Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WXbvXQvxZojiXsXi3Iyp9a-uG1M.cer
File:                     WXbvXQvxZojiXsXi3Iyp9a-uG1M.cer (raw, json)
Hash identifier:          0c0cq86nTzU/CG+y8jDwJQM2fRpzdSHHOaU6b48/mwQ=
Subject key identifier:   59:76:EF:5D:0B:F1:66:88:E2:5E:C5:E2:DC:8C:A9:F5:AF:AE:1B:53
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01C268
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 06 Oct 2023 12:51:55 +0000
Certificate not after:    Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 134503
                          IP: 103.35.80.0/22
                          IP: 2402:c180::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 14:50:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115304 (0x1c268)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct  6 12:51:55 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=A91172C6/serialNumber=5976EF5D0BF16688E25EC5E2DC8CA9F5AFAE1B53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2e:7f:87:33:1e:33:77:f9:7c:05:d1:c7:2a:
                    f1:64:e1:f6:2f:1b:70:e0:f7:19:b3:e6:79:d7:c2:
                    8a:7a:15:ce:a9:dd:52:2c:96:8f:9e:5a:ee:6b:35:
                    2d:a5:fa:f0:c9:4e:bf:ec:ee:b0:17:de:5d:fd:f9:
                    80:50:56:56:ae:49:1c:79:1b:e7:a4:39:02:f4:b8:
                    7f:00:a3:3d:f5:5b:52:16:a8:bc:6a:fc:57:18:a8:
                    c7:69:47:aa:99:e6:ac:06:1f:77:cc:82:d6:63:27:
                    d9:d5:d2:f9:d0:00:20:d8:f6:a1:2c:73:d2:14:a3:
                    c2:cf:45:dd:39:36:cf:c2:89:94:be:70:7b:5b:ab:
                    b0:6b:17:09:79:47:d3:e8:e7:be:89:7f:a8:58:7f:
                    b6:01:8a:12:06:58:13:91:72:df:95:75:5c:92:4d:
                    70:14:ac:c2:75:00:44:5b:69:8d:1b:6d:c6:e0:e8:
                    fb:0a:db:cd:b5:7b:e1:ca:08:9d:d2:31:56:09:87:
                    87:2f:e1:5a:1b:3a:45:92:e0:69:98:e3:0b:43:5b:
                    33:f8:64:35:4c:fe:34:96:19:b2:77:42:76:27:c2:
                    c7:f2:1c:b4:df:9e:91:fb:c1:ba:04:8b:9c:07:fd:
                    3b:14:49:de:ae:d8:cd:76:a2:de:ee:1f:c3:56:da:
                    c0:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:76:EF:5D:0B:F1:66:88:E2:5E:C5:E2:DC:8C:A9:F5:AF:AE:1B:53
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  134503

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.35.80.0/22
                IPv6:
                  2402:c180::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:b5:f7:53:e8:fd:81:33:76:62:24:ae:f0:99:1e:f2:18:66:
         a6:98:b4:04:70:09:9a:ef:27:e4:5b:f1:56:15:74:4a:55:fc:
         c1:20:bc:14:dc:c9:a9:11:06:8f:03:bc:d9:2f:ff:94:0d:67:
         6d:df:2f:6f:0e:d9:1e:6c:01:6f:bb:98:97:40:0c:8d:4a:bb:
         4c:a3:c2:61:fb:b8:65:84:3d:80:8d:97:49:2b:2b:3c:00:11:
         86:66:6d:d4:01:4f:be:18:ea:aa:2c:00:a2:17:59:c2:ce:ff:
         68:dc:8b:4c:4e:de:ff:1a:20:f5:9c:7c:16:e7:a8:22:d5:43:
         92:e0:5e:35:7c:dc:66:a5:bc:02:04:82:59:16:2b:87:65:50:
         14:5d:03:c2:17:87:7f:8b:70:b0:31:42:99:8e:16:9b:57:4a:
         89:5e:f4:29:ca:f1:04:48:5b:e0:5e:74:69:bb:dd:f5:0a:9f:
         c4:48:44:49:9f:b3:1d:a1:57:e3:a9:c0:fd:b0:4d:69:07:ff:
         db:3a:86:96:0e:de:46:8f:4d:d3:39:ac:2a:a5:4c:48:11:b7:
         12:06:ec:a9:1f:e5:0b:26:05:8d:41:df:20:65:e2:95:d9:7a:
         56:36:1f:c4:9e:47:19:d3:4b:f0:8f:24:1b:34:b7:01:1f:d0:
         21:62:f1:a0
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAcJoMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMTAwNjEyNTE1NVoXDTI0MTIwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMTcyQzYxMTAvBgNVBAUTKDU5NzZFRjVEMEJGMTY2ODhFMjVFQzVF
MkRDOENBOUY1QUZBRTFCNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC5Ln+HMx4zd/l8BdHHKvFk4fYvG3Dg9xmz5nnXwop6Fc6p3VIslo+eWu5rNS2l
+vDJTr/s7rAX3l39+YBQVlauSRx5G+ekOQL0uH8Aoz31W1IWqLxq/FcYqMdpR6qZ
5qwGH3fMgtZjJ9nV0vnQACDY9qEsc9IUo8LPRd05Ns/CiZS+cHtbq7BrFwl5R9Po
576Jf6hYf7YBihIGWBORct+VdVySTXAUrMJ1AERbaY0bbcbg6PsK2821e+HKCJ3S
MVYJh4cv4VobOkWS4GmY4wtDWzP4ZDVM/jSWGbJ3QnYnwsfyHLTfnpH7wboEi5wH
/TsUSd6u2M12ot7uH8NW2sCBAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUWXbvXQvx
ZojiXsXi3Iyp9a+uG1MwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTE3MkM2LzBBQTRENjY0NkE0RDExRTk5RjA1NDMyRUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTExNzJDNi8wQUE0RDY2NDZBNEQxMUU5OUYwNTQzMkVDNEY5QUUwMi9XWGJ2WFF2
eFpvamlYc1hpM0l5cDlhLXVHMU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAg1nMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZyNQMA0EAgAC
MAcDBQAkAsGAMA0GCSqGSIb3DQEBCwUAA4IBAQAftfdT6P2BM3ZiJK7wmR7yGGam
mLQEcAma7yfkW/FWFXRKVfzBILwU3MmpEQaPA7zZL/+UDWdt3y9vDtkebAFvu5iX
QAyNSrtMo8Jh+7hlhD2AjZdJKys8ABGGZm3UAU++GOqqLACiF1nCzv9o3ItMTt7/
GiD1nHwW56gi1UOS4F41fNxmpbwCBIJZFiuHZVAUXQPCF4d/i3CwMUKZjhabV0qJ
XvQpyvEESFvgXnRpu931Cp/ESERJn7MdoVfjqcD9sE1pB//bOoaWDt5Gj03TOawq
pUxIEbcSBuypH+ULJgWNQd8gZeKV2XpWNh/EnkcZ00vwjyQbNLcBH9AhYvGg
-----END CERTIFICATE-----
Generated at Fri Apr 19 16:13:12 2024 by rpki-client on console-ams.rpki-client.org