Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RRIms-l3zxGWF1WwaTfB9-c13F4.cer
File:                     RRIms-l3zxGWF1WwaTfB9-c13F4.cer (raw, json)
Hash identifier:          K7EwknzUYJMyMWmTHTS6si9pKSseElFyvT2y0vKRvx8=
Subject key identifier:   45:12:26:B3:E9:77:CF:11:96:17:55:B0:69:37:C1:F7:E7:35:DC:5E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0208AC
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 23 Aug 2024 20:37:38 +0000
Certificate not after:    Fri 31 Oct 2025 00:00:00 +0000
Subordinate resources:    AS: 141148
                          IP: 103.155.84.0/23
                          IP: 2001:df4:bd80::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Dec 2024 01:13:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133292 (0x208ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 23 20:37:38 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=A91D18DA/serialNumber=451226B3E977CF11961755B06937C1F7E735DC5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a7:08:cb:d4:35:61:a9:24:8e:4b:fb:5a:1f:
                    b4:27:39:16:92:ae:8e:4b:8e:e0:88:e3:b0:68:bb:
                    18:40:03:00:e8:9c:da:67:d4:96:d2:2f:22:0a:ce:
                    f5:3c:e5:e1:09:f1:d1:56:a6:76:1d:3a:42:af:d4:
                    a4:25:fa:9c:26:dc:c9:55:a6:0e:fd:20:c8:03:8d:
                    b3:15:9e:34:97:79:d1:5d:7d:2c:86:89:9d:df:c2:
                    b0:53:bc:85:08:76:b6:5a:c0:e9:84:1b:2e:d1:29:
                    f2:55:7e:70:23:1e:2c:35:59:68:ee:cb:d8:ef:66:
                    10:59:eb:af:00:f5:07:2c:35:be:5c:46:16:6e:90:
                    e4:3e:be:26:02:99:75:89:b5:50:22:dc:29:8a:34:
                    f1:ae:d5:8a:27:ba:2d:c6:36:24:cd:8b:da:bb:9e:
                    f5:2c:b9:4f:dc:b1:db:91:7e:f2:8f:c3:d1:18:3a:
                    2b:79:01:3b:84:45:4c:8f:d9:f2:3a:28:0f:fc:84:
                    c5:ee:90:8a:62:4c:6c:5a:3e:ca:1a:af:b8:15:92:
                    92:2f:98:f0:2a:77:92:07:7f:dd:cb:19:d1:2c:39:
                    3f:ba:4c:72:8b:a0:4f:3d:ff:b5:2a:9d:3b:d3:8c:
                    6b:62:d5:f6:27:e6:fd:ac:07:a9:cf:62:3f:89:24:
                    8e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:12:26:B3:E9:77:CF:11:96:17:55:B0:69:37:C1:F7:E7:35:DC:5E
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  141148

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.84.0/23
                IPv6:
                  2001:df4:bd80::/48

    Signature Algorithm: sha256WithRSAEncryption
         c7:a5:23:6c:4d:55:fd:0b:ff:25:cc:42:cb:10:5c:99:40:18:
         bf:ef:af:00:ae:43:2c:ce:0d:c1:a3:16:36:d6:3d:ae:4f:a2:
         92:d6:49:4a:6a:45:75:7e:dc:db:d2:72:d7:60:38:5f:4b:3b:
         3e:51:4d:16:28:22:3b:5b:99:c8:87:b6:fa:1a:70:c1:28:06:
         33:d3:6c:18:9b:55:61:81:fe:f4:98:28:a6:6e:d9:bb:c4:42:
         c7:f1:8c:80:ea:c5:9d:6b:80:55:a6:e3:a4:aa:2a:2c:49:62:
         8d:99:00:ab:d9:8e:ce:73:1d:9e:71:15:00:25:b1:43:cb:08:
         fc:9d:79:ab:d4:eb:68:ae:74:48:c6:90:b7:59:62:51:98:db:
         5f:8e:f2:d6:91:aa:43:bc:d3:9b:ac:69:21:4f:b4:f5:f2:45:
         c3:f0:d5:ef:a3:59:7f:68:36:d5:5e:0e:cf:e1:4e:39:13:a0:
         65:01:f0:a7:98:60:f7:6b:61:e6:07:11:f4:94:1e:58:11:40:
         94:d9:82:8d:de:46:78:d2:b5:e9:91:53:01:0b:81:52:d7:43:
         41:7c:2f:33:45:66:46:db:8b:ab:3b:5a:23:42:70:45:d4:fa:
         5b:d8:af:4f:d0:2c:56:69:d0:42:f6:4b:2b:c1:cb:ef:a2:ae:
         92:6b:e8:15
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----