Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer
File:                     OopqLuXcCfyqgv8BjwnBr4S0EZY.cer (raw, json)
Hash identifier:          DOj+BPTe6SgOo4u+Mx3VphVKGlJKg0YLpJiqz1oESSs=
Subject key identifier:   3A:8A:6A:2E:E5:DC:09:FC:AA:82:FF:01:8F:09:C1:AF:84:B4:11:96
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01A724
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 01 Jun 2023 08:24:51 +0000
Certificate not after:    Tue 30 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 149777
                          IP: 103.186.50.0/23
                          IP: 2400:6e20::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Apr 2024 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108324 (0x1a724)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun  1 08:24:51 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=A91CCCDD/serialNumber=3A8A6A2EE5DC09FCAA82FF018F09C1AF84B41196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c0:a3:80:d7:99:a1:ee:46:70:47:8d:e2:cf:
                    1b:3a:62:ab:38:90:c5:5f:dd:4f:02:b2:22:ed:4f:
                    54:ce:f3:42:8f:0c:ce:dc:09:e2:c5:7f:3b:ee:48:
                    44:b3:0f:d5:2b:4d:65:75:6d:27:53:3d:03:fb:d7:
                    a7:c8:0b:48:93:5b:c8:11:e9:36:3f:26:d0:38:fb:
                    6b:09:cb:b7:4b:b6:88:42:1e:e4:bb:f8:f1:bf:9b:
                    5f:66:e1:de:fe:31:ea:97:df:36:3a:02:d7:ec:cf:
                    5a:f3:8b:9c:1e:18:44:38:c4:7a:11:ad:5a:22:e4:
                    c7:a9:ee:df:f0:58:22:6f:0f:9c:7c:f0:6b:f0:ee:
                    fc:ab:32:fa:9a:66:ed:e5:4a:a4:d4:7b:78:6b:22:
                    db:98:2f:c9:ae:27:78:0f:e0:5e:db:73:78:70:42:
                    7f:a8:11:b4:6e:bd:87:fe:8f:85:3d:9f:4e:89:33:
                    9d:29:77:80:6a:fe:02:5e:7c:e5:56:74:00:87:02:
                    73:50:b1:6a:29:6b:d4:2a:4f:5b:11:e4:05:b9:8b:
                    b8:7c:ea:85:6f:ea:48:e7:61:90:42:21:43:6d:c0:
                    cc:72:e6:e6:c7:4c:b3:5c:d6:fd:19:be:79:eb:31:
                    26:f7:c8:a9:57:24:fe:2b:72:2a:95:c3:6d:25:a3:
                    17:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:8A:6A:2E:E5:DC:09:FC:AA:82:FF:01:8F:09:C1:AF:84:B4:11:96
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  149777

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.50.0/23
                IPv6:
                  2400:6e20::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:28:41:e5:27:56:26:75:ad:06:90:3f:07:4d:80:db:ae:3e:
         a2:8a:04:07:6e:d3:1d:3b:97:9f:2f:43:68:a8:5a:68:f4:23:
         2b:e7:12:08:d3:51:67:1d:19:3f:a1:58:bd:8f:3a:cd:1b:7c:
         8d:ea:3a:b7:31:02:3a:d1:3c:f2:04:be:e9:e5:c6:cf:eb:65:
         ef:02:5e:5e:d3:af:cb:45:aa:f2:be:88:5d:2d:f3:e2:d4:ae:
         06:50:3e:25:c6:4f:5f:e5:c1:ea:43:88:a2:80:06:4c:ee:70:
         17:b2:8d:0a:98:5f:96:68:e5:6c:83:a8:93:13:e9:e0:5d:16:
         30:e0:a7:b3:db:6d:75:54:e6:a2:f3:a4:da:ce:63:ed:98:eb:
         09:4d:2d:2f:09:6f:82:46:4e:e9:e6:ac:6a:2d:88:ee:a5:1c:
         ee:28:92:d2:8d:8a:8c:90:3e:a1:81:7e:0e:89:be:27:08:b8:
         f7:b2:39:39:c8:3a:8c:b5:46:0c:60:33:c1:33:07:0e:05:9b:
         0c:66:37:2a:71:86:d5:ae:99:14:4f:fc:93:8f:17:f6:e7:9a:
         21:14:fa:0b:a9:a5:21:76:8f:fc:b2:bc:0f:d2:92:d4:e4:b7:
         b9:33:9f:87:b0:63:58:5e:5e:b8:3d:18:0c:2c:16:1b:e4:5f:
         04:f8:58:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 00:00:31 2024 by rpki-client on console-fra.rpki-client.org