Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LV39FidW7eBIu98_mMTBWrxfvZg.cer
File:                     LV39FidW7eBIu98_mMTBWrxfvZg.cer (raw, json)
Hash identifier:          6Yrsdd5qRZ4cVrmKAybHaQiYR66fiQU3PYF18E9q/rw=
Subject key identifier:   2D:5D:FD:16:27:56:ED:E0:48:BB:DF:3F:98:C4:C1:5A:BC:5F:BD:98
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01B3DC
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A918A626/0BF4A1FEBC9011ED96FAC680C4F9AE02/LV39FidW7eBIu98_mMTBWrxfvZg.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A918A626/0BF4A1FEBC9011ED96FAC680C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 01 Aug 2023 05:16:38 +0000
Certificate not after:    Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources:    AS: 136761
                          IP: 103.95.60.0/22
                          IP: 123.253.176.0/22
                          IP: 2403:65c0::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 05:07:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111580 (0x1b3dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug  1 05:16:38 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=A918A626/serialNumber=2D5DFD162756EDE048BBDF3F98C4C15ABC5FBD98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:53:ea:12:68:47:b6:b0:e3:60:2f:3e:79:c6:
                    c3:ea:dd:8a:35:a8:60:d5:36:f5:53:ef:3b:38:8b:
                    99:7b:42:38:0f:76:5a:cb:c6:d5:98:95:bb:19:1a:
                    ca:f4:e5:32:42:ba:84:8d:fe:ff:8b:dc:78:22:4e:
                    95:ed:d2:f5:45:34:71:43:3b:e4:a6:9d:b5:96:4e:
                    98:55:18:62:a2:1f:d1:41:18:60:33:4f:6a:9a:15:
                    71:dd:b7:8b:9d:64:d4:40:23:f3:8b:7e:9a:e8:fe:
                    dd:8b:d3:1d:b1:d2:73:81:dd:d7:e9:f5:29:b4:10:
                    ed:74:4a:e2:8e:9c:9e:4f:a1:48:ef:ca:41:5e:18:
                    80:cd:d8:b1:ff:52:0c:61:cd:75:a6:0e:52:f1:cb:
                    38:f4:77:4a:50:9c:cf:6e:53:16:f8:c4:f5:bb:18:
                    2d:83:41:7e:85:93:e2:4c:82:d4:20:ee:87:f7:56:
                    c0:a6:d1:e9:9a:51:60:9a:6c:f0:4d:11:78:7b:e2:
                    a1:98:b2:e3:55:64:82:29:03:e7:bc:dc:39:38:e5:
                    58:7b:50:2b:57:a6:15:04:52:3e:15:45:05:54:0b:
                    ae:cd:ff:bb:d7:8d:9e:54:06:7b:ee:2c:60:bd:11:
                    a5:1c:a1:a9:b9:af:5b:32:90:02:fb:df:be:50:2f:
                    98:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:5D:FD:16:27:56:ED:E0:48:BB:DF:3F:98:C4:C1:5A:BC:5F:BD:98
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918A626/0BF4A1FEBC9011ED96FAC680C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918A626/0BF4A1FEBC9011ED96FAC680C4F9AE02/LV39FidW7eBIu98_mMTBWrxfvZg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  136761

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.95.60.0/22
                  123.253.176.0/22
                IPv6:
                  2403:65c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:ce:f7:47:27:09:e0:4d:68:f5:81:69:a9:19:69:ad:51:d5:
         b6:1e:7a:f0:c5:26:8d:d7:e5:13:76:66:a9:2a:83:54:db:0a:
         42:1b:d9:c4:75:df:e3:25:a3:ef:e3:a2:32:86:bd:62:bf:a8:
         4c:76:1c:7c:33:4d:38:ad:c0:03:7f:38:4f:26:31:15:f1:32:
         ea:7b:ea:67:62:26:37:03:ff:c1:b1:25:8a:4e:7f:f6:f6:23:
         c3:83:3b:42:ce:42:21:d5:58:2e:66:87:3d:56:8c:ea:14:f2:
         73:55:bb:eb:25:83:dd:9e:ef:d9:36:bd:40:49:50:77:5f:01:
         ad:5e:bf:2c:03:84:fe:24:cd:1d:fa:6c:ef:0b:b2:9b:d0:68:
         4a:b9:79:f3:8d:d7:b4:ab:d0:05:6a:d7:07:12:05:46:b8:88:
         34:a6:16:e8:18:20:4c:84:21:38:77:a5:3e:0f:4e:f3:df:df:
         e3:10:54:b3:49:31:a5:80:43:4d:50:ee:18:1f:56:81:78:ee:
         ad:1c:88:dc:84:73:ed:99:86:d7:ae:2b:8c:c6:b4:fd:a4:34:
         41:1f:b1:c5:57:89:1c:e4:db:08:e4:04:c3:71:9c:6c:e6:0d:
         c6:9d:89:4c:58:32:e1:4a:7d:b7:12:a9:77:1f:4d:cf:87:56:
         ba:fa:6f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 05:45:12 2024 by rpki-client on console-fra.rpki-client.org