Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T0N-Fx5Z94FDLE7C-v5Jvn8Vfs0.cer
File:                     T0N-Fx5Z94FDLE7C-v5Jvn8Vfs0.cer (raw, json)
Hash identifier:          +2nBn3JCNpXz5R9kYjq7wRPTiOCD+kar4TaaOoYcWuc=
Subject key identifier:   4F:43:7E:17:1E:59:F7:81:43:2C:4E:C2:FA:FE:49:BE:7F:15:7E:CD
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01E226
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91C0443/9C09BCA872D411E89B1EBA25C4F9AE02/T0N-Fx5Z94FDLE7C-v5Jvn8Vfs0.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91C0443/9C09BCA872D411E89B1EBA25C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sat 02 Mar 2024 00:09:32 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 137275
                          IP: 103.106.146.0/23
                          IP: 2001:df3:ad00::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Apr 2024 02:50:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123430 (0x1e226)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Mar  2 00:09:32 2024 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=A91C0443/serialNumber=4F437E171E59F781432C4EC2FAFE49BE7F157ECD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cc:d9:e5:e8:76:d6:f2:bf:e6:fb:0d:0b:d1:
                    a2:6b:46:72:50:6c:29:cb:c6:94:1f:58:c3:f6:4e:
                    af:e3:b9:1e:5c:c8:7d:50:6d:35:d0:6d:86:56:01:
                    eb:ec:69:9e:0d:d4:6a:b0:09:36:df:78:02:1e:7a:
                    f5:5c:94:61:61:ab:ca:6c:71:f9:01:5b:bb:a7:24:
                    a4:c3:1d:97:65:ac:52:b9:d1:5c:37:81:77:a1:fa:
                    de:ea:1f:58:2f:d7:88:8c:35:c9:4e:e9:00:07:b3:
                    75:44:1a:ec:0f:2f:d2:8d:d5:ec:e0:de:53:61:27:
                    98:ab:81:59:24:83:e8:05:52:5c:c9:b9:f5:9a:91:
                    71:cf:7b:bd:f1:99:2e:fb:1d:9a:50:f1:d0:f1:ef:
                    cf:34:d2:d5:cf:c7:ce:71:3d:ff:bf:59:bc:e9:aa:
                    51:d5:82:6b:53:78:bd:2e:08:b3:8b:93:6f:f1:b0:
                    2c:72:25:78:53:ff:6e:8e:5c:ad:69:74:57:cb:08:
                    aa:fd:fe:99:ca:94:02:81:9e:1f:a5:a2:5f:20:60:
                    c9:f4:34:ad:2e:5b:4e:de:d1:71:83:93:2d:5f:e6:
                    c6:6f:95:86:ad:ed:aa:ed:bc:e3:f9:1e:a2:61:0d:
                    e1:57:6f:db:f4:e6:72:e6:e1:fa:9e:87:c5:6f:56:
                    c3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:43:7E:17:1E:59:F7:81:43:2C:4E:C2:FA:FE:49:BE:7F:15:7E:CD
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C0443/9C09BCA872D411E89B1EBA25C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C0443/9C09BCA872D411E89B1EBA25C4F9AE02/T0N-Fx5Z94FDLE7C-v5Jvn8Vfs0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137275

