Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer
File:                     OoXUR-GGdf7VrgXJKTee761by8A.cer (raw, json)
Hash identifier:          LGJUXyuKPs+fCWS55zua/hGhgGADKNyJ2LymGxMS6/4=
Subject key identifier:   3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01C7AC
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 31 Oct 2023 22:55:37 +0000
Certificate not after:    Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 141191
                          IP: 103.156.22.0/23
                          IP: 2001:df4:f780::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Apr 2024 04:49:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116652 (0x1c7ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct 31 22:55:37 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=A91E838F/serialNumber=3A85D447E18675FED5AE05C929379EEFAD5BCBC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:3e:c2:f4:b7:58:18:5f:ed:88:00:86:68:a1:
                    8f:80:d5:af:88:5a:a5:1c:dd:58:72:1b:cb:06:a9:
                    cf:5d:b6:a1:ca:66:4d:e5:eb:77:11:a9:c7:12:1e:
                    9e:40:c8:41:4b:e6:38:43:dc:5a:8d:09:8d:a1:80:
                    7c:6f:a9:bb:23:3a:79:8e:f6:e8:d7:4c:97:82:f7:
                    dc:15:12:8b:12:ca:73:3d:16:9d:84:ca:5c:c6:f6:
                    b5:a1:78:46:e9:e0:49:41:a5:4e:f7:29:b1:76:bb:
                    83:9e:c0:ef:80:26:19:3f:a2:fc:bd:79:2b:72:52:
                    2f:9d:f6:ce:a1:c5:73:60:b6:e9:9a:e5:f3:89:e1:
                    c8:ef:03:69:50:96:6d:48:c6:a6:17:26:a2:70:99:
                    3e:8c:65:a7:25:82:e1:15:66:84:1e:d3:56:2e:44:
                    ee:c3:5f:83:5c:a2:e2:e3:7b:aa:bf:f0:9c:0e:e2:
                    1a:2e:6a:b4:f4:ab:06:f3:45:ac:88:57:7f:f9:a1:
                    2f:b3:9f:84:a4:72:22:f8:39:04:e7:57:aa:09:44:
                    6f:30:ab:54:38:51:c4:78:6f:6f:b0:04:92:fc:37:
                    12:0b:86:44:9b:1b:91:c6:43:e3:ac:a9:73:50:e2:
                    cb:d8:cc:13:6f:cc:dd:bf:70:1a:ba:2d:b8:71:e3:
                    3f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  141191

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.22.0/23
                IPv6:
                  2001:df4:f780::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:d7:b3:a9:ef:c5:04:7d:7f:3e:ab:a7:4f:d6:e7:9f:14:28:
         e8:76:bb:f0:3c:6f:30:14:02:6e:61:25:3c:5c:c0:10:16:52:
         2e:0e:e6:23:9d:3f:98:ce:89:d0:60:50:27:10:1b:40:7d:8b:
         4e:dc:34:57:d9:13:e9:be:6a:1a:b6:c2:ca:09:4a:8b:43:3f:
         9d:3c:f2:b7:2f:b0:5b:ab:32:fb:a7:77:42:5a:74:22:4f:6d:
         fc:34:22:5f:ed:48:e6:73:d7:16:df:41:37:34:e4:c6:f7:91:
         6e:b9:be:17:54:c7:ac:c4:88:a5:a2:53:6d:54:6f:6b:5e:69:
         b2:0a:36:b6:4d:f0:7b:01:36:9d:6c:30:77:1d:f9:38:08:1b:
         49:2c:cb:09:43:d5:98:05:ca:eb:13:0c:60:20:2e:7d:54:47:
         9a:11:75:70:8d:46:6d:9a:d0:b3:89:7c:c4:55:8d:9a:95:f1:
         6c:f5:44:4a:e4:b4:eb:02:3a:01:9b:64:10:a5:c4:e7:80:23:
         a4:86:2e:0f:a1:16:55:8a:90:82:e7:a6:d5:4c:6f:bf:4f:7c:
         7b:3c:60:5d:e3:4c:84:8a:18:94:e8:a9:3e:09:3f:6d:f3:a4:
         88:7f:91:1b:20:2d:be:e5:f6:0c:0b:a9:53:68:de:12:29:11:
         0e:49:03:54
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAcesMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMTAzMTIyNTUzN1oXDTI0MTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRTgzOEYxMTAvBgNVBAUTKDNBODVENDQ3RTE4Njc1RkVENUFFMDVD
OTI5Mzc5RUVGQUQ1QkNCQzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDpPsL0t1gYX+2IAIZooY+A1a+IWqUc3VhyG8sGqc9dtqHKZk3l63cRqccSHp5A
yEFL5jhD3FqNCY2hgHxvqbsjOnmO9ujXTJeC99wVEosSynM9Fp2EylzG9rWheEbp
4ElBpU73KbF2u4OewO+AJhk/ovy9eStyUi+d9s6hxXNgtuma5fOJ4cjvA2lQlm1I
xqYXJqJwmT6MZaclguEVZoQe01YuRO7DX4NcouLje6q/8JwO4houarT0qwbzRayI
V3/5oS+zn4SkciL4OQTnV6oJRG8wq1Q4UcR4b2+wBJL8NxILhkSbG5HGQ+OsqXNQ
4svYzBNvzN2/cBq6Lbhx4z9LAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUOoXUR+GG
df7VrgXJKTee761by8AwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUU4MzhGL0E5Rjc3Mzk4MDZFMTExRUI5QjMzNUM2REM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFFODM4Ri9BOUY3NzM5ODA2RTExMUVCOUIzMzVDNkRDNEY5QUUwMi9Pb1hVUi1H
R2RmN1ZyZ1hKS1RlZTc2MWJ5OEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAieHMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ5wWMA8EAgAC
MAkDBwAgAQ3094AwDQYJKoZIhvcNAQELBQADggEBAJfXs6nvxQR9fz6rp0/W558U
KOh2u/A8bzAUAm5hJTxcwBAWUi4O5iOdP5jOidBgUCcQG0B9i07cNFfZE+m+ahq2
wsoJSotDP5088rcvsFurMvund0JadCJPbfw0Il/tSOZz1xbfQTc05Mb3kW65vhdU
x6zEiKWiU21Ub2teabIKNrZN8HsBNp1sMHcd+TgIG0ksywlD1ZgFyusTDGAgLn1U
R5oRdXCNRm2a0LOJfMRVjZqV8Wz1RErktOsCOgGbZBClxOeAI6SGLg+hFlWKkILn
ptVMb79PfHs8YF3jTISKGJToqT4JP23zpIh/kRsgLb7l9gwLqVNo3hIpEQ5JA1Q=
-----END CERTIFICATE-----
Generated at Fri Mar 29 06:02:17 2024 by rpki-client on console-fra.rpki-client.org