Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NiYRUXhEnXmaQNWJ4-1qHCQZ6SU.cer
File:                     NiYRUXhEnXmaQNWJ4-1qHCQZ6SU.cer (raw, json)
Hash identifier:          1afcMSgG1Vrm6AsG3rlZY5gcXLpgcP9AEJs1FTdkKxc=
Subject key identifier:   36:26:11:51:78:44:9D:79:9A:40:D5:89:E3:ED:6A:1C:24:19:E9:25
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01B5EB
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91B8274/1559789236AB11EE9C890A6FC4F9AE02/NiYRUXhEnXmaQNWJ4-1qHCQZ6SU.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91B8274/1559789236AB11EE9C890A6FC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 09 Aug 2023 11:51:38 +0000
Certificate not after:    Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources:    AS: 151395
                          IP: 103.213.252.0/23
                          IP: 2401:6a0::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 10:14:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112107 (0x1b5eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug  9 11:51:38 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=A91B8274/serialNumber=3626115178449D799A40D589E3ED6A1C2419E925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:1b:49:08:a6:f1:91:29:2f:ee:0b:e8:65:88:
                    e6:78:0c:26:8f:49:50:f2:b3:38:0e:b3:da:23:14:
                    ac:c8:5a:0b:0d:18:4f:93:d0:7a:b2:a1:79:7f:29:
                    4e:a1:ec:16:fa:1d:61:65:49:e0:43:25:5e:69:73:
                    44:06:09:1c:12:b2:07:62:8a:c3:60:45:32:38:76:
                    c5:eb:60:d7:43:cf:eb:0a:fc:2a:9b:4e:6e:49:04:
                    67:5c:ca:71:16:cd:25:56:c5:b4:2c:91:be:77:8f:
                    42:6d:19:fa:9b:ab:d6:84:43:65:dc:45:9a:8a:22:
                    25:b3:75:56:a3:ea:31:0f:05:13:81:98:5d:f5:43:
                    52:c7:38:60:58:e1:fc:51:5b:37:00:4a:6a:47:63:
                    7f:07:15:84:58:99:85:15:d5:d0:63:a0:ed:b5:63:
                    53:a5:a5:eb:e1:75:14:ba:0c:3b:d9:7a:7b:45:69:
                    6a:0f:a6:69:c7:65:85:d0:42:48:b6:96:54:66:23:
                    32:48:13:d2:6f:a1:8d:de:ed:81:1d:02:73:39:45:
                    12:8a:ef:68:60:08:e6:6a:76:be:00:56:61:8d:d3:
                    07:c6:5e:21:96:57:24:4d:dd:05:ad:62:e0:25:31:
                    57:08:ad:b4:c6:e9:8c:16:1d:76:d9:e4:a1:fc:55:
                    b3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:26:11:51:78:44:9D:79:9A:40:D5:89:E3:ED:6A:1C:24:19:E9:25
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B8274/1559789236AB11EE9C890A6FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B8274/1559789236AB11EE9C890A6FC4F9AE02/NiYRUXhEnXmaQNWJ4-1qHCQZ6SU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  151395

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.213.252.0/23
                IPv6:
                  2401:6a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:be:e6:66:a8:f9:15:6d:57:f8:d6:1c:e1:26:b9:45:02:cd:
         82:ee:c4:98:1a:95:74:1e:43:a3:62:6b:e7:37:c9:7a:57:0e:
         85:01:ac:2b:53:b9:96:3c:47:9e:46:07:32:a0:50:88:ae:c0:
         57:4c:20:b4:7b:e6:68:ac:d1:ed:74:d1:83:df:10:14:ef:33:
         a1:6e:42:57:89:78:93:8f:a6:87:de:c1:cb:49:c9:ac:57:e6:
         24:81:82:d3:01:c6:63:1e:7a:72:f3:7a:13:aa:83:d5:f1:1c:
         12:e1:b8:ed:2a:38:81:5e:bb:79:5f:dc:39:e1:16:e7:83:e0:
         55:82:94:6b:8e:4f:11:5f:3a:a8:38:05:b9:98:78:11:b0:a2:
         bf:bf:a2:e5:f3:98:de:92:55:62:01:44:c1:8e:e0:9b:4b:30:
         b9:63:52:90:e9:dd:55:93:f3:1b:c3:ac:f0:39:3b:b2:e3:00:
         16:42:18:18:8e:77:70:da:1e:4a:91:84:d2:a5:f8:20:cc:2c:
         a6:b5:7f:75:a3:d8:35:37:0b:00:b3:33:d1:3d:2e:f9:d3:e6:
         92:b5:45:fd:4a:96:c9:6f:3e:b4:93:c3:fe:6a:55:9c:ed:75:
         87:26:a6:f4:16:c0:d0:ec:d2:a3:d2:f7:6d:e1:76:42:8c:1e:
         ab:ab:4b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 12:24:29 2024 by rpki-client on console-ams.rpki-client.org