Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIw8AL4pDBZz22aZmFINcjeERcs.cer
File:                     VIw8AL4pDBZz22aZmFINcjeERcs.cer (raw, json)
Hash identifier:          i4wWlY7ACV6ozA/fouvSC0nFsV08L443waLgK9HPTcI=
Subject key identifier:   54:8C:3C:00:BE:29:0C:16:73:DB:66:99:98:52:0D:72:37:84:45:CB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01D6F7
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 05 Jan 2024 15:21:20 +0000
Certificate not after:    Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources:    AS: 151982
                          IP: 103.250.102.0/24
                          IP: 2001:df3:1140::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 06:03:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120567 (0x1d6f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan  5 15:21:20 2024 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=A914B089/serialNumber=548C3C00BE290C1673DB669998520D72378445CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:d0:7c:df:7a:22:92:d9:41:13:89:89:31:e7:
                    ce:90:6f:92:22:2b:64:a9:ce:ba:e0:65:78:7c:6f:
                    ab:dd:12:36:3d:c5:c6:0e:d5:48:a1:fa:8e:00:c5:
                    43:fe:5f:32:f8:40:d5:b8:fd:d9:5d:ee:b3:93:84:
                    f1:97:94:e0:db:40:d3:c8:c8:82:cd:e9:fb:34:71:
                    b4:fb:99:74:5e:8e:78:2a:a1:d9:7e:d5:d4:e6:f2:
                    7d:8f:36:03:31:98:dc:d7:45:d1:bc:76:a8:fd:77:
                    37:3b:4a:9b:3e:5c:3b:f6:ea:2f:d8:ba:c8:e8:2d:
                    44:a7:e6:d9:f3:e4:a9:dd:8f:21:96:f9:26:d2:08:
                    68:d1:cf:0d:d8:a4:27:3b:22:82:ff:26:0f:0f:11:
                    0d:e7:12:eb:d0:51:01:15:2e:57:60:69:77:b2:89:
                    eb:57:28:1e:8e:24:b6:89:0f:5a:a4:39:3b:c4:a4:
                    95:dc:88:ae:47:22:7f:93:aa:81:7c:68:6e:89:83:
                    af:da:c0:a9:23:6b:da:7f:48:99:63:03:85:f7:57:
                    69:55:e1:62:b1:1b:34:23:73:81:bc:68:da:ca:22:
                    15:eb:f2:c8:a4:27:6f:f0:07:e6:78:b2:48:b3:3a:
                    13:40:69:eb:48:0c:51:c7:4e:80:fe:9c:fe:a2:11:
                    9c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:8C:3C:00:BE:29:0C:16:73:DB:66:99:98:52:0D:72:37:84:45:CB
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  151982

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.250.102.0/24
                IPv6:
                  2001:df3:1140::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:13:00:ac:40:46:cb:36:e9:18:4f:89:b2:51:45:94:9c:14:
         57:49:2a:fe:98:14:af:a9:de:7d:4a:47:f5:99:90:c6:6e:43:
         c6:a7:df:46:25:15:cd:f1:d2:09:35:44:4a:b4:9e:23:ad:be:
         d9:e0:f8:8a:15:1a:7f:ae:6d:5c:20:4e:4e:73:c0:61:8a:6a:
         9e:a5:5c:67:0c:6b:78:d0:f9:b4:1a:9b:d5:13:83:70:87:9d:
         16:2b:e0:22:5c:a6:ab:02:c7:6d:46:20:68:4f:39:38:db:5c:
         e0:e1:31:8c:74:12:14:77:b0:cc:a0:57:95:b9:db:13:bb:11:
         06:d9:fc:7c:76:39:64:06:62:9e:f0:c0:28:7b:46:ef:c7:68:
         23:9b:63:ec:ae:22:dd:d1:0e:a6:f6:ee:21:a2:43:7c:ad:bb:
         16:db:4f:60:a7:85:a1:7b:c7:1a:22:18:be:fc:cc:99:8d:d8:
         0c:a1:f9:89:31:31:69:37:c4:91:42:8d:c1:44:42:b4:fe:68:
         b8:bd:4a:54:a5:30:d9:33:b1:be:b2:20:65:d2:34:41:20:a2:
         31:0b:35:5a:f1:f2:9d:9b:b3:fb:68:98:5d:35:82:76:f9:7d:
         db:eb:41:42:ae:b5:d4:98:60:e0:84:48:c3:50:f5:51:fe:79:
         51:ad:6d:71
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 2 08:03:35 2024 by rpki-client on console-ams.rpki-client.org