Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer
File:                     T90ck6E8upG0-LfyxlGPSLoXC60.cer (raw, json)
Hash identifier:          adh31fYYY7DriP67eg8RtO4sss61qTqw2MZapIQkNgg=
Subject key identifier:   4F:DD:1C:93:A1:3C:BA:91:B4:F8:B7:F2:C6:51:8F:48:BA:17:0B:AD
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01A791
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 02 Jun 2023 02:49:41 +0000
Certificate not after:    Sat 31 Aug 2024 00:00:00 +0000
Subordinate resources:    AS: 10098
                          IP: 45.116.80.0/22
                          IP: 49.213.0.0/20
                          IP: 103.56.116.0/22
                          IP: 202.123.64.0/19
                          IP: 2407:7200::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 07:49:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108433 (0x1a791)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun  2 02:49:41 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=A91BC6DD/serialNumber=4FDD1C93A13CBA91B4F8B7F2C6518F48BA170BAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:65:b7:83:2e:c4:34:23:96:5e:78:4f:fe:90:
                    39:8d:6f:4f:4d:7d:63:16:04:46:0b:03:94:96:77:
                    39:df:5c:75:14:87:2e:ca:23:2c:77:c8:f9:f7:84:
                    dc:3a:43:e0:79:a6:02:e7:e1:5e:b0:c6:f4:bc:9d:
                    47:ef:1d:23:fc:e0:20:8a:6e:ad:cf:df:5b:48:7a:
                    9e:65:43:b5:38:3b:b6:32:fb:96:cf:3c:11:71:d6:
                    89:fe:dc:05:a3:12:3b:15:23:8d:5f:7e:38:32:c7:
                    1c:24:df:7c:8f:96:e6:02:4d:83:e6:ba:58:20:e0:
                    d6:c1:a7:b2:37:a4:92:8b:45:b7:af:77:63:d5:af:
                    5f:a7:68:95:e9:e8:b7:e2:ea:6e:ef:8c:0b:53:3b:
                    a0:cf:5d:11:9d:b6:ba:1a:fa:91:3b:5c:ea:b6:2f:
                    17:b0:ab:65:22:3f:ab:c5:5b:19:f3:0b:49:53:1b:
                    42:10:39:83:fb:05:17:a3:56:f9:49:04:0d:f8:e7:
                    f9:15:18:71:a0:b1:b0:73:f0:38:8b:d4:ad:62:e2:
                    3d:9c:c0:23:d8:a7:20:43:a6:e7:f4:73:b8:5a:87:
                    80:ec:86:8a:74:27:21:e7:e7:79:f9:ff:10:4b:cf:
                    9f:18:67:0c:58:c2:29:33:02:93:b3:af:51:16:8a:
                    c4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:DD:1C:93:A1:3C:BA:91:B4:F8:B7:F2:C6:51:8F:48:BA:17:0B:AD
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  10098

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.116.80.0/22
                  49.213.0.0/20
                  103.56.116.0/22
                  202.123.64.0/19
                IPv6:
                  2407:7200::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:47:e2:01:65:84:75:67:e4:48:0e:7e:10:b8:db:9b:25:3e:
         09:fb:72:09:f3:f3:bd:6b:6c:dd:e2:7d:9f:6b:5b:2a:11:97:
         9d:0d:6f:43:06:d4:ad:84:a3:4c:90:b5:c8:bf:de:34:da:83:
         9d:86:27:ca:60:6e:79:70:db:d5:ad:e2:80:f1:60:e3:45:a7:
         fc:18:ab:c0:ca:5a:31:88:40:a3:76:72:93:c2:96:4b:d6:58:
         4b:04:f6:5a:bc:64:f4:cc:6b:8d:2f:e6:f1:49:52:7f:c2:2f:
         a5:00:9c:bc:1c:01:46:c1:df:4e:f9:4a:6c:1e:f2:8a:9a:a6:
         5b:0b:34:15:e8:67:52:a2:ec:ba:c8:8b:04:35:8e:9d:5f:f9:
         80:66:84:c1:0f:04:1f:fe:b0:f9:56:7a:bd:16:6f:e6:f2:98:
         7a:62:94:11:6c:20:f8:36:0d:93:91:18:52:de:26:d0:ed:cc:
         40:a8:ed:bc:b2:5a:1d:5a:b4:50:92:d3:dc:2d:65:ca:74:b0:
         6b:de:6b:9a:64:27:33:cf:b2:f3:80:38:76:68:22:21:62:84:
         dc:eb:29:91:ad:dc:69:79:19:db:d4:e2:a5:aa:a4:e6:6a:43:
         90:b4:b7:7b:94:39:43:f7:07:11:dd:22:3b:76:76:14:ee:d9:
         ac:d2:dc:c4
-----BEGIN CERTIFICATE-----
MIIGOjCCBSKgAwIBAgIDAaeRMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMDYwMjAyNDk0MVoXDTI0MDgzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQkM2REQxMTAvBgNVBAUTKDRGREQxQzkzQTEzQ0JBOTFCNEY4QjdG
MkM2NTE4RjQ4QkExNzBCQUQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDXZbeDLsQ0I5ZeeE/+kDmNb09NfWMWBEYLA5SWdznfXHUUhy7KIyx3yPn3hNw6
Q+B5pgLn4V6wxvS8nUfvHSP84CCKbq3P31tIep5lQ7U4O7Yy+5bPPBFx1on+3AWj
EjsVI41ffjgyxxwk33yPluYCTYPmulgg4NbBp7I3pJKLRbevd2PVr1+naJXp6Lfi
6m7vjAtTO6DPXRGdtroa+pE7XOq2Lxewq2UiP6vFWxnzC0lTG0IQOYP7BRejVvlJ
BA345/kVGHGgsbBz8DiL1K1i4j2cwCPYpyBDpuf0c7hah4Dshop0JyHn53n5/xBL
z58YZwxYwikzApOzr1EWisRZAgMBAAGjggMvMIIDKzAdBgNVHQ4EFgQUT90ck6E8
upG0+LfyxlGPSLoXC60wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUJDNkREL0YzRkI5MDU2QzBGNDExRUFCMDVERkM1RUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFCQzZERC9GM0ZCOTA1NkMwRjQxMUVBQjA1REZDNUVDNEY5QUUwMi9UOTBjazZF
OHVwRzAtTGZ5eGxHUFNMb1hDNjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGQYIKwYBBQUHAQgBAf8ECjAI
oAYwBAICJ3IwQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgDBAItdFADBAQx1QAD
BAJnOHQDBAXKe0AwDQQCAAIwBwMFACQHcgAwDQYJKoZIhvcNAQELBQADggEBAJpH
4gFlhHVn5EgOfhC425slPgn7cgnz871rbN3ifZ9rWyoRl50Nb0MG1K2Eo0yQtci/
3jTag52GJ8pgbnlw29Wt4oDxYONFp/wYq8DKWjGIQKN2cpPClkvWWEsE9lq8ZPTM
a40v5vFJUn/CL6UAnLwcAUbB3075Smwe8oqaplsLNBXoZ1Ki7LrIiwQ1jp1f+YBm
hMEPBB/+sPlWer0Wb+bymHpilBFsIPg2DZORGFLeJtDtzECo7byyWh1atFCS09wt
Zcp0sGvea5pkJzPPsvOAOHZoIiFihNzrKZGt3Gl5GdvU4qWqpOZqQ5C0t3uUOUP3
BxHdIjt2dhTu2azS3MQ=
-----END CERTIFICATE-----
Generated at Fri Apr 26 11:02:57 2024 by rpki-client on console-ams.rpki-client.org