Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QoezMyF220hqLLxCVAL6nIa23Eg.cer
File:                     QoezMyF220hqLLxCVAL6nIa23Eg.cer (raw, json)
Hash identifier:          yJ8qjZPKZ3718YrVuL3y3Rvj+t3bttcwCgVksWzZ00E=
Subject key identifier:   42:87:B3:33:21:76:DB:48:6A:2C:BC:42:54:02:FA:9C:86:B6:DC:48
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01B537
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sat 05 Aug 2023 12:36:12 +0000
Certificate not after:    Thu 31 Oct 2024 00:00:00 +0000
Subordinate resources:    AS: 23932
                          AS: 45223
                          IP: 180.128.0.0/16
                          IP: 202.44.52.0/22
                          IP: 202.52.4.0/22
                          IP: 203.145.112.0/21

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Apr 2024 12:32:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111927 (0x1b537)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug  5 12:36:12 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=A911ABDD/serialNumber=4287B3332176DB486A2CBC425402FA9C86B6DC48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ca:d5:d7:d7:fc:74:39:8b:9e:a2:0c:e1:32:
                    02:16:7c:0c:3d:88:62:0e:7f:5a:40:44:47:08:3f:
                    7c:58:22:0c:04:5e:34:25:0f:73:77:2a:fe:f9:86:
                    89:25:d0:22:ad:fa:13:40:a3:03:47:c3:72:e9:b2:
                    19:ff:73:cd:32:bc:eb:dd:c1:1c:29:9d:eb:b0:bc:
                    47:bc:aa:cc:54:21:dc:0d:68:8a:64:35:72:7a:8a:
                    d2:d0:2f:e0:c4:87:d2:5a:e6:a2:cc:45:e4:87:bb:
                    3f:c3:19:ba:f1:33:05:e9:5e:70:1f:78:60:a5:f4:
                    62:a9:e3:b3:7c:28:fb:28:7f:47:3d:79:3d:20:91:
                    b1:ca:fa:38:0b:4a:7b:b2:aa:b6:dd:f0:ff:16:d7:
                    7a:99:8d:3c:db:ef:25:54:be:9e:1b:be:50:98:b8:
                    66:a1:76:29:a6:fd:91:f0:e5:3d:ad:4d:af:e2:01:
                    21:8d:fd:1a:cb:f3:d7:06:f6:1f:cf:0b:d5:2f:e2:
                    fd:46:e7:a0:5c:5c:42:23:66:58:46:d9:55:f7:d2:
                    4c:8d:10:39:b6:d6:eb:25:e5:60:25:42:81:79:72:
                    55:8c:8d:01:97:4e:21:97:1b:44:c5:e6:09:43:32:
                    8b:5d:00:82:b6:57:cb:54:af:0f:7d:57:ec:d8:fa:
                    3c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:87:B3:33:21:76:DB:48:6A:2C:BC:42:54:02:FA:9C:86:B6:DC:48
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  23932
                  45223

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.128.0.0/16
                  202.44.52.0/22
                  202.52.4.0/22
                  203.145.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0a:51:1a:3d:74:1f:4a:f0:c7:88:68:28:b3:1e:08:de:ea:8c:
         40:9e:0e:67:89:b5:8c:99:3e:ac:f3:bd:9e:d1:f3:76:f0:fa:
         74:b1:ba:7f:73:9d:2e:c3:59:51:9b:7e:43:50:fc:23:40:f0:
         d1:98:3a:ae:5f:ab:bb:ec:1b:c3:6a:ca:6d:70:87:5f:d7:27:
         db:1c:99:62:da:0d:76:34:d9:30:65:5f:5e:02:71:f1:b9:a3:
         14:0f:34:17:18:0a:b0:f7:68:40:2e:61:84:19:88:fd:85:ab:
         9c:c9:9d:49:32:1f:61:9b:b8:40:09:7c:ad:1d:9c:90:c5:48:
         e0:6d:0b:b7:3e:b9:f3:06:c8:44:cf:4b:e8:27:d7:33:2e:11:
         ac:64:19:d4:4d:07:ce:2c:85:ff:72:59:00:da:03:8f:ea:2a:
         3b:0e:5b:cd:bf:55:c2:6a:9a:61:2a:d4:2b:6b:11:e0:0e:f7:
         60:25:02:a1:0f:29:79:e1:9e:a6:25:44:b3:55:fd:d0:75:f8:
         73:56:3d:cd:06:aa:c7:68:29:9e:22:37:e1:4a:12:0b:38:72:
         c3:d9:34:7a:b0:80:d0:8b:2b:70:52:b4:2e:1d:78:20:96:86:
         26:23:14:a1:10:9c:4d:e9:c6:25:72:fc:ab:01:c5:70:77:82:
         87:57:eb:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 13:34:00 2024 by rpki-client on console-ams.rpki-client.org