Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IL0_f5mO1D1fxPhindDBiOx92uA.cer
File:                     IL0_f5mO1D1fxPhindDBiOx92uA.cer (raw, json)
Hash identifier:          ZZW6GHZSicEl8CkJwgg2zvNRGPnQF3lghsyv96+7ZOI=
Subject key identifier:   20:BD:3F:7F:99:8E:D4:3D:5F:C4:F8:62:9D:D0:C1:88:EC:7D:DA:E0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       021C17
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 18 Nov 2024 18:05:05 +0000
Certificate not after:    Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources:    AS: 151955
                          IP: 36.50.37.0/24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138263 (0x21c17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov 18 18:05:05 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=A918E9A4/serialNumber=20BD3F7F998ED43D5FC4F8629DD0C188EC7DDAE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f9:65:b0:8a:02:c5:ed:58:d6:ff:6d:c5:11:
                    09:67:64:c0:1f:dd:b9:da:e6:a0:0c:92:1b:f8:e9:
                    f7:0f:d4:e5:f7:27:b1:d7:c3:a5:34:2e:cf:8b:64:
                    3e:71:c5:b3:ce:96:4a:a8:e2:18:10:e4:12:82:3c:
                    10:c1:c1:49:95:1c:89:70:76:87:f3:20:82:b0:a6:
                    23:dc:ee:54:a4:95:52:42:45:cc:14:7a:8b:2a:89:
                    aa:d7:cb:32:31:34:57:92:da:e1:b0:40:c2:92:cf:
                    f8:e1:1e:3e:e6:c1:c3:05:9f:6e:e2:8e:af:4a:e2:
                    8c:27:c8:08:a5:94:1c:d5:a2:59:7d:ff:d8:f8:8d:
                    03:f6:c5:29:e7:f6:53:1d:10:9c:71:3f:b9:5e:4e:
                    ae:08:27:7d:25:ca:13:22:00:0b:de:da:83:54:29:
                    d4:f0:96:92:c7:f4:42:8f:87:7e:e2:ed:62:c6:35:
                    4b:3c:a1:79:5e:1f:b1:9c:95:f0:9d:a8:e2:df:a5:
                    c7:8e:2b:d0:f1:b3:d5:be:95:48:00:63:bb:15:29:
                    34:dd:73:1b:08:97:af:b9:bd:af:8f:cd:37:52:89:
                    7f:d8:86:5a:ac:b6:57:b3:60:f0:32:2a:8b:5d:1d:
                    ed:3f:63:5d:f6:d5:ae:ae:fa:80:e9:e9:e8:60:89:
                    c9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:BD:3F:7F:99:8E:D4:3D:5F:C4:F8:62:9D:D0:C1:88:EC:7D:DA:E0
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  151955

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:11:12:ac:be:e7:c1:57:24:f4:85:f3:ab:67:a4:e9:df:9c:
         35:66:d5:4f:9d:20:b8:98:13:d6:42:12:7c:d6:9b:20:79:f2:
         e7:c8:2c:b6:ae:0e:d6:d5:ce:bb:c4:8e:74:e8:b8:50:61:a3:
         32:05:a3:c1:b0:4c:80:fa:28:08:80:a2:f6:9a:be:a1:a4:63:
         37:53:f9:07:94:a9:e6:bb:ae:b0:14:37:f1:af:0a:f9:0f:f8:
         34:5a:b5:02:05:15:03:f9:9c:c9:0f:86:64:a5:71:32:20:17:
         af:c4:05:4f:92:a5:ec:a6:cd:3f:82:a2:ab:05:5b:fb:12:72:
         83:4d:53:8c:fe:6d:30:93:ff:43:9d:b4:70:7d:23:9d:de:dc:
         b7:51:2e:5b:f3:9a:59:9f:fe:11:57:3b:a5:37:3f:7d:9f:b2:
         57:f4:69:fd:de:22:98:bf:6d:e2:69:b7:34:7b:25:0a:e2:3a:
         e0:07:be:9a:6b:a7:df:7c:7c:f6:0a:ad:28:c9:43:cc:ac:ba:
         63:20:0c:b3:74:c8:ab:98:b3:4e:9d:a6:4c:c0:34:56:42:9a:
         c1:49:fc:20:6f:b6:1e:71:3d:08:48:21:a7:93:fb:0d:bd:91:
         8f:d4:9d:5e:5e:2b:56:9e:08:26:2f:de:d4:f8:8f:52:9c:3d:
         8e:a2:60:17
-----BEGIN CERTIFICATE-----
MIIGGjCCBQKgAwIBAgIDAhwXMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MTExODE4MDUwNVoXDTI2MDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxOEU5QTQxMTAvBgNVBAUTKDIwQkQzRjdGOTk4RUQ0M0Q1RkM0Rjg2
MjlERDBDMTg4RUM3RERBRTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDN+WWwigLF7VjW/23FEQlnZMAf3bna5qAMkhv46fcP1OX3J7HXw6U0Ls+LZD5x
xbPOlkqo4hgQ5BKCPBDBwUmVHIlwdofzIIKwpiPc7lSklVJCRcwUeosqiarXyzIx
NFeS2uGwQMKSz/jhHj7mwcMFn27ijq9K4ownyAillBzVoll9/9j4jQP2xSnn9lMd
EJxxP7leTq4IJ30lyhMiAAve2oNUKdTwlpLH9EKPh37i7WLGNUs8oXleH7GclfCd
qOLfpceOK9Dxs9W+lUgAY7sVKTTdcxsIl6+5va+PzTdSiX/YhlqstlezYPAyKotd
He0/Y1321a6u+oDp6ehgickxAgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUIL0/f5mO
1D1fxPhindDBiOx92uAwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFOUE0LzBENURDNTI0NzMwMjExRUVCNUNDQzI0NEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE4RTlBNC8wRDVEQzUyNDczMDIxMUVFQjVDQ0MyNDRDNEY5QUUwMi9JTDBfZjVt
TzFEMWZ4UGhpbmREQmlPeDkydUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlGTMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJDIlMA0GCSqG
SIb3DQEBCwUAA4IBAQAgERKsvufBVyT0hfOrZ6Tp35w1ZtVPnSC4mBPWQhJ81psg
efLnyCy2rg7W1c67xI506LhQYaMyBaPBsEyA+igIgKL2mr6hpGM3U/kHlKnmu66w
FDfxrwr5D/g0WrUCBRUD+ZzJD4ZkpXEyIBevxAVPkqXsps0/gqKrBVv7EnKDTVOM
/m0wk/9DnbRwfSOd3ty3US5b85pZn/4RVzulNz99n7JX9Gn93iKYv23iabc0eyUK
4jrgB76aa6fffHz2Cq0oyUPMrLpjIAyzdMirmLNOnaZMwDRWQprBSfwgb7YecT0I
SCGnk/sNvZGP1J1eXitWnggmL97U+I9SnD2OomAX
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:03:22 2024 by rpki-client on console-fra.rpki-client.org