Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9XCMYZ-JzlRVcAceEizsByGBvI.cer
File:                     S9XCMYZ-JzlRVcAceEizsByGBvI.cer (raw, json)
Hash identifier:          pzC8OuT1nha0ZeopsyZV6gFpYWk8BR84pV1IyqLdX3M=
Subject key identifier:   4B:D5:C2:31:86:7E:27:39:51:55:C0:1C:78:48:B3:B0:1C:86:06:F2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01E007
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 21 Feb 2024 14:42:14 +0000
Certificate not after:    Thu 01 May 2025 00:00:00 +0000
Subordinate resources:    AS: 149491
                          IP: 103.181.24.0/23
                          IP: 2400:5760::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Apr 2024 02:50:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122887 (0x1e007)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb 21 14:42:14 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=A914BBE1/serialNumber=4BD5C231867E27395155C01C7848B3B01C8606F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b3:c3:13:56:8f:3e:19:b9:4a:e3:85:2f:45:
                    31:c5:13:04:f0:a8:a9:e5:9c:dc:4e:ce:a6:92:0d:
                    5e:e5:23:0c:69:59:7c:1e:ee:bd:d7:7d:87:2d:33:
                    2a:fb:2d:a5:01:b3:60:e0:00:ca:bb:c1:b2:aa:e9:
                    89:b9:2e:c1:de:cc:51:5a:2d:b9:d2:9a:b6:ef:da:
                    21:d4:ad:2c:c4:2a:0a:ac:3b:14:4f:f7:3c:a7:af:
                    9d:23:5c:2c:29:5b:03:d8:01:ee:e1:a0:d8:88:1f:
                    08:d9:fd:e2:32:e1:a1:c4:68:ea:6b:b0:ae:5b:e5:
                    4d:2c:7e:4f:ca:27:20:d3:b9:0f:70:a4:de:d1:13:
                    dd:a7:2f:4f:de:91:7f:e3:51:d1:cf:86:85:92:59:
                    f4:e3:b4:b6:c5:67:09:18:f7:4d:56:31:34:3b:13:
                    73:b4:b2:be:5c:c4:f9:ad:cc:fe:e3:55:e2:c9:72:
                    35:ed:64:9c:9a:c3:f3:de:fe:32:9e:db:e3:b5:d3:
                    f7:78:04:f8:b2:c1:da:01:84:f4:26:c3:4b:7b:01:
                    98:78:4c:2b:88:17:08:30:c4:5b:8c:a6:fb:75:e1:
                    1f:f3:cd:23:54:1e:4f:63:0c:76:ec:30:f0:9d:a7:
                    62:c3:2e:da:48:40:be:73:db:d8:1f:29:cf:b2:51:
                    13:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:D5:C2:31:86:7E:27:39:51:55:C0:1C:78:48:B3:B0:1C:86:06:F2
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  149491

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.24.0/23
                IPv6:
                  2400:5760::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:47:f0:7c:20:c2:41:59:ea:04:79:95:02:61:96:bb:45:07:
         f1:9a:fb:00:c1:ce:50:37:af:5c:a9:39:2c:61:da:c1:3a:08:
         f3:5f:a2:63:e6:00:32:a6:d7:2b:f9:1c:d3:59:07:2a:33:94:
         53:2b:a2:e6:24:08:0d:47:b0:a9:78:b0:77:05:f2:2f:d6:a7:
         66:b1:c6:2b:d9:73:c9:ca:bb:b3:ad:93:50:7f:56:a0:67:a0:
         fd:59:54:2e:05:4a:3c:25:4d:32:51:49:ee:bc:09:c8:65:30:
         00:1e:23:e3:01:65:a4:48:73:f6:f9:6c:7f:e3:0a:7c:85:ed:
         b3:d3:5f:e3:87:40:57:50:49:10:2c:60:89:cc:fb:a6:37:57:
         00:5f:a5:11:42:c0:37:be:6b:f8:9c:80:23:13:6f:a4:d1:d7:
         da:f3:42:21:1c:84:36:1a:ee:1e:6a:2d:67:a9:51:3d:61:66:
         45:9f:3e:26:8a:fe:28:cb:59:fc:4d:3e:75:2e:0d:ba:38:ab:
         75:b7:0f:38:62:c9:08:c9:81:47:28:6d:a7:f4:22:b3:51:75:
         49:a5:75:4a:14:4d:9b:2a:dc:b1:46:e7:be:83:cf:78:f6:dd:
         f9:b4:a0:26:05:5a:30:96:3e:12:85:9a:02:69:08:c0:66:69:
         dd:ee:5e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 03:25:33 2024 by rpki-client on console-ams.rpki-client.org