Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R0Blek4vuGe_tE2_bLi8HdGywg4.cer
File:                     R0Blek4vuGe_tE2_bLi8HdGywg4.cer (raw, json)
Hash identifier:          W51PPDZDKsOIY7IqjX2qKwbbmXQlgXmpKu7QFY59u7M=
Subject key identifier:   47:40:65:7A:4E:2F:B8:67:BF:B4:4D:BF:6C:B8:BC:1D:D1:B2:C2:0E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01B774
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 17 Aug 2023 18:05:22 +0000
Certificate not after:    Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources:    AS: 142539
                          IP: 103.168.178.0/23
                          IP: 2407:95c0::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Apr 2024 19:33:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112500 (0x1b774)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 17 18:05:22 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=A91BA733/serialNumber=4740657A4E2FB867BFB44DBF6CB8BC1DD1B2C20E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:58:dd:61:a0:d6:b5:49:77:d2:71:57:2f:f5:
                    dd:6a:c5:bf:d4:69:8d:6e:ff:73:0e:33:ff:ae:40:
                    52:50:44:91:cb:ee:95:0e:3a:fd:f2:ad:fb:ed:1c:
                    61:d8:d0:dc:c4:9d:44:b3:ad:15:29:d2:98:a5:dc:
                    ad:6d:37:09:f4:2a:5a:5d:7c:c8:08:23:e0:92:e5:
                    4e:38:66:28:50:50:17:1b:3a:7f:28:43:13:72:14:
                    9f:f3:a9:6a:f7:ca:38:62:4d:d8:6e:c5:bf:76:cc:
                    d8:c9:ce:06:11:41:b2:8c:47:f6:4e:28:eb:33:44:
                    73:99:67:15:f0:48:09:76:fd:c2:6f:be:9d:36:fb:
                    34:be:5a:22:94:e2:5d:30:2c:38:60:cd:9f:84:63:
                    26:28:bf:41:9c:f0:64:34:4a:52:0f:67:5b:d3:6f:
                    90:ac:44:77:3f:1c:a5:d7:e3:e2:3c:d2:dd:53:66:
                    f3:cf:08:e5:a0:fb:35:da:d8:cc:7d:61:50:48:39:
                    ab:e7:9e:e3:94:5a:01:32:aa:61:d1:24:9c:13:cf:
                    61:cc:85:ce:7b:bd:ff:e3:16:69:e7:d1:77:4a:5a:
                    f8:36:d3:b7:60:a7:4a:79:3a:fd:ab:b2:88:44:c3:
                    dd:f1:f8:ba:c2:9c:bf:26:3c:52:72:3c:7e:28:c2:
                    78:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:40:65:7A:4E:2F:B8:67:BF:B4:4D:BF:6C:B8:BC:1D:D1:B2:C2:0E
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  142539

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.178.0/23
                IPv6:
                  2407:95c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:fb:ad:f8:6e:e9:37:a5:4d:6f:6f:94:31:cc:67:c0:65:d5:
         5b:1a:b6:fc:0d:f2:52:6b:28:63:07:94:3f:bd:77:6b:b9:9f:
         72:2e:cb:71:93:ef:90:e5:f1:56:d1:e3:db:af:10:85:ef:42:
         c9:a1:47:6d:9e:4c:b3:4b:94:11:a2:5f:99:ec:d4:31:76:8b:
         76:8a:66:df:f6:95:11:2a:55:8d:a6:3c:91:9b:6f:3e:65:fa:
         f1:19:27:8a:d8:36:09:fc:e0:a6:ef:12:63:69:07:71:74:50:
         60:49:db:8d:40:4c:74:7e:25:9c:a6:60:c2:28:99:0a:ea:31:
         23:1f:91:93:88:75:c3:10:48:b7:24:cc:db:51:d6:36:c5:a2:
         7c:a8:52:04:ee:82:8c:98:40:e5:68:a8:3b:50:28:23:d8:74:
         83:9b:f7:5f:cb:35:34:14:07:75:c6:7d:1c:c3:c3:22:ee:6b:
         2f:7c:a1:55:9c:b5:90:5b:79:f9:a5:5d:c9:e5:a6:ad:35:79:
         6b:1c:cc:a2:37:aa:93:1b:23:b2:0b:d6:98:11:75:67:5b:67:
         bd:b6:91:68:38:b7:d0:80:24:37:2e:6c:ab:f0:ad:30:bb:15:
         34:41:4e:cc:c3:48:51:96:45:3b:eb:6f:82:64:62:27:ce:f1:
         0c:a2:6b:59
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAbd0MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMDgxNzE4MDUyMloXDTI0MDkzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQkE3MzMxMTAvBgNVBAUTKDQ3NDA2NTdBNEUyRkI4NjdCRkI0NERC
RjZDQjhCQzFERDFCMkMyMEUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC6WN1hoNa1SXfScVcv9d1qxb/UaY1u/3MOM/+uQFJQRJHL7pUOOv3yrfvtHGHY
0NzEnUSzrRUp0pil3K1tNwn0KlpdfMgII+CS5U44ZihQUBcbOn8oQxNyFJ/zqWr3
yjhiTdhuxb92zNjJzgYRQbKMR/ZOKOszRHOZZxXwSAl2/cJvvp02+zS+WiKU4l0w
LDhgzZ+EYyYov0Gc8GQ0SlIPZ1vTb5CsRHc/HKXX4+I80t1TZvPPCOWg+zXa2Mx9
YVBIOavnnuOUWgEyqmHRJJwTz2HMhc57vf/jFmnn0XdKWvg207dgp0p5Ov2rsohE
w93x+LrCnL8mPFJyPH4ownjNAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUR0Blek4v
uGe/tE2/bLi8HdGywg4wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUJBNzMzLzMzMzg3MkEyMEQ3NDExRURBODk2MDYyRkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFCQTczMy8zMzM4NzJBMjBENzQxMUVEQTg5NjA2MkZDNEY5QUUwMi9SMEJsZWs0
dnVHZV90RTJfYkxpOEhkR3l3ZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAizLMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZ6iyMA0EAgAC
MAcDBQAkB5XAMA0GCSqGSIb3DQEBCwUAA4IBAQCD+634buk3pU1vb5QxzGfAZdVb
Grb8DfJSayhjB5Q/vXdruZ9yLstxk++Q5fFW0ePbrxCF70LJoUdtnkyzS5QRol+Z
7NQxdot2imbf9pURKlWNpjyRm28+ZfrxGSeK2DYJ/OCm7xJjaQdxdFBgSduNQEx0
fiWcpmDCKJkK6jEjH5GTiHXDEEi3JMzbUdY2xaJ8qFIE7oKMmEDlaKg7UCgj2HSD
m/dfyzU0FAd1xn0cw8Mi7msvfKFVnLWQW3n5pV3J5aatNXlrHMyiN6qTGyOyC9aY
EXVnW2e9tpFoOLfQgCQ3Lmyr8K0wuxU0QU7Mw0hRlkU762+CZGInzvEMomtZ
-----END CERTIFICATE-----
Generated at Thu Apr 18 20:35:09 2024 by rpki-client on console-ams.rpki-client.org