Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPa6KUJsvCB032LFH683jELTuK8.cer
File:                     TPa6KUJsvCB032LFH683jELTuK8.cer (raw, json)
Hash identifier:          P46LYbASKekKhAY94jw/S7/LS1B+il+IGmN5vG1o+JE=
Subject key identifier:   4C:F6:BA:29:42:6C:BC:20:74:DF:62:C5:1F:AF:37:8C:42:D3:B8:AF
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01AE2C
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 04 Jul 2023 14:51:15 +0000
Certificate not after:    Sat 31 Aug 2024 00:00:00 +0000
Subordinate resources:    AS: 131226
                          IP: 103.37.200.0/23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 06:42:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110124 (0x1ae2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul  4 14:51:15 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=A9148F50/serialNumber=4CF6BA29426CBC2074DF62C51FAF378C42D3B8AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:15:41:eb:37:19:99:31:9c:69:94:47:b6:09:
                    1d:ed:44:10:b1:fb:8d:94:29:17:6d:87:31:7f:59:
                    2a:6a:b0:86:b1:8f:b1:60:61:1d:11:e6:00:3f:64:
                    48:2a:f0:fb:3b:e0:23:86:96:21:23:e7:f0:79:27:
                    a4:ca:f6:7e:2f:19:5f:e9:72:f7:8c:80:97:cb:00:
                    86:95:50:3e:66:9d:01:f4:28:76:f1:c6:f8:3e:4f:
                    9e:fe:91:44:06:c4:77:12:f5:c6:b2:e7:a8:bc:4b:
                    a5:b4:ab:f3:e2:51:63:67:6d:e3:53:24:c3:d9:53:
                    9a:95:36:2a:78:e1:5b:d7:f4:9c:0f:31:dd:a8:e8:
                    0e:a1:bb:cb:e9:c1:6e:09:d6:5f:0d:bc:77:a2:af:
                    69:03:56:28:66:2f:b1:39:40:8a:b1:a3:d0:33:89:
                    28:47:df:a9:77:3f:78:4d:53:56:46:3a:e4:33:5e:
                    2f:73:7a:42:75:ea:6c:de:92:de:46:f2:bc:48:dd:
                    45:7e:d8:6a:f7:a7:77:13:6d:ae:bb:ed:6f:82:ca:
                    cd:75:5c:1c:d3:68:07:b5:53:ed:9f:f9:36:ce:af:
                    e4:25:a0:14:14:a2:0e:c7:d2:5c:52:c5:0d:bb:08:
                    6e:da:92:f4:8b:10:5d:f9:ea:27:37:f9:e1:e7:a2:
                    f1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:F6:BA:29:42:6C:BC:20:74:DF:62:C5:1F:AF:37:8C:42:D3:B8:AF
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131226

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.37.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:14:18:1d:80:51:4c:6f:59:05:0c:81:23:59:c0:eb:53:1a:
         fa:fe:54:5d:72:73:38:c2:8a:75:9f:13:92:e4:b0:46:2e:c6:
         2a:55:44:e8:80:09:ec:3a:78:89:cc:c8:51:4c:26:50:9c:fe:
         0b:42:3c:f3:4b:02:c1:7a:e6:6e:ab:c5:2f:d6:9a:ad:7f:dc:
         3f:a0:64:8a:f8:cd:c6:fb:42:0a:17:db:5e:58:e1:cc:36:26:
         d4:2a:62:7c:24:48:bc:99:7a:0d:63:4d:52:0f:74:a5:a6:4d:
         0e:96:6c:4b:d6:b6:7c:c7:25:cd:15:2e:f6:88:23:25:a8:09:
         82:7f:5a:53:36:22:2b:dc:ea:1e:04:65:1d:91:f9:14:a3:3b:
         19:50:ad:1e:64:79:05:42:ba:a4:f0:98:3d:36:79:32:95:dd:
         2e:2a:71:b2:97:f9:15:63:82:43:16:1b:b9:88:a1:a1:d7:5b:
         e9:7d:56:5b:07:ba:4a:d2:12:e2:40:e2:94:71:94:e5:05:b7:
         15:43:62:be:71:ac:b9:a8:7b:1a:55:9e:67:d9:e7:5e:43:43:
         32:ad:c6:7a:04:4f:7f:e1:b3:af:b2:c6:f9:21:b7:2f:10:2b:
         e4:ca:df:67:eb:93:12:3f:14:b2:30:d8:ce:a1:c0:f3:36:e4:
         60:a2:bf:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 07:08:44 2024 by rpki-client on console-fra.rpki-client.org