Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQqIwMyj7oZ3zRffPuht5x38ESk.cer
File:                     PQqIwMyj7oZ3zRffPuht5x38ESk.cer (raw, json)
Hash identifier:          4zEGGp3rl7DufWxZCTkP5U6eiPRFXtxkXze6EKE9YVI=
Subject key identifier:   3D:0A:88:C0:CC:A3:EE:86:77:CD:17:DF:3E:E8:6D:E7:1D:FC:11:29
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01AFD8
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 13 Jul 2023 02:18:15 +0000
Certificate not after:    Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources:    IP: 120.138.32.0/19
                          IP: 203.98.192.0/19
                          IP: 203.185.184.0/22
                          IP: 203.222.32.0/19
                          IP: 203.222.160.0/19
                          IP: 2403:a800::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Apr 2024 04:49:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110552 (0x1afd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 13 02:18:15 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=A91607DE/serialNumber=3D0A88C0CCA3EE8677CD17DF3EE86DE71DFC1129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:4a:f4:6f:f8:87:15:6a:db:08:16:f0:9a:24:
                    8b:ef:4f:51:3b:ac:46:d1:ce:b9:8c:ce:b4:2b:c5:
                    db:f9:dd:df:f9:41:6c:51:bc:73:35:97:19:24:c6:
                    50:e5:ca:d4:86:2c:66:ed:e2:b3:81:68:0c:b6:59:
                    13:13:3e:89:b1:f8:6c:c0:4d:c3:57:c3:6f:ad:1a:
                    2b:14:5e:2a:b4:da:06:a5:6c:51:89:85:61:f1:fe:
                    40:e9:c5:4a:88:65:95:e2:e6:6f:a2:e2:a4:8e:64:
                    1b:e2:ca:c0:7f:18:25:56:fd:42:77:28:bf:4f:b0:
                    bd:d2:ce:06:5f:ed:a7:f4:84:19:47:c9:ed:71:aa:
                    22:80:e9:b6:f0:45:9b:6d:35:94:91:a9:c5:18:84:
                    23:59:7b:88:e6:49:e0:f0:fb:86:82:c0:15:1a:83:
                    ba:07:2e:7c:7a:fc:f0:58:00:80:cc:78:39:2d:16:
                    22:66:8a:b4:fc:f7:03:90:76:f2:22:39:06:5f:70:
                    e4:a7:10:0b:ab:3d:a3:ff:56:19:15:0b:af:2d:26:
                    39:06:b9:1d:51:9f:ad:0f:4c:20:20:d6:a6:0a:8c:
                    4a:a5:5d:f2:16:a5:b4:1e:82:76:1a:fa:36:11:a5:
                    9e:b3:15:dd:04:7b:6c:26:1d:1c:e7:1e:a1:fc:54:
                    07:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:0A:88:C0:CC:A3:EE:86:77:CD:17:DF:3E:E8:6D:E7:1D:FC:11:29
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.138.32.0/19
                  203.98.192.0/19
                  203.185.184.0/22
                  203.222.32.0/19
                  203.222.160.0/19
                IPv6:
                  2403:a800::/32

    Signature Algorithm: sha256WithRSAEncryption
         bd:a9:4a:35:55:66:f7:ba:b0:6d:45:14:23:d9:7e:69:62:ce:
         dc:d9:b9:90:22:37:01:84:4f:03:1a:bf:c1:76:3d:19:72:3f:
         4b:33:27:b0:fe:09:ae:05:10:99:70:7c:e7:aa:65:cd:d8:3d:
         dc:a3:63:2f:8a:7b:4b:be:72:08:d2:63:53:36:ca:38:c1:5a:
         90:7c:02:78:a5:65:09:36:04:91:15:28:7c:ad:f9:db:e6:05:
         77:40:ff:2c:b9:c0:21:44:03:b7:51:df:f8:3f:99:18:02:9b:
         ce:c1:e8:24:0f:cb:66:fc:57:73:ed:d7:4d:7f:af:c0:d6:45:
         06:72:b5:31:49:62:1c:95:43:3d:d6:6c:5c:fe:c3:55:e7:ff:
         f7:79:9c:39:23:37:c7:68:ee:f3:74:25:8e:13:31:e6:7f:63:
         c4:ff:dc:fb:21:b7:6e:59:0a:57:91:0d:f7:64:74:9b:8f:1b:
         02:81:94:de:fc:dc:94:ac:09:b3:22:99:c0:8c:f2:ce:fc:9c:
         cf:d2:91:6c:98:3b:e0:e9:f5:49:d6:87:cf:39:76:e8:01:7f:
         ce:ca:dc:7e:08:9d:02:42:70:03:ba:a1:17:fa:46:fb:53:3d:
         c3:f6:ac:92:06:ee:20:c3:f0:46:1c:09:8b:36:f5:6e:23:7e:
         e7:90:af:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 06:02:17 2024 by rpki-client on console-fra.rpki-client.org