Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzSpQuM2kLKBJhu645cTXb6kE5c.cer
File:                     UzSpQuM2kLKBJhu645cTXb6kE5c.cer (raw, json)
Hash identifier:          GRMHBIi3wMfsb5hEs3CYtmvzPSO8xs0WqSp8re/7J1I=
Subject key identifier:   53:34:A9:42:E3:36:90:B2:81:26:1B:BA:E3:97:13:5D:BE:A4:13:97
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01AF9E
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 11 Jul 2023 18:00:09 +0000
Certificate not after:    Thu 31 Oct 2024 00:00:00 +0000
Subordinate resources:    AS: 140954
                          IP: 103.153.185.0/24
                          IP: 103.157.253.0/24
                          IP: 2001:df4:5980::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Apr 2024 09:37:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110494 (0x1af9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 11 18:00:09 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=A91DA022/serialNumber=5334A942E33690B281261BBAE397135DBEA41397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:fc:17:e8:5e:33:6a:fa:a0:01:12:07:5f:6a:
                    8f:e8:0b:5b:77:ee:26:e4:d9:54:62:cb:78:ee:79:
                    da:56:4d:cf:23:73:d2:66:08:6c:44:44:be:5c:23:
                    d3:1a:02:2b:36:d7:6c:d4:aa:3e:45:e6:ee:ff:2c:
                    18:4d:85:52:13:fa:71:c8:d5:14:4e:39:c0:dc:46:
                    8d:bd:b1:19:72:03:de:98:a9:68:d9:f7:26:60:9a:
                    24:f4:00:3f:b0:b7:42:47:21:8f:e6:64:e1:46:ce:
                    89:00:df:1e:3e:1b:7c:e0:60:e4:86:e4:f5:05:67:
                    b5:31:4c:51:28:4b:1e:7d:17:de:b4:ce:3f:70:57:
                    2c:ac:4f:45:0d:d5:2c:fe:b7:08:2d:fb:7f:48:03:
                    7b:ce:77:50:16:04:83:2f:85:3e:ec:4c:88:7c:83:
                    f5:98:7b:3e:ec:da:6c:a6:2f:88:07:1b:8b:0a:05:
                    e6:de:c0:41:d0:53:6d:a7:6d:36:ae:9d:0f:df:bf:
                    2e:69:44:fc:90:ea:0b:b6:0f:bb:83:76:e1:ab:07:
                    be:68:a9:5e:45:07:ec:46:67:fc:aa:34:00:9f:73:
                    52:a5:9f:c3:6c:64:f4:d1:06:89:38:1f:3e:4d:a7:
                    24:7e:56:40:35:af:44:cc:98:3a:cc:c2:a8:f3:43:
                    b4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:34:A9:42:E3:36:90:B2:81:26:1B:BA:E3:97:13:5D:BE:A4:13:97
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  140954

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.185.0/24
                  103.157.253.0/24
                IPv6:
                  2001:df4:5980::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:03:99:3b:d9:54:ce:55:be:30:a8:0d:d4:8e:47:5e:c4:15:
         22:5b:9a:9b:02:3a:31:74:28:e6:b5:29:d6:f9:41:b2:b6:66:
         a1:b2:90:ae:1b:06:52:3e:39:c0:c5:47:47:2a:93:d6:10:86:
         11:6d:eb:41:e4:af:75:da:6f:c5:14:6c:4e:04:ae:f1:27:97:
         9a:e9:f1:ea:13:65:71:2e:13:b8:cb:ad:ba:37:ad:b9:c1:f3:
         1f:aa:88:d5:f2:cb:de:5f:14:d8:d4:0b:63:3a:63:ec:ad:85:
         ab:13:10:80:06:99:88:02:d9:ab:83:66:6a:72:16:68:77:45:
         69:28:10:09:01:3f:e1:41:6f:9e:72:66:c2:79:2b:c7:36:0d:
         f6:14:9f:75:98:0c:a4:0e:6d:78:d8:29:c1:32:9f:6f:aa:70:
         a9:3a:e1:4c:d0:68:e5:9d:33:93:d2:5f:3f:7c:0c:fe:1b:20:
         12:47:c7:f4:ee:0b:c9:a6:97:5b:c6:01:c9:ab:26:00:46:5a:
         10:2d:43:06:d6:40:2b:73:e8:89:89:ce:5f:85:48:fb:a3:ff:
         14:45:fc:09:f4:79:2d:d4:25:bd:94:f7:e6:c8:2e:b9:08:6a:
         f1:89:f5:f6:c9:bd:14:88:3b:98:2b:a0:bd:95:12:7b:d0:d4:
         81:a5:53:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 11:22:29 2024 by rpki-client on console-fra.rpki-client.org