Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtRvG-qXII_SIgxMa_x5BhDEXL4.cer
File:                     NtRvG-qXII_SIgxMa_x5BhDEXL4.cer (raw, json)
Hash identifier:          Y5nEs0H+yHJbdp3iYuzMHsbQJrJp7PuOR5Sysd1qX8k=
Subject key identifier:   36:D4:6F:1B:EA:97:20:8F:D2:22:0C:4C:6B:FC:79:06:10:C4:5C:BE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01D56A
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A918067C/99FB609401D011ED9540BB35C4F9AE02/NtRvG-qXII_SIgxMa_x5BhDEXL4.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A918067C/99FB609401D011ED9540BB35C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sun 31 Dec 2023 18:54:05 +0000
Certificate not after:    Wed 01 May 2024 00:00:00 +0000
Subordinate resources:    AS: 59216
                          IP: 103.243.68.0/22
                          IP: 2001:df4:d000::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Apr 2024 02:50:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120170 (0x1d56a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec 31 18:54:05 2023 GMT
            Not After : May  1 00:00:00 2024 GMT
        Subject: CN=A918067C/serialNumber=36D46F1BEA97208FD2220C4C6BFC790610C45CBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:fa:cc:dc:ed:76:7c:a3:3a:d5:4e:4d:9f:7c:
                    fc:36:3b:5f:1e:22:cc:5b:a0:e6:39:aa:f1:0e:4c:
                    d8:37:aa:28:1f:89:a6:21:c7:72:df:47:cb:1a:4d:
                    d5:f8:0e:34:93:03:59:1e:33:49:0c:ce:26:ff:ca:
                    79:f8:3a:e1:a1:dd:f6:70:a2:de:49:83:a5:8b:bc:
                    b7:8b:c3:13:8d:d8:15:15:69:a4:cc:02:1a:1b:c5:
                    31:e4:fc:e0:b8:58:c7:7b:4e:23:19:89:f5:89:f3:
                    82:7b:c7:e6:f3:59:02:51:23:12:76:05:c4:c0:b0:
                    e8:84:5c:c2:80:f6:fa:15:73:d6:5e:ce:2f:ce:88:
                    c5:d8:a7:70:ea:31:df:2d:6d:70:9a:33:3d:57:e3:
                    4b:a6:97:6d:1e:b8:0d:b2:5c:ba:2d:af:3d:0b:3e:
                    66:48:80:f1:5d:03:e6:ba:ed:20:d0:9b:d2:10:1e:
                    6a:ea:f3:37:78:b8:93:0b:d3:e4:15:de:f9:82:6c:
                    68:2c:6e:ec:f4:75:0f:21:5c:5f:97:1f:73:f5:32:
                    12:6e:c2:fa:43:78:2e:e3:2e:63:7f:99:78:10:2b:
                    6b:b1:47:1a:1f:a6:85:f8:a9:d4:87:d4:62:29:02:
                    04:9c:49:4e:04:24:b5:52:1c:4e:1a:1d:e9:dc:38:
                    c0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D4:6F:1B:EA:97:20:8F:D2:22:0C:4C:6B:FC:79:06:10:C4:5C:BE
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918067C/99FB609401D011ED9540BB35C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918067C/99FB609401D011ED9540BB35C4F9AE02/NtRvG-qXII_SIgxMa_x5BhDEXL4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59216

