:c6:09:d1:35:a1:b8:a3:f3:3a:49:ff:f2:04:46:dd:
         12:65:dc:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:02:50 2024 by rpki-client on console-ams.rpki-client.org