Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.cer
File:                     LhZNtFuEa7rmjCd9Q_iC9kCSKB4.cer (raw, json)
Hash identifier:          ibzpM5iZmBYE/Gt9p9XYtKWzg5DbjcleQGdbS5fXbiM=
Subject key identifier:   2E:16:4D:B4:5B:84:6B:BA:E6:8C:27:7D:43:F8:82:F6:40:92:28:1E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01C327
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 10 Oct 2023 16:49:07 +0000
Certificate not after:    Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 135138
                          AS: 136956
                          IP: 103.210.132.0/22
                          IP: 2401:b840::/32
                          IP: 2404:6e80::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 03:41:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115495 (0x1c327)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct 10 16:49:07 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=A91A9467/serialNumber=2E164DB45B846BBAE68C277D43F882F64092281E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fe:89:f9:69:5c:19:9a:c9:cb:77:01:41:09:
                    7d:28:e4:5a:72:b0:dc:db:12:91:4f:19:1d:62:35:
                    d1:31:95:7d:d9:68:a3:16:8f:d4:dc:fc:03:4d:bc:
                    ff:6d:37:0d:4a:2b:5a:67:89:50:9f:f3:e8:0f:f1:
                    a2:e9:ea:20:a6:f0:e6:6b:40:a5:2a:2c:1c:26:3c:
                    97:9d:3a:cb:7d:ab:46:30:12:fd:5a:cd:2c:73:52:
                    6e:ff:32:81:95:70:62:06:4b:d4:5f:f9:23:7a:0b:
                    ae:32:59:f6:db:51:79:4d:27:5e:f8:ca:06:1e:6a:
                    72:2c:67:41:18:1a:ca:56:10:ee:cc:87:44:28:54:
                    5c:26:32:9b:42:3c:9c:32:82:c7:40:56:1b:b9:00:
                    a1:0e:27:b6:fe:17:1c:d6:31:5a:55:55:24:64:dd:
                    81:c7:3b:1e:c2:d3:34:25:de:d5:43:67:b6:5f:42:
                    0b:d2:6f:c0:ec:cb:a1:85:b2:37:e4:68:88:01:6a:
                    cb:91:46:ce:c0:4e:23:4a:16:1c:67:f6:73:38:9b:
                    6a:5a:f4:e1:13:ec:2f:60:5f:87:0f:ca:c3:db:15:
                    04:80:ea:cd:d6:37:5a:f7:a9:16:07:ec:22:4d:8b:
                    41:18:12:06:9d:e4:b9:01:24:ee:c7:9d:c8:77:fd:
                    d2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:16:4D:B4:5B:84:6B:BA:E6:8C:27:7D:43:F8:82:F6:40:92:28:1E
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  135138
                  136956

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.210.132.0/22
                IPv6:
                  2401:b840::/32
                  2404:6e80::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:93:2d:03:96:58:2a:f7:83:40:c6:bd:21:01:0b:3d:7f:af:
         f9:e2:70:51:09:0f:b2:08:b4:78:f4:91:9b:58:3c:b1:f2:01:
         b0:4a:0f:13:eb:18:e7:36:98:c7:af:cc:84:52:35:05:7e:3d:
         05:5c:8a:06:03:49:1d:85:eb:fd:cf:a2:c2:49:e0:34:24:99:
         b8:06:f9:b4:d5:36:92:11:f5:c6:d4:e3:5c:9a:b3:ae:26:be:
         2d:e1:50:47:cf:5b:91:c4:c5:d3:b6:52:5b:ac:3c:d4:2a:f7:
         59:9b:fd:ab:80:34:2d:88:12:0d:1b:08:c5:a1:99:60:b5:e3:
         6d:ff:24:19:7e:46:11:8b:bd:52:18:0c:ec:57:ba:10:49:8c:
         07:1a:99:54:19:e0:11:7d:54:d5:87:71:fa:66:54:6c:ec:49:
         98:1a:83:99:6a:8f:e4:84:b6:b4:9f:8b:14:a5:5f:f1:00:1a:
         1c:4f:e8:a1:b5:36:7c:51:9c:62:e5:73:3d:fa:94:20:99:dd:
         46:a7:1e:23:4e:f6:d0:d4:9d:36:20:f3:ef:0c:1b:7d:97:22:
         75:e0:7e:cb:77:99:1a:9d:ee:fe:e2:62:18:2c:9f:fa:9d:61:
         e1:00:7c:c8:5d:69:c3:3d:00:a9:d6:78:4b:0c:36:fa:69:29:
         28:29:55:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 06:09:28 2024 by rpki-client on console-ams.rpki-client.org