Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IOiB-z48CVPBT4i_0t-mkwg0Cxw.cer
File:                     IOiB-z48CVPBT4i_0t-mkwg0Cxw.cer (raw, json)
Hash identifier:          Ig4YyECNwJPjP5s03tojOV2ffzfZt/smaP9Ru+pXBdw=
Subject key identifier:   20:E8:81:FB:3E:3C:09:53:C1:4F:88:BF:D2:DF:A6:93:08:34:0B:1C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01A6F3
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A917B44D/2B4859EC90FF11EBB6248758C4F9AE02/IOiB-z48CVPBT4i_0t-mkwg0Cxw.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A917B44D/2B4859EC90FF11EBB6248758C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 01 Jun 2023 02:19:36 +0000
Certificate not after:    Tue 30 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 135347
                          IP: 103.214.206.0/24
                          IP: 2001:df0:4b00::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Apr 2024 04:49:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108275 (0x1a6f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun  1 02:19:36 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=A917B44D/serialNumber=20E881FB3E3C0953C14F88BFD2DFA69308340B1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bd:da:a4:37:f5:f7:18:84:dc:22:d7:21:5d:
                    df:85:06:f5:3b:14:66:b6:cd:42:51:e5:19:7d:dc:
                    a7:d3:2c:f6:be:57:cc:47:2e:68:07:ac:2b:8a:ba:
                    3e:22:60:0f:7a:bf:5c:40:21:6c:dd:2d:ee:08:5b:
                    5c:1e:57:da:82:05:4c:08:cc:30:02:ca:2f:91:d5:
                    6b:3b:b9:d5:da:1b:7c:1a:3b:76:26:5d:8c:36:6d:
                    18:98:97:64:8b:2e:8b:b4:28:99:70:e5:81:46:c5:
                    75:81:41:b0:97:3c:29:d6:db:f3:91:50:02:23:e6:
                    67:85:7d:18:b8:c9:ed:5c:65:d5:3b:58:7a:5d:60:
                    78:32:54:67:b8:6f:76:74:5c:ce:14:55:1f:78:3c:
                    f9:7b:62:5c:78:01:55:c9:02:63:10:d6:38:ba:8c:
                    c0:c1:4f:13:37:00:5d:a3:3f:7b:f8:1f:8e:9c:54:
                    29:51:90:04:96:21:4d:bb:c5:f6:1f:65:d1:89:ba:
                    91:7a:b4:75:8c:37:95:56:27:ea:f0:b5:7a:e2:f0:
                    35:c4:9f:c7:1b:eb:a6:83:b4:a4:91:c4:f3:68:d8:
                    36:5f:f3:d8:d3:44:64:ec:7b:1d:02:3f:93:c3:45:
                    75:73:1f:85:65:5b:11:85:94:63:c7:97:4f:ec:ed:
                    ae:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:E8:81:FB:3E:3C:09:53:C1:4F:88:BF:D2:DF:A6:93:08:34:0B:1C
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917B44D/2B4859EC90FF11EBB6248758C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917B44D/2B4859EC90FF11EBB6248758C4F9AE02/IOiB-z48CVPBT4i_0t-mkwg0Cxw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  135347

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.206.0/24
                IPv6:
                  2001:df0:4b00::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:33:6f:fe:a2:6d:90:92:d7:bf:2a:aa:b4:a7:28:c2:fd:cd:
         1f:39:bd:0c:99:e4:0f:79:cc:86:26:52:28:d0:ab:14:b7:fd:
         a8:db:74:8f:d8:ee:b8:54:1b:58:9c:d6:11:14:34:eb:95:3d:
         e6:f3:a3:3e:73:f1:68:01:da:72:bf:94:df:e3:c2:29:cb:76:
         87:f0:80:b8:5e:ba:ec:28:41:ad:f2:39:e9:e9:41:eb:78:0f:
         7b:8a:0c:68:e6:f9:4f:8a:70:92:7a:e1:96:5d:b8:10:7e:12:
         88:b7:ff:10:55:62:84:32:2d:bc:3d:3e:63:6c:c0:66:81:d3:
         fb:b5:d8:c8:08:2b:af:7d:2f:ab:6a:cd:2b:59:db:62:41:f4:
         ba:22:84:bb:fc:e7:bc:53:ca:a0:2b:07:ff:cc:9e:27:53:5a:
         74:e9:7c:b4:02:15:60:59:62:3d:70:56:4a:54:e3:62:be:12:
         25:6b:af:9c:a4:bb:53:0f:c5:55:b1:e7:0a:81:ae:70:6c:0b:
         ad:0c:fe:b6:c9:3d:55:e3:4d:fa:cc:98:4b:69:2c:0e:a1:27:
         65:55:5d:36:38:3e:2d:2d:9b:d0:6f:61:1d:17:3c:cd:f5:1e:
         1a:60:49:77:a7:b6:e6:b3:b4:4d:3b:e5:4c:85:b1:e5:6f:80:
         10:4d:4a:e6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Mar 29 05:47:01 2024 by rpki-client on console-ams.rpki-client.org