Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TN7H1CHxboUWcqgSOd0Y_IweOVY.cer
File:                     TN7H1CHxboUWcqgSOd0Y_IweOVY.cer (raw, json)
Hash identifier:          PYG7YfrsHte5E5XIQXQWLVtd2y1ovX/ONpauqbietNw=
Subject key identifier:   4C:DE:C7:D4:21:F1:6E:85:16:72:A8:12:39:DD:18:FC:8C:1E:39:56
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01C143
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sun 01 Oct 2023 22:21:16 +0000
Certificate not after:    Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 147185
                          IP: 103.174.70.0/23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 May 2024 21:46:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115011 (0x1c143)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct  1 22:21:16 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=A91D0A62/serialNumber=4CDEC7D421F16E851672A81239DD18FC8C1E3956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:02:22:23:d3:91:fa:33:15:79:d2:16:87:25:
                    e9:41:2a:a5:eb:f7:13:63:e5:55:d6:36:94:9e:65:
                    6c:0f:68:dd:b1:bf:0a:95:5a:3a:9f:27:4c:4b:68:
                    1f:c5:03:a4:ab:54:af:4a:68:cf:1e:a9:7c:18:8b:
                    ce:79:f3:2d:c6:2f:37:ef:e6:3d:26:eb:ad:27:d0:
                    a2:90:fc:71:b1:bc:35:4a:2f:ba:68:52:e7:59:21:
                    cd:82:20:b1:0f:d5:c5:20:cb:c6:e8:f2:c9:01:47:
                    bb:96:a4:07:19:89:65:85:6a:15:2e:d6:b1:61:99:
                    da:ff:b3:e7:d2:12:f8:50:88:11:be:d1:26:40:fa:
                    21:56:e5:31:f9:d3:a6:2d:89:a2:e7:2c:b4:03:94:
                    8b:87:0f:46:8f:95:78:f3:d8:ed:1b:ee:48:eb:87:
                    cc:46:19:d9:0b:d8:f5:b9:53:08:8a:6b:2e:a9:a5:
                    92:97:ef:65:70:f0:aa:51:b9:da:31:c2:0d:80:55:
                    78:0e:48:d0:27:e2:f9:cf:ea:bf:c2:53:6a:26:e1:
                    e2:d2:5d:18:12:0b:7d:3c:cc:3e:30:e2:90:a0:7c:
                    d7:6b:e4:4e:1f:69:96:cb:c4:3a:29:87:07:b6:ba:
                    b8:e5:71:15:71:82:60:56:81:bd:77:d5:e1:70:e6:
                    d4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:DE:C7:D4:21:F1:6E:85:16:72:A8:12:39:DD:18:FC:8C:1E:39:56
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  147185

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:95:e2:d8:98:ce:9f:1d:28:c9:c3:8d:ce:69:be:af:c2:a1:
         fb:d3:86:2d:c4:07:2c:d4:9d:58:07:cc:55:20:3e:1b:a7:41:
         26:47:7e:94:b6:3c:0a:1f:63:fc:5f:e3:0f:fe:7b:75:c3:b5:
         3a:18:5e:76:7b:83:69:32:ba:13:cf:6f:a4:dd:ab:b4:04:f1:
         a4:b7:33:ec:d6:68:51:d1:95:bf:14:7c:ef:36:af:91:e2:b7:
         bd:74:86:c3:cf:b7:dc:25:ee:d1:86:07:a7:24:e6:f9:38:f8:
         00:3d:e6:13:b3:84:4c:ba:90:f7:ec:ad:64:5d:4f:89:f7:68:
         56:d6:51:fd:01:64:3a:39:cc:12:4d:f4:aa:c7:4f:38:1a:94:
         8e:98:3d:35:4a:fc:98:8f:65:aa:38:37:70:f3:ca:f4:f5:27:
         2e:e3:59:5a:7a:82:cc:69:4e:e5:d3:09:25:ba:32:98:fd:f5:
         21:f1:56:fb:11:4f:1c:30:6e:1a:b1:8e:bd:c4:db:1c:28:73:
         08:15:6e:b6:39:77:e5:db:86:73:a3:b0:d6:af:9b:98:eb:42:
         10:8c:b4:e4:4b:91:4e:8d:f5:4c:86:70:56:28:ab:8c:4f:9b:
         99:42:be:a9:96:e6:d6:11:5b:90:cc:34:07:a7:f5:dc:37:92:
         2a:28:a7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 22:30:24 2024 by rpki-client on console-fra.rpki-client.org