Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGamZng2gcoW2OtUCYIDmTPh1lM.cer
File:                     TGamZng2gcoW2OtUCYIDmTPh1lM.cer (raw, json)
Hash identifier:          3B9qGlEAbZYJCuNqN4x9PLiuASSZYoeV076ChsJZVKk=
Subject key identifier:   4C:66:A6:66:78:36:81:CA:16:D8:EB:54:09:82:03:99:33:E1:D6:53
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01E83D
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9147CEA/75B59FA49CC311EDBE6D1F70C4F9AE02/TGamZng2gcoW2OtUCYIDmTPh1lM.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9147CEA/75B59FA49CC311EDBE6D1F70C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 01 Apr 2024 15:07:13 +0000
Certificate not after:    Thu 01 Aug 2024 00:00:00 +0000
Subordinate resources:    AS: 150725
                          IP: 103.71.102.0/23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 May 2024 15:40:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124989 (0x1e83d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Apr  1 15:07:13 2024 GMT
            Not After : Aug  1 00:00:00 2024 GMT
        Subject: CN=A9147CEA/serialNumber=4C66A666783681CA16D8EB540982039933E1D653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:07:4f:e1:49:78:ec:99:1c:a1:21:1f:04:55:
                    8d:54:7e:eb:99:c6:80:26:fb:6b:cf:fe:70:cb:b4:
                    c1:8e:d8:a0:c5:68:5d:ea:9e:d1:79:97:8a:4b:09:
                    c0:c7:42:a6:2a:1c:4f:a5:f8:d8:bc:db:32:0d:4b:
                    0d:ef:ec:80:19:a0:e4:d0:7b:42:ed:0e:00:ae:37:
                    93:ad:53:16:dc:47:68:3b:d7:fd:1b:9c:7a:9f:f3:
                    db:94:6c:63:29:66:cf:61:ca:bf:6e:7f:3d:6b:1c:
                    59:95:9a:c3:0f:af:47:6f:cb:3e:f3:2b:b5:ba:8e:
                    10:4e:d6:a4:04:2c:0d:4c:44:7a:9f:4f:14:c7:d7:
                    7e:36:70:e1:f3:19:c5:d7:56:b2:72:3b:26:3f:82:
                    89:a6:d5:2c:04:e4:b8:59:50:ea:fb:d3:1a:49:cc:
                    80:53:de:88:67:ec:53:16:b5:05:e5:b5:2c:d9:97:
                    50:81:e8:4d:c5:a4:ad:40:4b:ba:99:04:5b:7f:ac:
                    80:7a:d1:cc:5d:8d:d7:3a:37:36:e0:2b:97:50:b3:
                    cf:ff:79:8a:f6:1a:d6:ba:53:4f:f9:8c:71:f9:53:
                    4e:93:b1:3b:da:2e:c6:43:bb:8a:c5:e1:d8:ee:25:
                    a9:cd:9f:9c:2c:b7:6d:e8:f0:b5:a9:fe:b8:f3:3c:
                    20:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:66:A6:66:78:36:81:CA:16:D8:EB:54:09:82:03:99:33:E1:D6:53
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9147CEA/75B59FA49CC311EDBE6D1F70C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9147CEA/75B59FA49CC311EDBE6D1F70C4F9AE02/TGamZng2gcoW2OtUCYIDmTPh1lM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  150725

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.71.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b2:7f:d4:ee:cc:bc:9a:26:c3:25:36:5f:7c:7f:09:a3:e9:7a:
         d6:42:37:54:93:7d:73:36:fb:a8:a6:e1:26:16:40:01:1a:17:
         eb:88:9f:4f:d6:dd:0f:26:30:c5:54:d6:70:61:e4:58:c3:5a:
         46:d1:1f:19:6b:74:5d:02:fb:81:1d:b4:4e:64:03:22:12:ab:
         d3:77:51:27:eb:c8:3e:55:f6:27:ef:4e:ef:47:54:6d:ac:d7:
         99:cc:09:bf:d3:48:9f:81:ad:75:2a:c0:33:f5:34:e1:4c:3a:
         fb:ac:2d:eb:e8:32:b5:e3:c7:fe:33:cc:95:63:b7:bb:2a:e4:
         44:0b:5b:89:8f:d1:72:9b:65:ab:9f:43:f5:9f:5d:19:a5:9b:
         70:40:b6:ca:fb:d3:0d:e8:5b:d1:99:21:68:1b:9a:39:80:0e:
         d2:c3:cd:14:af:45:be:b9:89:10:60:56:af:e6:ff:e1:bf:c6:
         36:b1:69:c7:8c:cc:41:7c:e8:1a:50:2a:3d:96:1c:ec:5a:f2:
         7d:99:be:15:ea:55:0a:67:c8:c6:47:f4:c5:6a:3c:4a:86:f4:
         20:18:d0:aa:37:74:2a:48:a2:22:7d:9c:37:db:eb:81:c3:fb:
         11:b5:46:1f:da:77:90:1b:f3:95:de:5e:69:ad:9a:a3:f6:69:
         2b:57:18:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 16:36:31 2024 by rpki-client on console-fra.rpki-client.org