Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer
File:                     MOCAPeumAKyakmRMlveKjohdfFA.cer (raw, json)
Hash identifier:          LoswCd5lfxOmGXwWAG3dZjGB6N1Q6+rhod0HjgMJVsY=
Subject key identifier:   30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01C63C
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 26 Oct 2023 16:32:41 +0000
Certificate not after:    Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 135567
                          IP: 103.123.112.0/22
                          IP: 2403:a0c0::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 03:41:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116284 (0x1c63c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct 26 16:32:41 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=A917CEE3/serialNumber=30E0803DEBA600AC9A92644C96F78A8E885D7C50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1a:1d:db:fc:b4:6b:87:0d:a2:16:1f:ef:e7:
                    93:ee:8f:28:21:48:a4:a2:1f:9c:20:58:77:02:53:
                    a7:e3:59:76:47:aa:32:d8:b2:ab:c1:d6:e1:32:fd:
                    66:8d:75:40:93:d2:1d:4f:5f:1c:b5:45:ec:30:27:
                    45:3c:44:e6:73:66:a3:1c:11:aa:2a:83:86:5c:87:
                    4b:0d:69:52:a6:2e:ad:d5:a7:af:41:95:a5:c7:ba:
                    c3:2c:29:33:53:30:18:66:b9:d7:47:8f:bf:92:e7:
                    8f:67:39:ee:fe:a6:f3:d4:90:13:f1:f7:70:b4:30:
                    85:01:d4:0e:b0:70:c5:70:9e:e3:18:a5:39:b3:61:
                    4d:5a:b5:3c:11:e9:9d:6d:60:d6:66:d6:15:67:a0:
                    cb:c4:0c:e1:1f:41:98:f5:e4:51:d5:a3:f9:47:51:
                    b2:ce:ae:d6:48:ad:d6:7f:cf:35:54:50:b7:f7:59:
                    39:4a:f3:38:54:72:97:70:d8:08:ec:13:54:7c:0b:
                    fb:29:31:50:54:02:24:fd:19:ee:d8:15:19:54:d9:
                    b5:90:af:09:57:a5:e2:45:f2:d7:7e:76:da:f2:38:
                    1f:6b:ef:52:cb:7c:20:11:3c:2b:7c:0a:a7:e8:f1:
                    97:c1:49:62:18:5e:be:d2:24:55:b7:66:01:92:fa:
                    8a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  135567

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.112.0/22
                IPv6:
                  2403:a0c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:b9:84:1d:e5:62:91:82:4b:03:98:f6:17:1a:53:ca:4f:90:
         d9:9a:ad:b1:3b:54:e6:24:ac:84:a8:bf:af:fc:a4:0c:2a:0e:
         79:a1:c1:2e:aa:8e:fd:de:72:9c:62:15:7f:99:67:35:b1:69:
         5c:b0:8d:1c:4c:b9:70:e5:ca:c5:36:49:22:a9:55:f2:88:01:
         2c:53:4f:6c:fc:53:16:ab:76:11:17:59:17:af:ec:a1:8c:d3:
         1d:44:a6:d5:32:e2:75:7a:ba:f8:5e:ac:c3:44:4a:27:fb:17:
         fa:53:3f:4f:26:ab:f2:2d:d0:48:ca:4c:79:cb:7a:58:94:fa:
         d6:d7:89:bc:4a:a6:a8:da:8f:4d:1c:da:7a:58:b3:f3:3e:d5:
         1b:9c:31:8b:83:5b:a3:47:a1:3a:99:dc:f8:cc:df:a5:22:7c:
         76:9e:0e:07:4d:1e:70:2d:b0:f1:36:b6:4d:ac:75:1b:fd:71:
         1b:86:d0:51:3e:66:9a:f1:86:e5:e2:fc:58:60:59:7c:2a:92:
         17:b0:1b:b4:cf:e6:eb:4e:ab:b9:d2:b1:d0:5e:82:aa:e6:4f:
         d8:27:47:23:ab:5d:96:63:e1:8b:dc:a1:0e:f1:3b:23:b3:f3:
         ba:90:1d:46:95:3c:32:67:ac:05:d1:4c:30:33:78:f5:a6:b7:
         19:56:c7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 06:09:28 2024 by rpki-client on console-ams.rpki-client.org