Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer
File:                     IJOpiw2lSMwNHF-8o9clFG9ETXI.cer (raw, json)
Hash identifier:          9T30UX3BBVWyvm1eed9mCLPWqDMblYaT+86Ho7neY1A=
Subject key identifier:   20:93:A9:8B:0D:A5:48:CC:0D:1C:5F:BC:A3:D7:25:14:6F:44:4D:72
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       021BA5
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 15 Nov 2024 14:15:39 +0000
Certificate not after:    Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources:    AS: 58979
                          IP: 103.5.92.0/22
                          IP: 2402:8700::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Dec 2024 01:13:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138149 (0x21ba5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov 15 14:15:39 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=A9154657/serialNumber=2093A98B0DA548CC0D1C5FBCA3D725146F444D72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:21:f9:55:e4:10:4a:66:88:e1:98:f9:8b:74:
                    36:c0:45:86:ce:ae:af:3e:15:ed:ae:90:cd:69:5f:
                    16:33:28:62:68:8a:1b:9c:5c:cb:38:70:49:cc:15:
                    4e:98:e6:c5:a4:4d:3b:c9:7a:e5:7e:65:4e:46:eb:
                    1e:02:61:ab:ba:0c:29:9e:8e:9e:da:78:f5:62:52:
                    ca:dc:6a:90:e4:96:d4:6b:8c:c3:ae:70:cf:ce:9c:
                    12:1e:74:12:2c:38:f8:66:d3:a5:69:88:e2:45:0f:
                    cf:10:1c:43:35:d2:e5:81:74:aa:ac:e1:95:14:b8:
                    0e:e6:4d:69:3c:a1:73:0b:c7:7e:33:33:0b:59:32:
                    19:6f:4f:64:17:1a:61:7a:de:6b:17:b8:0d:bf:6e:
                    89:f3:16:58:d8:e2:35:b3:70:4a:a0:1a:dd:52:7d:
                    b1:ba:cb:7f:7a:88:be:ce:ec:c5:fd:fe:5b:40:23:
                    5a:00:68:0f:71:2b:e2:2d:c4:9c:70:fc:c0:a4:b3:
                    21:fa:51:71:c8:d5:c0:b7:06:7e:86:d4:77:aa:ef:
                    76:73:c2:18:4a:92:f1:4b:3f:d6:70:f7:f0:e8:bd:
                    11:4a:15:bf:b0:52:3e:c6:86:23:db:10:45:7f:3c:
                    d1:74:d0:e8:f4:76:79:ae:e1:2c:63:74:2b:74:ea:
                    9e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:93:A9:8B:0D:A5:48:CC:0D:1C:5F:BC:A3:D7:25:14:6F:44:4D:72
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58979

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.92.0/22
                IPv6:
                  2402:8700::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:e0:2c:4d:a3:2f:44:8a:aa:9c:31:ab:e7:79:95:f9:cb:b3:
         6b:e6:b4:17:8d:f7:18:53:b3:73:84:65:cf:42:5a:19:ac:41:
         fd:23:26:5c:82:21:ea:67:4d:11:5a:43:9f:af:83:5e:bb:97:
         e0:70:2b:72:a8:2c:c3:80:ef:61:61:7e:c4:b0:20:d3:5c:b1:
         d0:83:52:7c:e6:f6:15:ef:c6:39:f8:bd:cd:18:87:3d:2e:37:
         f4:8c:d9:e4:06:90:db:9f:7b:24:26:ce:90:2f:a3:18:7b:9f:
         17:28:40:ea:82:91:69:1d:8a:6c:96:cc:3f:ed:26:82:83:0c:
         25:79:f6:e4:b8:65:c2:35:9e:22:d3:c8:ba:0e:31:f5:1a:b9:
         c5:ec:63:18:fc:7d:e8:ea:49:93:e9:a2:fe:3e:46:c1:d2:c4:
         77:13:84:b9:f3:f1:8d:29:e7:32:5d:53:e5:16:68:16:64:6f:
         aa:7c:1d:af:e7:1e:69:66:d2:36:3e:31:33:85:f4:66:e9:cc:
         1f:0f:2f:bb:09:87:ff:84:9c:d2:20:b6:3d:9a:53:56:9a:a6:
         59:1e:e3:af:bb:d4:b6:4c:54:85:77:cd:81:d9:a6:4d:4a:34:
         e7:64:96:d7:80:c4:20:bf:d8:43:0a:c3:a4:b7:d8:5d:f4:8c:
         ba:f1:5f:49
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAhulMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MTExNTE0MTUzOVoXDTI1MTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNTQ2NTcxMTAvBgNVBAUTKDIwOTNBOThCMERBNTQ4Q0MwRDFDNUZC
Q0EzRDcyNTE0NkY0NDRENzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDMIflV5BBKZojhmPmLdDbARYbOrq8+Fe2ukM1pXxYzKGJoihucXMs4cEnMFU6Y
5sWkTTvJeuV+ZU5G6x4CYau6DCmejp7aePViUsrcapDkltRrjMOucM/OnBIedBIs
OPhm06VpiOJFD88QHEM10uWBdKqs4ZUUuA7mTWk8oXMLx34zMwtZMhlvT2QXGmF6
3msXuA2/bonzFljY4jWzcEqgGt1SfbG6y396iL7O7MX9/ltAI1oAaA9xK+ItxJxw
/MCksyH6UXHI1cC3Bn6G1Heq73ZzwhhKkvFLP9Zw9/DovRFKFb+wUj7GhiPbEEV/
PNF00Oj0dnmu4SxjdCt06p4VAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUIJOpiw2l
SMwNHF+8o9clFG9ETXIwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTU0NjU3LzcxNUYzMzM0MUQ3MTExRTJBMkRCNDRCNjA4QjAyQ0QyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE1NDY1Ny83MTVGMzMzNDFENzExMUUyQTJEQjQ0QjYwOEIwMkNEMi9JSk9waXcy
bFNNd05IRi04bzljbEZHOUVUWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAOZjMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZwVcMA0EAgAC
MAcDBQAkAocAMA0GCSqGSIb3DQEBCwUAA4IBAQAL4CxNoy9EiqqcMavneZX5y7Nr
5rQXjfcYU7NzhGXPQloZrEH9IyZcgiHqZ00RWkOfr4Neu5fgcCtyqCzDgO9hYX7E
sCDTXLHQg1J85vYV78Y5+L3NGIc9Ljf0jNnkBpDbn3skJs6QL6MYe58XKEDqgpFp
HYpslsw/7SaCgwwlefbkuGXCNZ4i08i6DjH1GrnF7GMY/H3o6kmT6aL+PkbB0sR3
E4S58/GNKecyXVPlFmgWZG+qfB2v5x5pZtI2PjEzhfRm6cwfDy+7CYf/hJzSILY9
mlNWmqZZHuOvu9S2TFSFd82B2aZNSjTnZJbXgMQgv9hDCsOkt9hd9Iy68V9J
-----END CERTIFICATE-----