Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPa6KUJsvCB032LFH683jELTuK8.cer
File:                     TPa6KUJsvCB032LFH683jELTuK8.cer (raw, json)
Hash identifier:          vSPWaq4We6hnhgKu3c83WUryi6xzHBV9zl3FrM/yIDQ=
Subject key identifier:   4C:F6:BA:29:42:6C:BC:20:74:DF:62:C5:1F:AF:37:8C:42:D3:B8:AF
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0201F8
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 24 Jul 2024 14:09:13 +0000
Certificate not after:    Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources:    AS: 131226
                          IP: 103.37.200.0/23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131576 (0x201f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 24 14:09:13 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=A9148F50/serialNumber=4CF6BA29426CBC2074DF62C51FAF378C42D3B8AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:15:41:eb:37:19:99:31:9c:69:94:47:b6:09:
                    1d:ed:44:10:b1:fb:8d:94:29:17:6d:87:31:7f:59:
                    2a:6a:b0:86:b1:8f:b1:60:61:1d:11:e6:00:3f:64:
                    48:2a:f0:fb:3b:e0:23:86:96:21:23:e7:f0:79:27:
                    a4:ca:f6:7e:2f:19:5f:e9:72:f7:8c:80:97:cb:00:
                    86:95:50:3e:66:9d:01:f4:28:76:f1:c6:f8:3e:4f:
                    9e:fe:91:44:06:c4:77:12:f5:c6:b2:e7:a8:bc:4b:
                    a5:b4:ab:f3:e2:51:63:67:6d:e3:53:24:c3:d9:53:
                    9a:95:36:2a:78:e1:5b:d7:f4:9c:0f:31:dd:a8:e8:
                    0e:a1:bb:cb:e9:c1:6e:09:d6:5f:0d:bc:77:a2:af:
                    69:03:56:28:66:2f:b1:39:40:8a:b1:a3:d0:33:89:
                    28:47:df:a9:77:3f:78:4d:53:56:46:3a:e4:33:5e:
                    2f:73:7a:42:75:ea:6c:de:92:de:46:f2:bc:48:dd:
                    45:7e:d8:6a:f7:a7:77:13:6d:ae:bb:ed:6f:82:ca:
                    cd:75:5c:1c:d3:68:07:b5:53:ed:9f:f9:36:ce:af:
                    e4:25:a0:14:14:a2:0e:c7:d2:5c:52:c5:0d:bb:08:
                    6e:da:92:f4:8b:10:5d:f9:ea:27:37:f9:e1:e7:a2:
                    f1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:F6:BA:29:42:6C:BC:20:74:DF:62:C5:1F:AF:37:8C:42:D3:B8:AF
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131226

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.37.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:bb:8b:13:bd:c2:94:48:a5:75:4e:e2:bb:83:89:30:ce:f0:
         5d:f0:9d:94:f9:dc:1b:c1:1c:3e:d3:57:d1:47:20:13:a0:4c:
         b0:ab:e4:8b:af:62:2c:48:ce:84:e0:1c:46:12:36:06:70:f7:
         00:55:8c:b4:6b:35:91:fa:8c:20:9d:29:09:7a:c7:7d:db:2f:
         2d:c0:95:c1:b9:ea:cd:55:32:de:62:ca:70:b8:bb:99:85:fe:
         5e:77:0c:42:15:d9:4a:2f:5d:0c:ed:33:5f:96:01:fe:cd:88:
         87:23:56:ac:6f:3a:12:fe:e2:b3:16:fd:8d:c3:a9:e8:b2:a2:
         f9:74:5d:8f:19:08:f1:51:9a:46:5d:29:50:23:19:6b:00:2a:
         e8:90:5f:82:08:d0:16:61:33:0d:86:8a:e4:d3:c2:2d:51:5e:
         1e:c1:01:9b:e9:84:65:cb:3c:38:5a:42:fa:28:14:de:ec:4d:
         fd:c7:60:b3:25:dd:2a:5c:00:dd:88:b5:fc:6f:a8:67:b4:f0:
         8d:6b:fa:57:6c:65:25:eb:09:6c:0d:e8:5e:51:2a:40:b5:70:
         3d:4e:03:d3:8f:53:47:02:bc:f4:b7:3d:59:80:ad:8a:28:83:
         db:5e:f2:dc:22:5e:e3:20:aa:0d:48:7b:05:f8:74:cc:dd:33:
         72:8f:9c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:03:31 2024 by rpki-client on console-fra.rpki-client.org