Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
File:                     QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer (raw, json)
Hash identifier:          VOhrvxvzoUzZIdvuHwgIaYT0++zEYIrT+oDGXZewXzk=
Subject key identifier:   40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01E576
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
caRepository:             rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/
Notify URL:               https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/08c2f264-23f9-49fb-9d43-f8b50bec9261/notification.xml
Certificate not before:   Wed 20 Mar 2024 00:27:39 +0000
Certificate not after:    Thu 01 May 2025 00:00:00 +0000
Subordinate resources:    AS: 38895
                          IP: 27.0.0.0/22
                          IP: 43.198.0.0 -- 43.221.255.255
                          IP: 43.249.44.0/22
                          IP: 103.246.148.0/22
                          IP: 203.83.220.0/22
                          IP: 2406:da00::/24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Apr 2024 02:50:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124278 (0x1e576)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Mar 20 00:27:39 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:13:63:48:d7:4d:f6:67:8b:ee:0b:67:0d:e3:
                    41:48:aa:3a:82:2d:3d:a3:7d:85:b0:c9:24:e0:66:
                    ea:f1:56:94:bc:1d:34:72:04:ca:14:20:ce:87:55:
                    e3:1b:a0:6a:41:04:7e:79:80:a2:36:7a:82:05:50:
                    24:ea:89:d3:7f:f3:67:d1:e4:7d:10:95:af:01:0d:
                    20:ea:3c:a1:f4:a6:69:8f:04:9a:e3:a2:e5:66:20:
                    c4:b3:53:af:ee:4a:b0:3f:86:4c:4f:18:4e:96:ed:
                    24:62:b3:2c:1c:7a:dd:0a:27:f8:78:6b:de:6a:96:
                    ac:eb:b7:f3:42:99:8a:24:3e:27:b0:53:93:25:6e:
                    36:01:03:02:6a:9f:9f:3b:cc:31:44:17:b1:d5:39:
                    00:7f:82:d4:b2:43:09:c9:08:9e:2a:e8:e2:8f:7a:
                    28:92:0c:57:0a:15:85:42:53:0f:6b:a3:d9:ce:0a:
                    d0:ca:b2:95:d4:31:04:d3:69:93:70:21:ea:8d:ba:
                    24:0e:60:67:5f:52:28:92:ef:11:95:08:57:33:00:
                    48:42:9f:8d:c2:94:1b:38:81:d0:aa:8a:d3:2b:ef:
                    ec:ee:fa:3e:c1:32:37:a5:cc:78:12:90:7d:1d:96:
                    f4:49:95:9d:62:76:aa:30:34:30:9c:24:bb:ef:42:
                    14:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/
                RPKI Manifest - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                RPKI Notify - URI:https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/08c2f264-23f9-49fb-9d43-f8b50bec9261/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  38895

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.0.0.0/22
                  43.198.0.0-43.221.255.255
                  43.249.44.0/22
                  103.246.148.0/22
                  203.83.220.0/22
                IPv6:
                  2406:da00::/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:2f:c7:c1:8c:f2:a4:a3:26:f0:30:a5:63:8b:b2:53:bf:4a:
         13:ee:eb:ef:31:dc:6a:00:54:6d:ba:89:cf:2c:dc:b8:cd:f0:
         6b:8e:f5:12:9e:c4:fc:97:fc:d0:13:91:91:cb:2e:91:6d:9e:
         19:b1:1f:bc:3d:61:12:82:ff:be:7b:15:5e:67:c4:90:d5:63:
         5a:d4:99:7c:c2:6b:51:d2:ed:e2:c6:7c:42:d3:b5:16:21:b4:
         10:5f:45:21:75:04:13:96:3f:0b:be:92:94:c3:07:c4:84:67:
         e1:6d:2e:97:a9:c8:3d:a1:a4:0b:83:0c:66:0b:ef:d6:57:cf:
         16:66:27:9a:e1:a1:f0:f4:53:4d:ff:ea:2a:91:2b:cb:4d:ce:
         93:ff:14:98:16:76:9e:dd:cb:fd:7b:b2:3e:bd:80:5a:f2:24:
         94:78:5b:d9:01:6d:31:2f:6b:3b:37:50:cf:5d:0a:bc:f8:3c:
         44:dd:d1:4b:cf:38:b0:e1:1f:de:71:34:fa:96:3b:ec:37:2b:
         a2:c4:cf:2a:0f:5f:d0:00:1e:da:38:97:fb:3a:6f:cf:9a:b8:
         01:b9:6b:2d:a7:c2:26:7f:ec:66:a6:95:ff:98:0e:d8:71:ef:
         7d:9c:79:da:5b:2a:83:39:fe:3d:0a:2c:c3:5e:28:fb:5f:97:
         8f:71:5e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:31:21 2024 by rpki-client on console-fra.rpki-client.org