Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.cer
File:                     LpyR9OOUpK-pdta8P2XfLZ8Hnr0.cer (raw, json)
Hash identifier:          Yn0bsKn2CvbI1rypfTWmwan7O30g1Z1eYEZPCuGTWcg=
Subject key identifier:   2E:9C:91:F4:E3:94:A4:AF:A9:76:D6:BC:3F:65:DF:2D:9F:07:9E:BD
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01AD63
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sat 01 Jul 2023 13:18:37 +0000
Certificate not after:    Sat 31 Aug 2024 00:00:00 +0000
Subordinate resources:    AS: 136165
                          IP: 103.77.224.0/24
                          IP: 103.100.107.0/24
                          IP: 103.249.70.0/23
                          IP: 2406:4b40::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 19:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109923 (0x1ad63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul  1 13:18:37 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=A9131ABD/serialNumber=2E9C91F4E394A4AFA976D6BC3F65DF2D9F079EBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6d:79:f5:a0:3c:12:e8:26:15:fb:cb:bc:ba:
                    76:49:ad:99:21:16:5f:82:93:bf:2a:bc:b2:e0:82:
                    6f:a4:9f:2c:7c:ea:e6:af:4a:0f:41:6b:a2:e5:29:
                    e7:62:3e:9b:b3:60:30:32:f7:9a:3d:98:d3:6a:76:
                    a5:1a:23:0e:66:bf:56:ef:1d:5b:ea:87:0a:eb:c7:
                    56:e1:aa:20:65:8f:70:88:6e:f0:b8:27:12:2b:96:
                    00:47:0e:bf:0e:99:46:bd:f1:8e:0b:c5:c3:02:2b:
                    8e:55:e3:60:b9:2e:4f:73:09:5e:c1:64:78:a9:91:
                    b9:8a:8d:95:e1:b0:69:38:07:d5:32:79:99:d1:e5:
                    9b:5c:89:93:4e:c6:f4:e1:c3:a7:8f:0a:89:cd:e2:
                    8c:84:e4:36:40:cf:74:72:64:29:d7:53:b4:8f:b8:
                    ce:6e:ef:85:43:3c:33:b8:11:85:c5:02:de:cb:9b:
                    f6:f7:6d:5b:6e:ce:89:97:bf:a2:d8:e7:9b:05:3a:
                    b1:b0:2b:15:55:87:ec:4f:a7:51:92:6f:35:c8:1a:
                    6e:b1:38:58:eb:0b:29:79:c5:39:5a:d7:35:27:70:
                    1a:81:34:1f:dc:dc:46:1e:89:23:8b:ea:39:19:71:
                    00:2c:6b:4a:df:41:a8:41:46:d9:66:3b:34:c5:b3:
                    74:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:9C:91:F4:E3:94:A4:AF:A9:76:D6:BC:3F:65:DF:2D:9F:07:9E:BD
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  136165

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.224.0/24
                  103.100.107.0/24
                  103.249.70.0/23
                IPv6:
                  2406:4b40::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:01:8f:6f:87:a3:e2:53:fa:d6:6e:25:b6:07:1d:93:78:4b:
         57:19:a4:66:56:85:6e:7f:a9:68:8a:08:f3:b9:a6:8b:71:0e:
         67:29:28:a4:8b:65:10:dc:91:e9:8a:0e:79:0e:1c:88:c0:40:
         06:da:6a:b4:03:2e:fa:ba:a2:ab:63:38:75:21:50:e5:26:71:
         8d:4b:70:a5:9c:2c:99:a7:fa:05:dd:85:ed:0f:58:db:dd:87:
         aa:ee:03:4d:58:51:93:5b:53:4e:8c:95:eb:de:05:76:bf:8a:
         8b:ca:eb:a8:5e:12:8e:71:79:96:e4:d5:fe:fa:d6:d2:a7:fb:
         80:40:1a:03:5e:b9:a0:60:e7:63:07:74:e4:e4:80:41:6a:0a:
         f6:4c:13:67:da:c7:a1:59:aa:c4:d2:60:a8:4b:7e:1a:43:f2:
         3d:a7:fb:14:67:d4:1e:a0:09:37:30:93:e8:fc:40:fe:c5:39:
         40:5e:a3:1d:82:03:13:b0:0c:b6:5f:7c:61:40:e7:87:60:54:
         2a:b2:03:2f:ae:fe:9a:77:00:04:80:37:22:a8:44:db:af:d5:
         f7:5e:27:e3:8c:55:27:69:51:7f:9a:ed:59:49:77:8c:d7:fd:
         95:2c:c2:82:46:07:f4:e3:ec:d4:74:d9:23:a2:f4:14:1e:32:
         90:f8:42:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 20:21:29 2024 by rpki-client on console-fra.rpki-client.org