Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tap3b4eSgA9CuJeA8y2ecydhVdQ.cer
File:                     Tap3b4eSgA9CuJeA8y2ecydhVdQ.cer (raw, json)
Hash identifier:          EEXkfTQGWgK61ugFWHjzp9dWjek4DhOyNzP+kRIn/L0=
Subject key identifier:   4D:AA:77:6F:87:92:80:0F:42:B8:97:80:F3:2D:9E:73:27:61:55:D4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01B35B
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 31 Jul 2023 16:45:42 +0000
Certificate not after:    Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources:    AS: 136786
                          IP: 103.97.110.0/24
                          IP: 103.115.4.0 -- 103.115.6.255
                          IP: 2001:df1:c700::/47

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 05:07:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111451 (0x1b35b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 31 16:45:42 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=A91392AE/serialNumber=4DAA776F8792800F42B89780F32D9E73276155D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6b:95:73:51:e7:48:9c:ea:1c:cc:a1:7a:a8:
                    aa:59:98:61:fb:d7:45:98:c0:80:68:17:9a:33:54:
                    5f:92:80:d2:36:7b:4d:e4:72:1c:3f:5a:41:e4:83:
                    cd:28:67:73:a8:ef:0a:c7:ca:58:31:37:9a:98:36:
                    27:05:07:53:c0:e5:fd:5c:2f:c3:35:a1:c6:88:dc:
                    f6:24:1e:03:12:af:5a:d8:01:02:eb:4f:0d:22:c8:
                    10:70:0a:ea:17:4d:9c:ec:cb:47:13:d7:50:da:30:
                    ee:69:80:51:2a:83:f7:ed:11:9e:53:39:a7:83:e0:
                    91:4b:3b:bd:c4:bc:67:d5:a8:f1:fc:d1:f9:65:77:
                    a2:ef:60:e8:77:8c:86:da:e1:c4:6b:41:b0:a7:db:
                    a9:aa:83:42:e5:bb:5e:42:f1:8d:e7:70:3b:69:dd:
                    81:3c:fc:5c:eb:ec:f9:b7:11:67:41:a2:43:f6:a5:
                    3a:e2:a1:cc:48:83:8f:9d:eb:8c:88:be:80:8b:4a:
                    c4:1e:a7:a6:30:8a:e6:31:29:5e:b0:d9:7b:28:a9:
                    53:a8:a7:77:81:8e:e5:49:f1:7e:9e:29:3b:e0:08:
                    aa:b3:7e:c6:5f:c6:43:24:be:83:54:c7:cf:d1:4f:
                    d5:22:03:2b:0a:a2:ee:21:9c:a5:ce:f9:c8:0e:92:
                    1b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:AA:77:6F:87:92:80:0F:42:B8:97:80:F3:2D:9E:73:27:61:55:D4
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  136786

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.110.0/24
                  103.115.4.0-103.115.6.255
                IPv6:
                  2001:df1:c700::/47

    Signature Algorithm: sha256WithRSAEncryption
         93:8a:d4:c9:6b:fa:a9:31:f9:ae:6d:f6:01:0a:39:f4:26:29:
         e2:a7:d8:3f:dd:72:56:d1:29:ba:aa:7c:20:a7:c9:d0:73:b6:
         00:9c:a5:4a:29:34:2f:e3:ce:03:c2:bd:e7:3a:92:55:1d:78:
         b8:b9:80:36:a6:40:54:62:4e:ce:46:df:c3:f2:59:2a:dd:b8:
         23:f8:3d:ff:9e:38:41:33:d1:ff:25:da:f4:18:da:d1:ef:e3:
         39:57:63:11:98:9c:92:f5:43:01:5e:34:8e:09:64:02:c2:b6:
         92:4c:63:53:1e:6c:70:9b:e5:82:c3:a8:f0:cf:db:37:22:1d:
         29:5a:ee:ec:93:00:26:20:44:e1:fe:fd:0e:2e:50:2f:f5:58:
         67:a7:33:b6:fa:b9:58:fc:d1:72:37:4a:49:37:d2:bb:b4:5f:
         0b:15:f9:59:f9:05:ff:db:7e:56:b6:7e:be:62:97:62:d1:2c:
         2e:48:33:25:1e:3c:0a:28:84:0a:24:63:92:6d:a0:fc:a6:e9:
         51:63:48:f6:70:77:22:71:f6:b6:b6:00:9d:ba:e3:fe:40:c4:
         26:99:59:90:62:58:b6:bb:58:af:5f:85:4e:73:28:9a:de:f4:
         c1:c9:b9:4c:35:54:b0:c1:54:e6:49:b3:59:88:02:22:2f:f6:
         8e:11:44:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 05:45:18 2024 by rpki-client on console-fra.rpki-client.org