Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVqV8tpLHxxwxkYlGfxvWJRfyrk.cer
File:                     LVqV8tpLHxxwxkYlGfxvWJRfyrk.cer (raw, json)
Hash identifier:          iLBYWqNiRVbIoDvpw28E34IZ2uQ1rx2giLZIesSOfG0=
Subject key identifier:   2D:5A:95:F2:DA:4B:1F:1C:70:C6:46:25:19:FC:6F:58:94:5F:CA:B9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01C187
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/LVqV8tpLHxxwxkYlGfxvWJRfyrk.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 02 Oct 2023 19:32:45 +0000
Certificate not after:    Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 58427
                          IP: 103.5.172.0/22
                          IP: 2402:4e40::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 07:49:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115079 (0x1c187)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct  2 19:32:45 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=A913BC05/serialNumber=2D5A95F2DA4B1F1C70C6462519FC6F58945FCAB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f3:d8:35:4d:d8:5b:0b:30:29:ed:bf:47:00:
                    4e:be:a3:b3:4b:f1:2f:14:ec:79:82:35:4d:2c:32:
                    b6:0a:f2:63:84:37:3e:40:33:b9:21:ca:fe:fc:3b:
                    97:0c:91:59:3b:24:f8:d3:ed:c8:ea:5f:d0:0f:3a:
                    8e:66:96:25:75:4e:06:be:e4:ab:c7:67:60:c2:96:
                    63:b9:2a:01:0e:d8:26:a5:dd:50:1c:99:dd:7b:2e:
                    d4:6e:ba:83:0f:7f:97:76:3f:09:14:50:98:41:b5:
                    21:86:03:ce:11:5f:ca:d1:44:7d:79:a7:38:6a:af:
                    39:5c:f8:2c:23:69:28:3a:a5:8d:3a:9f:6c:bf:e4:
                    fb:70:5a:bc:06:b3:39:d1:59:b2:94:92:06:66:44:
                    25:c1:1f:38:c6:45:6f:22:d6:d4:c7:99:a9:89:bf:
                    23:ce:4b:e8:29:c8:37:f3:68:51:2a:a2:9d:0c:db:
                    79:0d:88:85:2a:6b:d1:4c:9f:02:d3:a2:06:ac:a6:
                    86:49:de:55:f7:95:4b:47:e4:1b:90:c0:6a:10:9c:
                    d9:cd:c0:35:67:3a:ac:a5:d1:fb:5f:85:0f:95:f2:
                    15:9e:51:91:52:4b:d8:b0:cd:d7:8f:7e:cc:33:d6:
                    9b:ab:1e:3f:2e:74:d9:15:b2:52:f4:c1:e3:2c:60:
                    47:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:5A:95:F2:DA:4B:1F:1C:70:C6:46:25:19:FC:6F:58:94:5F:CA:B9
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/LVqV8tpLHxxwxkYlGfxvWJRfyrk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58427

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.172.0/22
                IPv6:
                  2402:4e40::/32

    Signature Algorithm: sha256WithRSAEncryption
         ce:14:dc:84:cd:69:21:26:81:09:a0:b6:5e:df:b8:27:f8:ba:
         44:a8:6c:c1:ef:e3:1c:9e:e0:96:02:ac:66:5d:ae:a2:6f:ed:
         e0:c7:1b:07:64:d9:3f:9a:cf:f8:6c:75:74:41:a7:39:51:41:
         78:c4:da:3b:41:7d:7b:b6:22:d9:a2:6e:cc:ba:61:9e:60:57:
         67:c4:a4:29:01:de:7c:00:26:96:19:c5:b3:6d:ae:28:bd:04:
         8e:88:6f:5b:e0:35:ae:6f:a1:3c:22:18:b8:fd:7d:02:d7:0f:
         e9:c4:e2:8d:11:2c:e0:ff:13:56:9f:97:4c:8e:fa:61:81:5a:
         63:81:1d:33:f2:2b:37:78:58:ca:b9:e8:6d:b8:77:45:42:4c:
         7b:c2:b3:b3:bd:d5:ac:bd:1a:26:80:39:c5:ea:e2:38:8f:95:
         de:5e:5c:b0:9c:40:fb:38:6b:d1:be:0c:37:8d:c3:36:e5:68:
         05:42:1a:34:a2:a9:5c:95:da:6e:23:fd:9c:7a:10:3f:1e:13:
         fc:a7:57:a6:8d:f4:a4:0f:dc:c2:48:0f:a6:cd:62:52:46:38:
         10:a1:6f:fb:d8:f4:42:83:21:b6:fd:69:c2:f0:d4:88:e8:65:
         b1:6e:a5:6f:b9:6a:dd:08:bb:30:37:01:6f:d3:25:1e:88:bf:
         a6:88:ce:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:02:52 2024 by rpki-client on console-ams.rpki-client.org