Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJjKo3y70Riu0iofvIoLVbiAmNE.cer
File:                     SJjKo3y70Riu0iofvIoLVbiAmNE.cer (raw, json)
Hash identifier:          UBQGLZ39NwgJEdR41OPS9Ox75cJnNtartkIQYTWPK0g=
Subject key identifier:   48:98:CA:A3:7C:BB:D1:18:AE:D2:2A:1F:BC:8A:0B:55:B8:80:98:D1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01A997
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 13 Jun 2023 00:07:58 +0000
Certificate not after:    Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources:    AS: 137895
                          IP: 103.116.25.0/24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 21:10:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108951 (0x1a997)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun 13 00:07:58 2023 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=A91C7DC6/serialNumber=4898CAA37CBBD118AED22A1FBC8A0B55B88098D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4b:af:63:e4:5c:8f:b4:35:da:48:4c:ae:27:
                    9e:48:5c:e5:59:77:d2:9e:72:85:4c:1e:1c:35:81:
                    a3:57:8a:a1:b3:fb:f4:b7:59:57:76:20:f9:e7:8a:
                    f0:d6:64:f8:33:3a:f8:57:2f:3d:ed:58:da:29:c5:
                    d6:60:a9:68:e4:5c:a0:75:c2:c3:01:34:2d:4d:4a:
                    a0:59:a3:82:49:55:80:1c:c1:bb:e2:c1:29:07:7d:
                    75:d7:a4:0c:1f:0f:d8:b3:29:d6:0e:ca:6c:cf:da:
                    05:3b:68:12:99:82:9f:32:9d:8d:05:b8:41:ff:a2:
                    eb:0c:0b:dc:84:28:0e:f0:ee:d8:9c:24:7f:79:70:
                    c1:55:77:be:06:a8:bd:f1:2f:9c:2e:83:f8:94:c0:
                    2f:0f:af:3e:5c:c8:4f:9a:0a:96:16:74:fd:6f:ee:
                    b5:d8:d9:b7:59:50:92:4f:20:4e:db:51:c6:15:e4:
                    f2:dc:f0:1e:72:dd:cc:ef:db:49:a1:3e:f4:c4:45:
                    ac:b4:68:27:c6:8e:5b:60:6c:e4:0f:c5:8b:32:d7:
                    b3:32:1a:9c:04:1e:87:3b:91:b1:33:0c:67:bc:94:
                    4a:5a:4f:d5:12:f1:e1:2a:64:8b:61:30:58:f2:a1:
                    1e:29:ee:42:1a:dd:b6:5e:f3:ee:8b:69:b0:9a:4a:
                    84:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:98:CA:A3:7C:BB:D1:18:AE:D2:2A:1F:BC:8A:0B:55:B8:80:98:D1
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137895

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:75:66:5f:23:0b:20:7b:f7:47:c4:ca:6f:db:9b:ff:55:ca:
         21:b0:c7:0d:07:8b:f3:61:a2:61:af:dd:f8:3f:5b:06:7f:6c:
         b1:96:e4:86:73:62:1f:85:53:03:3f:7d:df:bd:02:56:65:48:
         4a:4a:48:99:c6:0d:24:d8:be:25:be:84:19:2a:8f:e8:90:df:
         6c:c9:07:46:7a:ab:f3:ea:1e:d5:0b:0b:89:69:fe:2a:a2:3c:
         87:49:2b:b5:96:54:df:31:f5:29:6b:1a:fc:57:f1:a5:bf:dd:
         d4:f9:ad:ca:18:5e:f2:f5:3d:86:a5:71:8f:0c:4e:eb:a6:ab:
         80:01:59:8d:82:da:20:65:64:b0:26:1c:32:d8:5b:b4:05:bc:
         bd:67:50:6a:03:0c:04:0a:40:85:f4:48:ae:4b:0b:1f:e2:32:
         4b:20:cb:68:03:a3:eb:aa:d8:25:9d:2c:01:5b:f7:53:b2:6f:
         22:b0:8e:e8:98:5d:22:40:a4:8c:85:70:33:1e:12:1b:dc:27:
         b8:f4:92:14:20:98:c0:77:83:9a:cb:1b:b5:b0:d5:15:3e:b5:
         dc:bf:8e:1e:8b:70:1d:da:94:d8:97:dd:9b:66:ef:af:c6:15:
         bf:a7:68:1d:e3:d7:43:48:92:e3:e0:a8:11:25:e4:4b:bb:5c:
         86:02:ba:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:34:23 2024 by rpki-client on console-fra.rpki-client.org