Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ide4chBUge2CqeYiOyVAa7dSLyM.cer
File:                     Ide4chBUge2CqeYiOyVAa7dSLyM.cer (raw, json)
Hash identifier:          9fJfGIjqDv84NQZc04q+6oNEd5PXvcWiAgounP8aQ+w=
Subject key identifier:   21:D7:B8:72:10:54:81:ED:82:A9:E6:22:3B:25:40:6B:B7:52:2F:23
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01B7F1
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91A1ABC/E30BF5DA222911EE8444C621C4F9AE02/Ide4chBUge2CqeYiOyVAa7dSLyM.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91A1ABC/E30BF5DA222911EE8444C621C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 21 Aug 2023 17:22:03 +0000
Certificate not after:    Thu 31 Oct 2024 00:00:00 +0000
Subordinate resources:    AS: 136816
                          IP: 103.97.156.0/22

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 10:14:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112625 (0x1b7f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 21 17:22:03 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=A91A1ABC/serialNumber=21D7B872105481ED82A9E6223B25406BB7522F23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:cd:79:23:49:e7:28:bb:96:7e:91:83:bf:11:
                    c0:2c:fa:79:eb:b5:fa:5a:22:d3:ad:7f:b7:2e:d6:
                    02:08:f8:8a:3f:8a:cf:4a:00:ef:27:4d:09:a7:5c:
                    5f:fc:a4:92:6e:32:25:6e:7f:97:f8:9f:90:c3:b2:
                    10:65:1f:cb:23:b9:fa:22:ae:b3:c1:f9:5d:93:62:
                    a3:77:de:5e:12:a6:0e:bf:1d:88:6a:1c:6e:2d:d7:
                    10:e2:5f:ca:6a:cf:45:2e:4d:b1:5c:0f:29:1e:2a:
                    7c:19:8a:be:9c:cd:55:25:8b:be:54:f4:bf:f9:26:
                    63:d1:69:bf:46:ea:c2:e9:b2:67:23:0a:af:78:0e:
                    ba:07:5e:60:31:ac:72:e5:d7:74:5a:de:21:ad:6e:
                    1a:04:a7:b4:0d:ca:6b:68:76:da:63:20:27:46:63:
                    c2:df:de:b9:8f:fa:32:f1:1e:25:3e:9f:68:3c:ac:
                    84:6c:f2:92:e6:7c:76:8c:36:21:42:5d:de:9d:01:
                    54:54:ae:ed:8f:ab:7b:c9:9f:20:e4:9a:e9:7e:c5:
                    0d:c9:af:11:ee:6c:63:e6:93:70:7a:83:9c:d1:ce:
                    c5:c8:88:96:ea:87:51:47:6a:3b:59:b9:77:3a:6a:
                    c6:a9:7a:a1:69:bd:31:63:b6:1e:c8:31:e4:d7:36:
                    9e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D7:B8:72:10:54:81:ED:82:A9:E6:22:3B:25:40:6B:B7:52:2F:23
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A1ABC/E30BF5DA222911EE8444C621C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A1ABC/E30BF5DA222911EE8444C621C4F9AE02/Ide4chBUge2CqeYiOyVAa7dSLyM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  136816

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:2c:77:7a:04:c7:45:b3:e0:6c:81:b9:7a:c7:19:17:d0:a6:
         a1:7d:0b:47:5e:cf:33:0f:ad:dc:35:ce:dd:97:bc:e0:6a:7a:
         df:ba:76:5a:ce:48:5a:f4:ae:0a:a1:0b:95:b5:8f:f1:e5:3c:
         99:e1:a6:10:2f:73:da:4b:c9:6a:a3:e2:18:c5:c2:f2:3e:95:
         8b:93:46:c7:c5:05:b1:63:5a:47:c5:fd:ef:90:d1:8f:d0:6b:
         f0:8f:7a:a5:3b:7e:39:33:a2:f0:cf:06:f4:be:a3:26:78:e2:
         1b:0f:00:60:fe:d1:0d:f8:9a:67:9c:ae:87:69:c0:da:dc:84:
         92:05:b3:0b:cd:98:56:ba:8b:b0:b1:f5:f3:65:d7:e2:6c:1f:
         39:ef:37:1e:e3:11:05:34:36:ea:20:91:22:05:c9:df:f1:9b:
         68:da:05:dd:75:14:16:e4:44:bd:31:6a:0d:f4:a4:e8:95:ac:
         98:50:16:4c:05:68:94:36:cb:ac:11:19:ae:c1:ed:fb:49:e2:
         b5:46:84:5d:3f:62:76:66:16:47:38:87:8a:15:2c:21:89:29:
         8e:6f:7a:ea:85:75:a2:9c:d2:28:c9:75:16:53:13:3c:16:12:
         42:c8:29:d4:c4:8a:d3:a9:2f:d2:d1:ad:5e:b5:05:84:41:71:
         3e:7c:67:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 12:24:26 2024 by rpki-client on console-ams.rpki-client.org