Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rg-o-v_IvkCewr34RjcFhjpF6Og.cer
File:                     Rg-o-v_IvkCewr34RjcFhjpF6Og.cer (raw, json)
Hash identifier:          llsq3CjK1ER6G9wVE3G/4p7dAEKEVCa/XyR57NkwoEU=
Subject key identifier:   46:0F:A8:FA:FF:C8:BE:40:9E:C2:BD:F8:46:37:05:86:3A:45:E8:E8
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01965E
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9111F34/F960D1B401E311ED812E500BC4F9AE02/Rg-o-v_IvkCewr34RjcFhjpF6Og.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9111F34/F960D1B401E311ED812E500BC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 05 Apr 2023 12:23:31 +0000
Certificate not after:    Wed 29 May 2024 00:00:00 +0000
Subordinate resources:    AS: 133427
                          IP: 103.227.56.0/22
                          IP: 2001:df3:8800::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 06:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104030 (0x1965e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Apr  5 12:23:31 2023 GMT
            Not After : May 29 00:00:00 2024 GMT
        Subject: CN=A9111F34/serialNumber=460FA8FAFFC8BE409EC2BDF8463705863A45E8E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0e:80:06:07:95:28:64:de:f8:c4:9a:b8:57:
                    28:ea:8b:fd:41:76:6a:d6:05:4e:c8:a4:44:29:42:
                    45:5a:fa:b4:9e:d1:af:f1:11:36:a5:d2:c2:11:f0:
                    75:48:1d:c5:58:b2:2c:29:86:86:44:7a:eb:df:e2:
                    84:4c:99:76:fc:5d:fe:80:db:b7:d6:3b:59:22:84:
                    ae:de:a8:24:86:ba:b9:3e:bc:4b:f0:35:ac:cb:53:
                    3d:8a:e1:11:bc:6b:7f:45:88:47:14:b2:07:02:9e:
                    12:d2:9f:ef:2e:e5:63:42:e9:32:d1:5e:c5:80:72:
                    59:85:f9:53:79:15:82:9b:91:1f:ea:e1:bd:1c:5b:
                    42:e1:64:08:aa:03:f4:4e:58:a8:98:88:d6:e3:22:
                    72:b4:cc:b7:77:88:c5:ac:ea:dc:19:74:18:6e:fb:
                    e2:d0:95:ee:c6:c0:f2:c3:b1:88:13:88:a7:99:7e:
                    c0:dd:8e:a4:ff:23:f3:59:29:d8:5a:f5:a6:44:3d:
                    72:c4:e0:a0:db:30:95:6f:28:95:0f:70:8e:12:67:
                    16:e1:c4:a8:57:c8:29:f2:e4:6a:f2:5e:6c:5d:ed:
                    3b:b2:04:82:dd:8d:86:f3:6c:cc:50:0e:e0:22:7e:
                    84:1c:5a:9c:10:9a:7e:29:2f:5c:74:d5:d5:b2:2d:
                    c9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:0F:A8:FA:FF:C8:BE:40:9E:C2:BD:F8:46:37:05:86:3A:45:E8:E8
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9111F34/F960D1B401E311ED812E500BC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9111F34/F960D1B401E311ED812E500BC4F9AE02/Rg-o-v_IvkCewr34RjcFhjpF6Og.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  133427

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.227.56.0/22
                IPv6:
                  2001:df3:8800::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:b7:46:3b:ba:f4:44:21:66:bf:93:55:34:bf:0f:2c:7a:27:
         e5:e6:81:4a:f7:20:2f:08:39:02:3b:b8:49:ef:bf:25:0d:45:
         8f:56:77:80:8d:c5:4f:71:02:07:4e:db:ed:0c:d7:33:7e:c9:
         e5:75:c7:63:da:97:f2:e3:92:89:72:83:60:b4:b0:c4:07:e2:
         f0:8b:0a:bf:87:67:48:e0:69:4c:3c:bc:c0:92:b8:1d:1f:44:
         90:cb:0f:c7:42:33:a5:60:bb:ca:53:c5:8a:6c:b2:89:24:cb:
         7c:2a:0e:e2:33:2d:4f:1a:31:df:b0:f1:8d:77:3b:a0:ef:ce:
         8a:55:f8:d1:ed:68:8f:07:f8:26:ac:03:82:f4:0a:33:fc:4b:
         6a:30:3b:8d:cd:1c:6b:8b:41:9e:ae:a6:08:4c:05:13:9f:25:
         a4:46:4d:16:d2:05:bb:fd:20:d4:0c:2d:53:86:b9:c5:5c:a7:
         02:51:c9:45:fa:8c:26:59:31:93:c2:85:88:0d:c4:2b:1e:f9:
         74:ff:66:5d:56:02:b5:af:5e:af:91:20:e4:05:10:cf:ac:ce:
         72:ce:df:8a:ea:1b:db:6b:a0:19:43:c6:45:97:c8:66:43:32:
         86:5b:56:f4:bb:5c:7e:33:ca:c6:0b:79:0e:7d:35:50:06:71:
         fc:40:68:5c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Apr 25 07:18:53 2024 by rpki-client on console-fra.rpki-client.org