Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer
File:                     JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer (raw, json)
Hash identifier:          +MUMkAqMy9IdU80iqHjf4QBH8bOvVV7HzlCNsAPoMk8=
Subject key identifier:   25:21:ED:A4:6C:D7:0B:83:97:26:06:D3:0D:88:0D:70:34:95:B8:B3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01B006
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 13 Jul 2023 16:03:36 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 137532
                          IP: 103.112.64.0/23
                          IP: 2405:e6c0::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Apr 2024 13:06:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110598 (0x1b006)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 13 16:03:36 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=A9185B41/serialNumber=2521EDA46CD70B83972606D30D880D703495B8B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7e:50:24:c4:da:58:5c:37:56:97:60:b6:98:
                    bf:05:06:ea:e7:a7:59:e6:4e:47:a4:6f:60:1b:ef:
                    d2:32:bf:75:67:ba:7f:04:e1:0f:c8:58:59:73:3b:
                    c6:c4:0f:ed:36:9a:44:03:d4:03:5e:d5:2f:6c:09:
                    76:d4:86:83:e4:2a:37:89:f8:50:d0:53:01:61:d8:
                    81:67:16:f2:64:7f:ad:cd:aa:4d:2c:0c:24:98:ba:
                    25:65:b9:60:f4:fe:c9:0d:3e:2d:fd:ca:9a:97:49:
                    f4:42:a9:26:3e:ca:69:25:f2:17:2e:d4:ef:49:63:
                    33:e3:58:54:40:67:30:14:c6:7a:84:f8:2a:7e:ac:
                    71:d7:05:8a:4b:49:bb:04:5a:5e:84:fb:b1:8a:40:
                    f4:bc:00:a3:eb:f2:be:01:5d:ce:8b:ca:f8:7b:05:
                    3c:b6:63:d9:2d:7a:7e:44:3e:e0:17:5f:ff:6c:d0:
                    97:af:ed:e6:7b:05:f2:0d:35:91:ef:de:84:94:84:
                    ea:1d:c5:a6:06:9f:44:cd:0b:d3:b1:94:2f:2a:59:
                    1f:78:0f:64:fa:e7:6a:33:3c:8f:88:ad:1c:02:a0:
                    cb:72:78:4f:d6:59:d6:ee:02:b2:d5:1c:82:87:66:
                    f1:2d:c6:81:0e:f3:1f:01:2f:fe:c9:28:91:5e:ba:
                    d7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:21:ED:A4:6C:D7:0B:83:97:26:06:D3:0D:88:0D:70:34:95:B8:B3
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137532

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.64.0/23
                IPv6:
                  2405:e6c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:48:4f:9d:53:58:0f:87:75:70:3a:e4:75:41:13:e4:00:35:
         f9:df:c1:3f:ed:29:a8:fc:db:09:cc:96:aa:25:fd:27:bf:8d:
         c4:ec:c8:27:b5:80:84:e1:d9:e8:5d:ef:2a:c3:1c:03:fd:57:
         cf:b8:8a:bf:a1:dc:32:b7:cb:61:e6:1f:42:92:53:b7:dd:67:
         b8:a0:8f:6b:bc:7a:db:82:07:76:4a:b8:10:b4:dc:83:47:69:
         cf:65:17:cc:e4:ce:0d:4c:40:df:8f:66:10:19:4e:6d:e3:ba:
         1f:d1:79:c7:24:09:e5:50:46:8d:a6:b9:4a:f5:14:78:bd:34:
         b5:6a:5f:90:67:b7:19:f8:0b:db:79:16:ff:33:9f:aa:78:b1:
         5b:d8:dd:81:d6:a8:91:34:ff:ad:09:a9:aa:6a:27:9c:7c:14:
         d9:36:cc:8f:80:d6:b5:0d:13:6b:55:50:cb:4e:7e:95:92:1e:
         c2:b6:94:0e:4e:e8:e8:80:38:d3:26:bd:70:0e:54:1f:cc:d0:
         21:11:62:5a:10:33:31:2d:fe:ed:4b:6c:23:d6:dd:b8:06:6d:
         67:57:09:7f:9a:8f:35:1f:a4:44:d0:56:09:fa:72:96:47:19:
         e2:2e:cf:93:92:82:04:52:bc:d5:55:2c:9d:d9:12:f6:99:e7:
         97:51:48:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 14:07:45 2024 by rpki-client on console-fra.rpki-client.org