Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.cer
File:                     JNqiT1j8PCaAZ-Wv5J-u9VeewGk.cer (raw, json)
Hash identifier:          9+aUtjhzKflpNUxx7E3V3GFHhnBU15kSr6GZgYl/vGg=
Subject key identifier:   24:DA:A2:4F:58:FC:3C:26:80:67:E5:AF:E4:9F:AE:F5:57:9E:C0:69
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01E376
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 07 Mar 2024 21:39:39 +0000
Certificate not after:    Wed 28 May 2025 00:00:00 +0000
Subordinate resources:    AS: 141740
                          IP: 103.163.50.0/23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Apr 2024 06:56:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123766 (0x1e376)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Mar  7 21:39:39 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=A91DD34D/serialNumber=24DAA24F58FC3C268067E5AFE49FAEF5579EC069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6e:64:88:4b:eb:4e:91:d3:82:e9:45:4a:cb:
                    93:4c:c0:37:ce:b8:3c:4c:78:d4:1b:ed:e6:ea:5d:
                    0a:bd:d5:e7:42:44:40:80:39:38:9a:ed:dd:48:d1:
                    a6:b5:17:8c:cd:88:c4:ff:de:2e:a9:a7:2a:61:10:
                    86:5f:5e:68:a5:bc:c5:cf:49:12:1d:15:ff:a0:cc:
                    bc:28:43:b6:c2:f1:50:3c:84:10:82:de:5c:3d:6b:
                    3d:e3:4c:56:78:ac:a9:18:61:76:f8:09:9e:c6:ce:
                    f3:9f:bd:0a:94:0b:4d:ff:f1:3b:a9:58:8e:8e:b0:
                    51:96:07:33:86:b6:9e:6e:10:c1:2e:bd:8c:4f:91:
                    b7:b7:57:12:e1:28:2e:db:b8:ce:24:a9:74:9e:33:
                    26:93:06:f8:fe:8a:b0:42:af:cc:1b:cf:09:20:f8:
                    f9:ed:51:fd:67:01:d8:4a:01:05:4c:21:aa:16:49:
                    a6:cb:f0:80:4e:bf:e7:8b:11:d5:ee:f0:25:b0:ae:
                    da:d3:fa:1b:18:6c:cc:3c:29:88:ae:f3:64:f2:da:
                    44:0d:8c:35:06:82:52:36:92:ce:9c:38:db:42:40:
                    df:79:a1:79:2c:6a:b1:de:2d:b9:11:39:2f:a1:ab:
                    7c:0e:17:83:f7:47:6a:08:2c:42:fe:2c:78:75:74:
                    9e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:DA:A2:4F:58:FC:3C:26:80:67:E5:AF:E4:9F:AE:F5:57:9E:C0:69
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  141740

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:ed:7e:f6:47:7c:42:18:c7:84:9b:bf:fe:30:55:7a:b2:22:
         09:db:b4:3d:9c:fa:b9:05:09:a1:31:9f:0b:31:29:c5:49:50:
         58:8a:3d:dd:59:2a:bc:3f:78:b2:ef:18:d7:e2:da:7e:cd:bb:
         9a:0a:58:94:41:d5:04:99:2b:77:07:84:5e:34:a2:4c:59:f9:
         54:33:46:3e:14:08:33:6d:67:b5:55:ba:43:16:90:39:56:2a:
         9a:0d:d0:fc:97:b8:85:ba:7e:de:12:74:e7:0d:f7:f4:41:00:
         09:7e:50:ad:e8:ab:1f:b9:2d:b2:9e:59:39:6c:14:39:6a:43:
         8d:3a:20:82:a5:51:10:b9:e5:28:26:e9:b6:4b:f5:cd:83:e7:
         b1:1f:a9:76:c9:3a:19:02:c2:d9:d5:24:af:20:e6:8e:bb:9f:
         d5:5c:6c:2e:ec:a8:5b:ad:aa:83:47:d0:88:11:5c:a3:29:09:
         ea:2b:15:40:cd:e0:2e:a4:68:63:a2:41:78:26:8d:13:fd:f2:
         c0:77:1b:69:2b:38:44:2a:99:dc:12:15:c4:28:d7:eb:ad:52:
         2d:1f:b3:4e:11:54:41:b4:7d:e3:e5:ac:9a:0c:ad:77:a2:79:
         bf:c4:51:8c:1d:13:e3:57:3a:30:24:5b:35:55:c6:ed:14:7c:
         31:2a:ec:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 08:40:26 2024 by rpki-client on console-fra.rpki-client.org