Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHchajGCagqZih4gf9gk3cvH5w4.cer
File:                     QHchajGCagqZih4gf9gk3cvH5w4.cer (download)
Hash identifier:          KKqjf7EWLyg4TTElVzXyCZLkys1Qb+1oCPvMGrVJiRE=
Subject key identifier:   40:77:21:6A:31:82:6A:0A:99:8A:1E:20:7F:D8:24:DD:CB:C7:E7:0E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       013928
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91B7992/D61274EA3BCA11ECB3252B2CC4F9AE02/QHchajGCagqZih4gf9gk3cvH5w4.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91B7992/D61274EA3BCA11ECB3252B2CC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate valid until:  2023-03-02T00:00:00Z
Subordinate resources:
    1: IP: 43.225.28.0/22
    2: IP: 103.44.20.0/22

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80168 (0x13928)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec  6 03:42:47 2021 GMT
            Not After : Mar  2 00:00:00 2023 GMT
        Subject: CN=A91B7992/serialNumber=4077216A31826A0A998A1E207FD824DDCBC7E70E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a1:40:8b:5a:30:b0:07:ea:cf:a0:18:eb:be:
                    a0:ce:80:68:27:92:14:f9:a6:a5:67:a1:2c:bf:20:
                    1d:0e:06:b8:db:f1:1b:16:18:79:ab:51:09:28:86:
                    6b:db:b1:97:af:01:89:e2:65:c0:ec:2b:10:ec:e1:
                    f5:31:90:83:f2:ae:f2:34:3b:1c:d1:bc:59:8b:d1:
                    23:02:cd:13:4b:49:7d:d6:36:ba:9a:67:8f:0c:f5:
                    fb:48:93:e0:01:98:92:42:a6:85:11:8c:11:8a:71:
                    fb:74:e0:8d:dc:9b:0f:9b:cf:f0:81:4d:61:fd:40:
                    0e:d1:d9:4e:7a:a8:fd:e2:8a:94:23:5f:6a:33:46:
                    78:59:82:b8:38:d4:7b:7a:9c:c9:eb:15:db:4e:74:
                    0f:13:eb:dd:5d:31:03:84:22:be:ee:6c:05:fb:8c:
                    25:d2:7b:e4:ca:4b:3d:af:29:6c:42:a7:8a:c9:14:
                    6a:9e:7c:3f:ec:1d:26:01:c8:20:90:84:08:9c:b4:
                    d5:7c:f5:8c:58:d9:2e:15:31:80:17:09:d6:3c:7a:
                    1e:e8:73:49:0f:cd:c2:6f:eb:6c:7d:53:cd:79:9d:
                    9d:4f:c9:0c:93:e8:b2:4b:09:c3:40:4a:5b:70:48:
                    b0:80:56:0d:ce:17:5f:25:e4:f8:ed:04:31:13:81:
                    ab:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                40:77:21:6A:31:82:6A:0A:99:8A:1E:20:7F:D8:24:DD:CB:C7:E7:0E
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B7992/D61274EA3BCA11ECB3252B2CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B7992/D61274EA3BCA11ECB3252B2CC4F9AE02/QHchajGCagqZih4gf9gk3cvH5w4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.225.28.0/22
                  103.44.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c8:51:c9:dd:ef:b9:a5:22:e5:6d:40:2a:36:11:51:97:f6:5c:
         a6:f3:6a:4b:20:c4:98:4b:98:7c:76:da:79:bd:15:dc:85:cd:
         b1:dc:62:e5:30:ac:e4:65:84:29:58:cf:de:be:49:c3:6c:d0:
         0a:1d:a0:a3:ba:20:fd:ea:74:72:ba:82:58:6c:b8:9b:5f:49:
         cd:37:47:a1:96:4a:ec:0e:6c:e1:aa:3f:cc:1f:53:7d:1e:a7:
         60:34:c7:ac:da:7c:c8:e8:c9:be:74:9a:eb:6e:02:a7:4f:45:
         5f:08:c9:9b:3c:b5:71:fd:44:5a:ac:98:63:ea:47:30:ae:d6:
         07:4a:7e:fd:dd:a7:12:1e:d2:3a:53:46:d8:7e:8c:41:ee:e4:
         d0:f0:44:03:34:cf:d4:94:42:f1:d0:17:27:23:96:10:79:3e:
         77:56:72:3e:07:bf:54:72:f7:b5:e7:f7:29:db:e6:af:32:6b:
         94:d8:53:9e:43:60:97:97:2f:47:84:24:af:7c:40:1b:f5:b9:
         68:fb:a9:d5:25:0d:35:7a:2d:94:03:28:a4:02:77:e1:e1:b7:
         24:0c:c7:1c:5c:10:36:e3:78:19:d1:84:0b:86:e0:33:31:45:
         a0:d5:82:6e:d8:dd:de:67:b5:74:55:c8:cc:6e:e3:dd:63:52:
         e4:26:89:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 5 16:13:27 2022 by rpki-client.