Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Teu44SIr4OPyOu23UkXg-XuHx00.cer
File:                     Teu44SIr4OPyOu23UkXg-XuHx00.cer (raw, json)
Hash identifier:          7Er0HXv6CTbOebZhY3jziDQDtk4g5h33l0PyZFsvJqc=
Subject key identifier:   4D:EB:B8:E1:22:2B:E0:E3:F2:3A:ED:B7:52:45:E0:F9:7B:87:C7:4D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       019323
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 27 Mar 2023 02:45:25 +0000
Certificate not after:    Wed 29 May 2024 00:00:00 +0000
Subordinate resources:    AS: 23703
                          AS: 139829
                          IP: 202.78.16.0/20
                          IP: 2405:d980::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Apr 2024 13:06:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103203 (0x19323)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Mar 27 02:45:25 2023 GMT
            Not After : May 29 00:00:00 2024 GMT
        Subject: CN=A915DA76/serialNumber=4DEBB8E1222BE0E3F23AEDB75245E0F97B87C74D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:52:b8:ac:88:7e:0b:f0:e9:13:8c:45:38:6e:
                    5e:38:71:c4:70:50:6d:a5:98:be:b3:1e:32:80:60:
                    17:8a:f4:ab:16:d4:0c:af:82:63:ff:01:be:a3:1d:
                    7b:30:02:33:63:d4:f1:e1:b1:c8:2f:0a:3d:81:1e:
                    17:52:ed:90:95:62:bb:fd:9b:46:91:7c:f8:40:e2:
                    db:11:1e:7e:62:79:1e:ea:29:98:c2:ab:f6:52:86:
                    77:3a:9c:15:30:31:44:d2:bd:22:db:04:c3:57:d6:
                    1b:38:c4:89:02:27:a8:70:af:d5:fa:1d:d9:16:35:
                    89:c8:ee:07:d7:38:d4:f4:2d:5c:9c:b3:9a:cd:e9:
                    de:99:8e:f1:d5:e3:83:20:94:a5:5c:df:ce:e8:4a:
                    6a:18:fc:c2:37:a0:d0:2b:cf:c7:cc:98:5d:e4:ca:
                    01:47:dc:77:c1:a0:34:a2:63:40:89:2a:ec:bf:c8:
                    88:0b:86:a7:47:c8:8b:cc:77:c4:03:a0:90:d3:88:
                    6c:ee:76:77:cf:42:cd:d9:a1:40:e6:25:39:09:73:
                    cb:c9:08:5c:f8:58:11:33:70:07:09:f3:5d:85:ff:
                    96:4a:45:e2:c8:52:d2:55:2c:81:16:c1:77:60:32:
                    b2:e5:11:c8:9f:66:e5:fa:d8:74:be:a8:92:c6:3a:
                    43:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:EB:B8:E1:22:2B:E0:E3:F2:3A:ED:B7:52:45:E0:F9:7B:87:C7:4D
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  23703
                  139829

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.78.16.0/20
                IPv6:
                  2405:d980::/32

    Signature Algorithm: sha256WithRSAEncryption
         c7:07:d3:b6:ce:7e:86:ec:a3:76:55:5f:9a:2a:ad:e8:75:de:
         48:5c:77:7d:f8:89:ee:f7:3f:cf:a7:e0:a4:d2:41:42:e6:e7:
         2b:b5:18:12:eb:73:d5:54:88:18:03:86:da:17:0d:4b:ce:2a:
         f0:63:d8:23:51:14:94:c4:cf:b5:53:53:33:a6:68:0e:15:d8:
         87:17:25:b2:59:9e:68:93:2e:03:63:1e:79:af:cb:98:6b:93:
         0f:cc:84:47:c5:63:b4:de:47:21:90:9f:07:fd:ba:c4:0a:06:
         c9:ef:c3:e7:61:41:33:2c:1c:f4:28:2d:02:79:6e:14:a6:94:
         54:88:a2:95:e8:f0:72:e7:90:de:c0:aa:28:41:bf:42:eb:d2:
         bc:2b:30:f1:0d:ed:53:8c:c8:3f:70:05:7b:be:03:90:69:20:
         fe:29:c1:ff:e5:19:54:6b:3c:a7:1e:26:d4:45:95:86:a4:64:
         5b:c1:73:bc:82:e7:4d:b2:30:04:01:13:83:da:a6:67:49:1e:
         32:b6:bc:9e:e1:b4:9e:80:ed:46:c1:9f:18:81:7a:43:4c:eb:
         8f:38:59:7b:27:6d:d8:3a:37:d6:f7:2b:29:26:28:01:9a:69:
         c8:de:5c:9c:63:b4:59:b6:1a:93:02:67:ac:5f:86:3c:95:2a:
         5e:43:6b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 14:07:54 2024 by rpki-client on console-fra.rpki-client.org