Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sew5-RvAfq8SKvqqC9t7U9iBDAc.cer
File:                     Sew5-RvAfq8SKvqqC9t7U9iBDAc.cer (raw, json)
Hash identifier:          D8ZHLsbcOdCytPCs8ebus01hWsKiChAXWrKPv/m0Ob0=
Subject key identifier:   49:EC:39:F9:1B:C0:7E:AF:12:2A:FA:AA:0B:DB:7B:53:D8:81:0C:07
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       013ACD
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91736B7/4054701A7B4B11EBA8B3523CC4F9AE02/Sew5-RvAfq8SKvqqC9t7U9iBDAc.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91736B7/4054701A7B4B11EBA8B3523CC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 15 Dec 2021 13:25:28 +0000
Certificate not after:    Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 139784
                          IP: 103.145.50.0/23
                          IP: 2001:df5:4280::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 02:50:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80589 (0x13acd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec 15 13:25:28 2021 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=A91736B7/serialNumber=49EC39F91BC07EAF122AFAAA0BDB7B53D8810C07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:50:63:c1:94:b7:e4:8b:dc:81:d9:f1:e3:ea:
                    a0:f9:ee:d5:c5:71:31:32:c6:0e:43:32:d0:cc:c1:
                    7c:8a:e7:81:6d:9c:75:7f:39:7e:c7:32:a9:1c:56:
                    ab:57:28:09:37:e5:34:70:e5:08:12:2b:fa:64:ac:
                    d1:78:15:b0:3d:e8:b0:c2:88:9c:48:b0:7c:6a:60:
                    bf:c8:6c:a3:1a:30:24:3e:3c:84:bb:a0:32:ae:f6:
                    c9:f3:f9:28:8d:66:9d:ad:41:cc:3c:c9:42:45:21:
                    22:23:e5:4e:37:01:96:b3:dc:6e:01:0b:f0:a1:60:
                    e9:a1:77:65:6a:93:5a:94:2f:c9:65:30:7d:55:dd:
                    22:0f:e5:ad:f4:c2:3d:80:ea:43:f1:03:70:21:e9:
                    33:dd:11:e4:63:2f:03:d7:b8:84:71:c9:c4:0a:ef:
                    4a:f7:e2:53:52:05:2c:65:ba:6c:3a:ee:2b:46:26:
                    5b:cd:e0:e1:b3:2b:68:96:90:7c:4b:4c:05:cc:59:
                    8a:1c:31:45:83:bc:fd:bf:c2:1e:68:5c:48:d6:cb:
                    9d:2e:38:89:6e:e4:4f:99:f3:39:ea:33:a1:37:66:
                    a3:76:cc:c9:7b:bf:a9:b9:f7:7f:95:5f:59:fb:83:
                    65:9e:50:05:96:6f:3a:90:f9:8b:2b:8a:6a:19:42:
                    0d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:EC:39:F9:1B:C0:7E:AF:12:2A:FA:AA:0B:DB:7B:53:D8:81:0C:07
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91736B7/4054701A7B4B11EBA8B3523CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91736B7/4054701A7B4B11EBA8B3523CC4F9AE02/Sew5-RvAfq8SKvqqC9t7U9iBDAc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  139784

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.50.0/23
                IPv6:
                  2001:df5:4280::/48

    Signature Algorithm: sha256WithRSAEncryption
         c5:40:24:fb:44:f4:1f:b8:be:96:e6:96:04:9a:27:56:2d:14:
         e1:ee:d0:5f:de:eb:00:fb:d1:d3:ef:2f:b3:f2:84:75:39:bb:
         df:df:92:16:29:66:fa:49:db:fc:3e:ba:0e:80:92:21:5e:68:
         41:e5:85:4c:eb:f5:88:e9:02:ee:7d:fd:4f:9a:22:24:5d:ca:
         d9:5a:de:01:75:b2:56:32:2b:3e:63:43:10:95:1f:35:09:6d:
         b1:91:83:d2:de:61:00:fc:95:b9:ae:a3:8d:9d:05:bf:e1:ca:
         16:3a:5a:d9:40:ee:ce:08:89:4a:f8:1b:b6:4c:49:ea:65:46:
         43:fc:c0:b5:98:30:a1:90:bc:21:ea:eb:6e:a0:b2:74:aa:e9:
         00:fb:d9:d6:ad:fb:36:3a:da:7a:cd:0f:b6:ae:26:5b:54:d4:
         af:ca:89:52:5a:66:30:5b:7e:5c:91:e1:bc:96:37:19:da:20:
         78:20:e4:42:60:85:d0:d7:1b:3e:d5:51:c1:44:43:4b:b8:e2:
         90:3a:00:87:15:2a:7e:84:ec:e2:49:4b:42:44:f4:50:24:7e:
         ed:8c:61:23:27:11:19:89:48:22:0e:3c:30:8a:cc:6e:17:a1:
         45:9c:66:01:69:ad:c0:f9:61:6a:a5:e9:27:07:0d:df:9b:05:
         79:f4:11:e0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 20 03:57:52 2024 by rpki-client on console-fra.rpki-client.org