Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
File:                     RW7qBpLGpPJvU9LSN9HLTc14MwU.cer (raw, json)
Hash identifier:          zzfidPOWyvt/YIlkfzxnXGdT00912toHbriN9ljw4qg=
Subject key identifier:   45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01A798
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 02 Jun 2023 03:31:49 +0000
Certificate not after:    Tue 30 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 23871
                          IP: 123.108.68.0/22
                          IP: 125.62.76.0/22
                          IP: 202.10.80.0/20
                          IP: 202.126.96.0/20
                          IP: 202.134.224.0/19
                          IP: 203.34.248.0/23
                          IP: 203.62.158.0/23
                          IP: 2406:1600::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 06:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108440 (0x1a798)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun  2 03:31:49 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:72:d1:5c:cd:9c:59:46:78:b2:ce:ad:a8:29:
                    ec:78:0c:42:64:04:38:94:35:55:79:51:e6:14:2e:
                    fe:69:da:2b:a7:1d:20:da:17:1d:c3:73:8a:db:98:
                    ee:95:8a:bd:b7:d2:b0:a6:16:1d:e7:4a:60:3c:26:
                    67:7e:7b:e7:32:66:b6:a6:5b:00:6f:e9:47:3a:6f:
                    39:7a:44:b4:42:b4:f6:8f:01:08:45:b6:b6:53:b0:
                    88:f2:cd:ce:f3:a3:d5:20:67:8e:ba:32:76:96:a1:
                    a9:85:f1:15:9c:20:a6:45:6b:34:be:43:34:b2:05:
                    6f:26:70:94:5a:2b:5e:58:f7:69:16:29:f2:26:59:
                    48:c8:21:ce:d2:4c:6b:b6:d6:50:97:db:ff:35:3b:
                    55:e6:f2:c2:08:da:e1:bd:a9:e9:ef:aa:0e:7d:7a:
                    aa:24:81:80:80:f1:8f:1e:b7:0f:5e:85:da:6d:32:
                    e5:bc:f1:ba:b4:19:91:01:61:85:5f:68:7f:af:7d:
                    c7:9e:fe:a8:32:b8:f2:7c:e7:bd:25:54:f0:71:d3:
                    92:51:8c:dc:9c:f2:ed:30:37:c0:28:ce:ff:ee:fe:
                    98:3c:c8:84:f7:c8:41:76:69:3c:9c:2c:2f:81:94:
                    ef:78:44:e3:0b:93:b0:32:d8:2c:e0:ae:b9:bf:16:
                    28:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  23871

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.108.68.0/22
                  125.62.76.0/22
                  202.10.80.0/20
                  202.126.96.0/20
                  202.134.224.0/19
                  203.34.248.0/23
                  203.62.158.0/23
                IPv6:
                  2406:1600::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:4b:db:0c:a4:c3:60:5d:14:7b:80:b6:3f:53:07:eb:a2:d8:
         5b:3a:38:b9:bf:38:57:29:a5:58:29:b8:d0:e6:3d:f0:fe:f3:
         02:08:86:a5:e6:b7:be:f5:9a:79:13:d8:56:57:bc:20:37:48:
         7a:0a:51:bc:90:2b:f4:55:60:4c:c3:c6:ad:d6:2c:d4:b7:31:
         60:95:55:b8:b4:15:7d:ec:67:52:3f:7a:9d:f5:a4:3e:95:f6:
         1c:6b:ab:ee:25:64:4c:4d:49:a4:29:b4:1b:8f:4e:50:d3:00:
         55:01:3d:f5:d3:cb:b9:ab:a2:53:ac:28:e3:1e:4e:9e:ae:36:
         20:a1:2c:2d:ba:d1:f4:22:fa:af:c6:b3:54:9b:93:80:fc:85:
         97:90:ac:0e:d2:f2:30:c1:0d:d3:d5:42:72:6f:f8:96:a1:44:
         3c:6b:73:ed:93:28:11:90:fd:00:bd:3e:95:ac:56:46:b5:1f:
         8e:53:3e:58:90:2d:a6:dd:8a:4c:4d:29:9a:56:2d:02:fd:b4:
         6c:e9:4d:33:2c:7d:a6:d1:0e:82:3c:b1:45:08:ab:72:2b:22:
         21:a5:3d:c1:fa:9d:f5:13:95:a2:02:da:87:4c:89:cf:a2:67:
         b4:7a:69:3f:25:3f:86:08:2c:7d:e7:c2:26:54:a0:7a:b2:47:
         e0:e1:74:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 07:21:23 2024 by rpki-client on console-ams.rpki-client.org