Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RLpWm_0uyBawaXNFE-C78tNOtwc.cer
File:                     RLpWm_0uyBawaXNFE-C78tNOtwc.cer (download)
Hash identifier:          OQaRFP8EdXgWJjvSMtE5LOmqoUVwW3RWhq6xLzBBcI8=
Subject key identifier:   44:BA:56:9B:FD:2E:C8:16:B0:69:73:45:13:E0:BB:F2:D3:4E:B7:07
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       016D26
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate valid until:  Fri 01 Dec 2023 00:00:00 +0000
Subordinate resources:
    1: IP: 43.242.200.0/22
    2: IP: 103.38.80.0/22

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93478 (0x16d26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep  9 01:58:43 2022 GMT
            Not After : Dec  1 00:00:00 2023 GMT
        Subject: CN=A91AD0B2/serialNumber=44BA569BFD2EC816B069734513E0BBF2D34EB707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:43:02:75:1f:01:39:7b:fe:9e:d0:2f:41:ac:
                    1b:da:72:f7:35:b3:34:cb:39:9b:03:43:af:a7:1a:
                    09:ee:48:7d:d9:f5:4a:fa:4e:89:b5:e5:53:ee:4e:
                    89:3a:df:fb:39:a1:c6:10:9a:6f:73:1e:f3:10:d6:
                    9e:d7:92:25:8a:75:9a:47:93:f0:02:23:4a:78:c2:
                    3a:8b:4c:91:56:63:c5:71:7a:e4:92:61:37:30:b0:
                    64:30:f2:8e:e1:77:b8:8b:1d:b6:18:ba:39:a0:a0:
                    30:72:dc:e3:40:07:e5:25:77:e7:2e:cb:1a:37:a8:
                    fd:42:a0:6d:58:35:dd:b8:b7:7c:db:74:f3:95:e6:
                    81:fe:9e:8c:89:b5:87:40:21:d1:a8:e2:98:b9:36:
                    fa:7d:8f:9c:15:a7:c1:c8:a4:26:c0:4d:d1:06:24:
                    54:29:d8:d1:21:6f:c9:d2:76:b9:68:58:a0:ab:9a:
                    9f:70:c1:63:c8:5c:d8:c4:a3:72:13:32:32:32:e0:
                    0d:1c:05:4b:57:1d:e1:56:27:28:96:78:11:45:5a:
                    0e:59:fc:6f:83:64:90:4a:19:b8:ea:2b:e7:56:bc:
                    a6:90:5d:d4:d2:da:ed:5a:d7:cc:41:7f:27:cb:dd:
                    d6:e2:1a:e5:3c:85:e7:b1:9e:ff:e5:78:31:ea:d7:
                    3f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                44:BA:56:9B:FD:2E:C8:16:B0:69:73:45:13:E0:BB:F2:D3:4E:B7:07
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.242.200.0/22
                  103.38.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:5b:9f:30:bb:1e:c6:2c:3e:09:4b:64:26:07:3b:3d:a7:2f:
         04:58:cd:9b:81:51:22:ed:95:f7:3e:76:3b:ac:6e:60:35:d1:
         ae:46:cb:03:e1:9c:04:cd:46:12:bb:3c:9a:29:ab:4e:a2:bc:
         e1:bc:9a:09:11:6c:f8:13:8d:b8:f9:df:97:e7:18:03:c9:63:
         f2:f9:21:6b:6c:b3:ab:c7:c4:31:44:13:cc:c7:f4:b4:c4:64:
         22:d8:36:c7:fd:8a:76:75:38:17:5d:7e:83:c7:c2:a3:1f:0c:
         7a:2f:2c:37:f6:c2:6a:6c:40:0a:88:e2:97:37:0c:ae:be:8c:
         28:6f:fc:20:68:ad:3c:53:28:fb:86:5b:82:39:a7:94:ee:e4:
         3a:af:b6:9c:ba:97:be:ac:97:5f:79:01:3e:94:cd:d7:b4:ff:
         e4:62:bb:56:e6:01:98:cd:95:6b:1c:18:7c:d5:3f:53:3b:86:
         3c:68:98:6b:45:95:8f:89:cb:fc:60:1c:78:d1:9b:2d:dc:22:
         02:89:3b:9b:cb:e7:0f:cf:dc:5e:d0:c3:e1:db:d4:95:94:91:
         0b:ab:15:4d:f9:f8:cd:af:a3:41:47:d8:46:64:db:7c:7d:1f:
         88:e5:65:dc:80:a0:28:f9:c6:bb:9e:15:a5:6a:23:e5:2f:70:
         db:b7:68:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 29 18:11:33 2023 by rpki-client.