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.146.0/23
                IPv6:
                  2001:df3:ad00::/48

    Signature Algorithm: sha256WithRSAEncryption
         b1:1f:5a:b0:ac:2e:77:de:7a:2c:fd:b6:4f:41:ca:85:82:89:
         63:a2:06:f0:86:a8:33:eb:cf:a8:cc:b1:f3:22:eb:88:d4:62:
         66:1e:17:f2:bb:3d:32:f0:d0:6d:1c:df:40:2f:5f:69:99:50:
         b0:f7:76:1f:c7:c6:b5:53:c6:f0:2e:40:18:ec:e1:f4:d6:36:
         84:9a:c8:12:0f:f4:a4:d6:1f:c5:2f:f6:55:f0:d6:1f:aa:18:
         3e:62:84:cf:3c:3b:2e:dd:5f:2e:0d:2b:0c:00:b5:1a:b3:53:
         2c:aa:c3:f3:24:2f:51:a2:57:1c:d6:1a:a3:7d:37:cb:9c:12:
         91:a9:e8:56:61:cc:8a:d2:77:e6:3d:67:d3:d2:6e:a9:8c:3c:
         e2:7a:f5:0a:66:4f:d5:e9:7c:25:93:b9:13:4c:95:86:72:59:
         1a:bf:68:d0:f3:46:7d:87:0e:1d:74:0f:c5:ce:dd:60:2b:d1:
         87:6b:00:f8:5e:64:b6:fc:0b:64:9e:f5:de:5e:d7:df:e1:3f:
         be:28:e3:01:5d:2c:7a:c6:dd:1b:4b:5a:22:fd:16:6e:ba:36:
         cc:ac:7c:e3:3e:c8:1a:5e:fc:02:75:e0:cd:0e:28:4b:89:2b:
         05:1a:e5:f8:24:2b:8b:cc:b4:68:00:d3:30:6d:97:0b:9c:1d:
         70:56:b7:12
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAeImMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDMwMjAwMDkzMloXDTI0MDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQzA0NDMxMTAvBgNVBAUTKDRGNDM3RTE3MUU1OUY3ODE0MzJDNEVD
MkZBRkU0OUJFN0YxNTdFQ0QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC0zNnl6HbW8r/m+w0L0aJrRnJQbCnLxpQfWMP2Tq/juR5cyH1QbTXQbYZWAevs
aZ4N1GqwCTbfeAIeevVclGFhq8pscfkBW7unJKTDHZdlrFK50Vw3gXeh+t7qH1gv
14iMNclO6QAHs3VEGuwPL9KN1ezg3lNhJ5irgVkkg+gFUlzJufWakXHPe73xmS77
HZpQ8dDx78800tXPx85xPf+/WbzpqlHVgmtTeL0uCLOLk2/xsCxyJXhT/26OXK1p
dFfLCKr9/pnKlAKBnh+lol8gYMn0NK0uW07e0XGDky1f5sZvlYat7artvOP5HqJh
DeFXb9v05nLm4fqeh8VvVsMJAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUT0N+Fx5Z
94FDLE7C+v5Jvn8Vfs0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUMwNDQzLzlDMDlCQ0E4NzJENDExRTg5QjFFQkEyNUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFDMDQ0My85QzA5QkNBODcyRDQxMUU4OUIxRUJBMjVDNEY5QUUwMi9UME4tRng1
Wjk0RkRMRTdDLXY1SnZuOFZmczAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhg7MDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ2qSMA8EAgAC
MAkDBwAgAQ3zrQAwDQYJKoZIhvcNAQELBQADggEBALEfWrCsLnfeeiz9tk9ByoWC
iWOiBvCGqDPrz6jMsfMi64jUYmYeF/K7PTLw0G0c30AvX2mZULD3dh/HxrVTxvAu
QBjs4fTWNoSayBIP9KTWH8Uv9lXw1h+qGD5ihM88Oy7dXy4NKwwAtRqzUyyqw/Mk
L1GiVxzWGqN9N8ucEpGp6FZhzIrSd+Y9Z9PSbqmMPOJ69QpmT9XpfCWTuRNMlYZy
WRq/aNDzRn2HDh10D8XO3WAr0YdrAPheZLb8C2Se9d5e19/hP74o4wFdLHrG3RtL
WiL9Fm66NsysfOM+yBpe/AJ14M0OKEuJKwUa5fgkK4vMtGgA0zBtlwucHXBWtxI=
-----END CERTIFICATE-----
Generated at Fri Mar 29 03:25:33 2024 by rpki-client on console-ams.rpki-client.org