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.243.68.0/22
                IPv6:
                  2001:df4:d000::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:a5:5b:35:f9:ef:5f:3c:1e:ca:1c:00:b8:7d:7c:62:ac:88:
         18:2a:89:28:17:70:d3:c6:94:3d:3f:a8:b6:5e:a4:45:19:89:
         3a:cb:7b:97:b2:2d:33:25:36:1a:34:c3:2e:fa:9f:47:3d:71:
         9a:28:e7:8f:d2:56:c4:e6:17:07:6c:0f:d4:3a:23:0a:db:78:
         41:e0:ab:7d:4b:fc:82:27:50:1d:ba:02:b3:15:6b:f4:d2:0d:
         d8:c9:1d:b2:b2:4b:29:b5:c0:c2:db:ca:cd:61:75:71:bf:b7:
         b5:c0:12:d7:3f:8f:eb:2a:e3:05:56:19:d7:5c:eb:fe:e8:b3:
         d4:cb:85:ba:06:0c:59:73:84:53:10:50:c7:4f:9e:35:a8:b0:
         5e:94:2a:d8:a4:af:b7:d6:0f:c6:9e:6b:56:13:5f:18:d0:b8:
         00:7a:94:03:d9:cf:f3:b9:0d:c3:e3:6e:0d:1d:12:51:18:09:
         8d:2e:07:0c:c0:eb:a7:4c:2e:cf:89:85:c2:02:f1:41:e5:3c:
         f2:ea:b0:43:15:71:9a:7d:91:7d:2f:8a:96:06:87:c1:a8:7b:
         ef:65:b4:66:4a:15:2d:e5:51:93:01:65:cc:94:99:51:d7:b6:
         5b:5f:bd:9f:58:70:13:5a:56:77:cb:5a:b2:01:d6:f2:7c:d9:
         72:26:11:e9
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAdVqMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMTIzMTE4NTQwNVoXDTI0MDUwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxODA2N0MxMTAvBgNVBAUTKDM2RDQ2RjFCRUE5NzIwOEZEMjIyMEM0
QzZCRkM3OTA2MTBDNDVDQkUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDQ+szc7XZ8ozrVTk2ffPw2O18eIsxboOY5qvEOTNg3qigfiaYhx3LfR8saTdX4
DjSTA1keM0kMzib/ynn4OuGh3fZwot5Jg6WLvLeLwxON2BUVaaTMAhobxTHk/OC4
WMd7TiMZifWJ84J7x+bzWQJRIxJ2BcTAsOiEXMKA9voVc9Zezi/OiMXYp3DqMd8t
bXCaMz1X40uml20euA2yXLotrz0LPmZIgPFdA+a67SDQm9IQHmrq8zd4uJML0+QV
3vmCbGgsbuz0dQ8hXF+XH3P1MhJuwvpDeC7jLmN/mXgQK2uxRxofpoX4qdSH1GIp
AgScSU4EJLVSHE4aHencOMDjAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUNtRvG+qX
II/SIgxMa/x5BhDEXL4wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTgwNjdDLzk5RkI2MDk0MDFEMDExRUQ5NTQwQkIzNUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE4MDY3Qy85OUZCNjA5NDAxRDAxMUVEOTU0MEJCMzVDNEY5QUUwMi9OdFJ2Ry1x
WElJX1NJZ3hNYV94NUJoREVYTDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAOdQMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCZ/NEMA8EAgAC
MAkDBwAgAQ300AAwDQYJKoZIhvcNAQELBQADggEBABylWzX57188HsocALh9fGKs
iBgqiSgXcNPGlD0/qLZepEUZiTrLe5eyLTMlNho0wy76n0c9cZoo54/SVsTmFwds
D9Q6IwrbeEHgq31L/IInUB26ArMVa/TSDdjJHbKySym1wMLbys1hdXG/t7XAEtc/
j+sq4wVWGddc6/7os9TLhboGDFlzhFMQUMdPnjWosF6UKtikr7fWD8aea1YTXxjQ
uAB6lAPZz/O5DcPjbg0dElEYCY0uBwzA66dMLs+JhcIC8UHlPPLqsEMVcZp9kX0v
ipYGh8Goe+9ltGZKFS3lUZMBZcyUmVHXtltfvZ9YcBNaVnfLWrIB1vJ82XImEek=
-----END CERTIFICATE-----
Generated at Fri Mar 29 03:25:29 2024 by rpki-client on console-ams.rpki-client.org