Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUA-MjAeWHgKBwV8syty7K9G19k.cer
File:                     HUA-MjAeWHgKBwV8syty7K9G19k.cer (raw, json)
Hash identifier:          ucSRCi/Hz+rvEkktlqr5L5kQYZPdHyLXynEm5cT8aaM=
Subject key identifier:   1D:40:3E:32:30:1E:58:78:0A:07:05:7C:B3:2B:72:EC:AF:46:D7:D9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01BB31
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sun 03 Sep 2023 19:09:33 +0000
Certificate not after:    Thu 31 Oct 2024 00:00:00 +0000
Subordinate resources:    AS: 38313
                          AS: 139652
                          IP: 103.143.42.0/23
                          IP: 202.126.120.0/21

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 02:50:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113457 (0x1bb31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep  3 19:09:33 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=A91FA645/serialNumber=1D403E32301E58780A07057CB32B72ECAF46D7D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ef:23:91:c0:79:57:50:a7:f4:96:9c:0c:dd:
                    fa:10:f6:56:42:9b:0a:89:09:85:f2:44:3a:5b:c2:
                    bb:29:c0:cb:7c:e7:89:e0:e1:05:52:23:4f:13:4d:
                    c3:aa:a7:50:08:21:10:cd:13:32:fa:29:ea:b3:d3:
                    c8:f3:2d:20:eb:d7:b3:18:fd:62:bf:c7:48:2d:66:
                    d5:09:b9:36:79:a7:cd:1b:fd:ae:48:2b:bc:c3:b8:
                    7d:7e:54:25:24:07:79:9a:f7:44:92:47:a5:b2:6e:
                    d0:b4:d8:d2:84:a5:a3:63:44:8a:d4:bd:68:53:bb:
                    39:47:e8:a5:32:9b:6d:0e:df:89:90:fd:12:9a:a3:
                    48:9c:14:e8:7c:9a:3a:e8:4a:d7:04:eb:2a:ab:60:
                    af:1e:7e:00:ba:0d:7b:c5:38:84:51:95:ae:2e:66:
                    08:18:36:b8:ab:5b:cc:ca:71:b7:9b:9c:70:3e:04:
                    f5:e2:2e:8e:58:b8:bb:50:d3:db:6c:a4:93:9c:34:
                    e5:2d:a1:be:ab:d2:78:24:67:70:5e:f4:45:47:72:
                    b4:67:58:c0:74:86:4e:a2:c8:21:b2:0a:2a:59:86:
                    3b:0e:6b:a1:48:cf:91:a6:1f:15:bd:c1:a6:ca:39:
                    b9:02:67:90:3b:85:1e:d8:0a:f2:6c:48:15:6b:2f:
                    2b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:40:3E:32:30:1E:58:78:0A:07:05:7C:B3:2B:72:EC:AF:46:D7:D9
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  38313
                  139652

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.42.0/23
                  202.126.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c8:3c:d3:74:af:4d:ed:08:71:d6:18:bb:4c:f5:a9:5c:ad:dd:
         2b:8f:98:cc:89:18:25:1e:fa:20:6f:95:1a:26:b3:db:6c:ef:
         c9:e2:d2:9a:46:e5:95:09:3c:39:7f:b8:3d:b9:87:bf:af:d8:
         a6:8b:6c:d5:46:71:20:1c:0d:8a:91:1b:17:ef:da:6b:88:fb:
         7d:22:fc:e3:2b:52:c9:e3:4f:51:2d:05:ff:e3:fe:f7:ca:04:
         3f:7b:98:4f:db:43:25:0b:46:0a:0a:39:af:a6:b9:e6:aa:39:
         43:d0:e8:7a:51:99:54:69:05:61:5d:2b:14:38:7f:d0:ae:21:
         9a:d3:95:1c:3c:3f:af:fe:54:65:15:46:46:df:19:c1:0a:17:
         4d:85:05:ff:e9:2e:32:f7:d6:16:ec:f4:3c:2b:9a:50:5e:97:
         01:8c:72:bc:d7:ca:9c:fc:8c:f6:9c:e9:76:ce:b9:e0:c5:86:
         ca:8c:ee:3f:72:ef:1f:97:d5:0f:c4:b8:27:bf:44:1b:da:a5:
         9e:ce:9c:97:77:c8:dc:c2:2a:26:62:ba:52:33:98:25:54:7c:
         fe:d1:30:ed:66:88:39:bc:e5:9d:25:c8:cf:25:fe:83:e2:34:
         71:35:a7:54:28:59:db:b6:00:de:93:eb:54:e4:52:09:df:5a:
         07:eb:a5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 03:57:47 2024 by rpki-client on console-fra.rpki-client.org