Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vsj2YLHnes7YuehXD_QT4V10jwI.cer
File:                     Vsj2YLHnes7YuehXD_QT4V10jwI.cer (raw, json)
Hash identifier:          EIagI6BQMyh3RMbHcRmkDgqin9Ldp87CWAKgIbEXoXY=
Subject key identifier:   56:C8:F6:60:B1:E7:7A:CE:D8:B9:E8:57:0F:F4:13:E1:5D:74:8F:02
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01C235
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9189066/B1E1AEBA637D11EEB244D35CC4F9AE02/Vsj2YLHnes7YuehXD_QT4V10jwI.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9189066/B1E1AEBA637D11EEB244D35CC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 05 Oct 2023 12:50:06 +0000
Certificate not after:    Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 134667
                          IP: 103.195.128.0/22
                          IP: 2001:df6:1400::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 May 2024 20:59:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115253 (0x1c235)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct  5 12:50:06 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=A9189066/serialNumber=56C8F660B1E77ACED8B9E8570FF413E15D748F02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:68:d6:8f:00:a4:8d:4f:da:34:28:d7:48:91:
                    72:3c:6e:22:6d:28:85:72:64:23:94:a4:f8:90:82:
                    29:c6:8f:2e:84:0f:94:f4:02:7c:b5:ec:5f:6d:0c:
                    30:13:4c:81:9d:1e:b9:ad:8c:68:56:0c:37:05:dc:
                    c4:74:f0:e9:64:ae:63:33:60:f9:0e:7b:20:f0:cc:
                    e4:53:86:af:c5:3d:ce:eb:91:83:65:c0:ff:11:f2:
                    7f:48:14:9d:27:03:3b:ac:40:58:e1:d2:98:53:9f:
                    d1:84:86:9f:ea:1d:d8:82:62:af:d6:2d:60:9b:8d:
                    40:24:49:7e:7b:a3:37:5a:87:26:e6:87:84:38:a6:
                    a8:f0:ef:7f:02:f5:2c:a2:54:b6:4d:33:bd:bc:08:
                    d2:53:39:23:ab:01:da:9f:0b:49:ac:fc:8a:a0:e8:
                    ca:bd:c1:55:68:90:29:b3:77:da:62:fb:20:c4:c8:
                    9b:74:99:f9:ac:d9:5d:40:60:ad:dd:2d:23:90:0d:
                    01:28:ad:2f:89:98:27:fa:42:9a:1c:9e:30:ae:68:
                    a5:5c:b4:a7:ae:ec:b0:1d:52:1e:67:32:89:da:55:
                    4d:22:ec:f6:a8:55:a5:b3:01:f4:07:18:40:6d:c2:
                    d8:79:e9:df:c1:ba:39:33:4a:f7:31:1e:f8:51:dc:
                    ab:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C8:F6:60:B1:E7:7A:CE:D8:B9:E8:57:0F:F4:13:E1:5D:74:8F:02
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9189066/B1E1AEBA637D11EEB244D35CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9189066/B1E1AEBA637D11EEB244D35CC4F9AE02/Vsj2YLHnes7YuehXD_QT4V10jwI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  134667

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.195.128.0/22
                IPv6:
                  2001:df6:1400::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:3b:cf:6c:3b:30:67:2e:d0:aa:60:11:9c:04:d7:05:a0:52:
         8c:02:35:a8:dc:2d:da:c8:0b:33:b4:73:df:61:df:1f:41:31:
         16:3d:a1:91:4d:3d:e3:d8:b7:11:3a:c0:a7:90:b3:72:e7:3a:
         6d:42:d3:4d:08:51:ff:88:62:fc:c4:08:a3:ed:07:18:2c:b2:
         20:a0:f1:1e:55:02:52:74:60:11:43:ee:b6:03:93:ad:11:28:
         e7:66:2d:8f:c8:29:09:4c:ad:f9:81:29:2e:d0:19:e8:e1:3b:
         ee:e8:84:d7:27:35:a5:01:ef:b7:29:46:71:54:1e:5f:14:7a:
         c4:ec:4b:8a:d7:e1:66:74:b7:6b:02:55:8b:4f:0a:1f:80:ed:
         2d:d9:6a:4f:42:fd:24:4b:73:b2:39:83:e9:28:f7:3c:e7:ad:
         b0:16:d0:7b:7e:57:fb:22:17:0a:df:e1:20:9b:12:46:3e:9f:
         10:ca:58:bd:57:a1:d5:dc:d5:da:6a:93:d0:1f:35:1b:0c:12:
         13:35:99:d6:da:10:b0:60:29:c2:72:74:ac:da:18:dc:8a:35:
         74:91:d3:a4:cd:af:42:6a:66:3c:ff:f3:e8:31:5b:a4:6e:00:
         58:c3:b9:dd:e2:29:c7:03:60:42:35:2f:98:1c:4c:5c:2c:15:
         8f:9c:1a:45
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 1 22:08:16 2024 by rpki-client on console-fra.rpki-client.org