Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer
File:                     JDIOr_moILjtpZ4D5AVVxfNP78w.cer (raw, json)
Hash identifier:          o/kT9kq+2B/2FgwY2681F18ogplkcFr7OmezXhZgzzc=
Subject key identifier:   24:32:0E:AF:F9:A8:20:B8:ED:A5:9E:03:E4:05:55:C5:F3:4F:EF:CC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01B972
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 29 Aug 2023 05:38:14 +0000
Certificate not after:    Thu 31 Oct 2024 00:00:00 +0000
Subordinate resources:    AS: 17794
                          IP: 203.145.64.0/19
                          IP: 2001:df2:d200::/48
                          IP: 2407:3100::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 08:07:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113010 (0x1b972)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 29 05:38:14 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=A9164F45/serialNumber=24320EAFF9A820B8EDA59E03E40555C5F34FEFCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:88:2e:ab:0c:d8:e5:da:48:44:b1:07:68:ce:
                    04:bd:2a:77:e7:3c:2a:14:0c:15:dc:3e:22:5c:c0:
                    81:61:a3:8e:66:3c:e1:b1:ec:4c:0f:4a:04:f3:59:
                    68:50:bb:ad:3b:4b:1f:0f:67:a1:8c:af:4e:66:33:
                    41:82:dc:2e:09:3d:1e:71:61:0b:79:a8:9e:7b:15:
                    f3:ee:72:8f:08:52:ce:ee:35:9e:a0:da:31:a5:ec:
                    11:a8:fc:f2:57:7e:91:fd:5c:e8:b1:b8:34:32:18:
                    64:0f:c7:64:5a:d7:89:1e:32:5c:19:ba:10:ef:94:
                    10:c0:14:73:91:c5:8a:d1:67:e3:11:2b:ce:87:82:
                    29:8c:77:4f:a9:f7:9d:29:a0:6d:ba:e2:be:fc:f9:
                    d1:3f:77:b4:fd:aa:11:d0:9a:55:4d:05:91:b1:e4:
                    6f:b2:06:05:ac:ee:d1:c7:e9:c0:0c:9e:d6:41:0e:
                    e7:a5:75:4a:2c:25:7d:92:f5:4c:06:a6:13:f0:dd:
                    80:ac:23:43:02:bf:7c:e6:c3:60:68:ff:15:97:e5:
                    e0:75:4d:db:45:0b:93:85:ab:55:5c:cb:d3:93:43:
                    57:ae:8f:2a:e4:4e:6b:e8:69:e5:40:d3:b3:73:7f:
                    4c:94:5e:70:4f:1e:0f:85:9b:cd:d5:84:c6:5f:70:
                    ef:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:32:0E:AF:F9:A8:20:B8:ED:A5:9E:03:E4:05:55:C5:F3:4F:EF:CC
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  17794

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.145.64.0/19
                IPv6:
                  2001:df2:d200::/48
                  2407:3100::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:20:7d:1c:5d:7d:73:f8:e9:84:c2:60:c1:fa:a1:32:0b:98:
         cb:bc:4a:8f:fd:2e:c6:dd:dc:c7:68:d9:a4:0a:c8:45:cf:08:
         20:87:16:bf:67:1f:5d:32:bc:a1:89:ac:b1:b5:4e:3f:3a:bb:
         8e:fb:2e:93:fc:4c:2b:37:f8:72:4b:44:97:4b:1f:f6:6d:14:
         28:95:36:ed:c7:7d:8b:06:03:41:7f:3a:a6:f7:a2:89:35:c6:
         5c:d4:8c:63:1c:0e:96:ce:84:7a:e7:5c:b8:af:1d:35:33:6e:
         09:17:1f:bd:eb:ce:e0:a8:c2:d6:a2:5a:79:06:03:83:93:ce:
         e6:1e:f8:72:8f:d5:da:3c:70:61:2e:09:41:33:87:51:3c:4c:
         f1:17:18:4b:07:c4:e6:a0:40:2e:12:27:43:2b:19:4d:21:65:
         4b:96:ea:a9:04:ae:2d:ba:c1:2b:ad:7b:50:73:61:db:37:bd:
         fe:8b:a5:13:ed:2b:2a:79:8c:81:42:19:ed:c5:41:23:99:48:
         d9:41:25:92:ad:07:dd:45:e7:56:8d:6f:fb:72:92:a9:40:7d:
         10:18:16:2c:69:55:00:9e:2c:72:a2:42:41:f0:b0:ae:1a:3d:
         55:a2:9f:f6:cd:8b:51:f1:6d:1a:10:a4:4a:aa:c3:da:d8:da:
         7e:fe:34:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:52:28 2024 by rpki-client on console-fra.rpki-client.org