Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wo_G2bmSMi8tfAdzRUP3mJftgDc.cer
File:                     Wo_G2bmSMi8tfAdzRUP3mJftgDc.cer (raw, json)
Hash identifier:          +5bUMLyFYegwwkmB8BdHGQMrZ28F2x542ZSShmpQRBo=
Subject key identifier:   5A:8F:C6:D9:B9:92:32:2F:2D:7C:07:73:45:43:F7:98:97:ED:80:37
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01B081
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 17 Jul 2023 14:47:09 +0000
Certificate not after:    Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources:    AS: 134243
                          IP: 43.227.28.0/22
                          IP: 43.229.108.0/22
                          IP: 45.116.60.0 -- 45.116.67.255
                          IP: 103.47.220.0/22
                          IP: 103.47.248.0/22
                          IP: 103.71.236.0/22
                          IP: 103.72.164.0/22
                          IP: 150.242.124.0/22
                          IP: 160.19.48.0/22
                          IP: 203.78.140.0/22

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 01:18:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110721 (0x1b081)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 17 14:47:09 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=A9153AC4/serialNumber=5A8FC6D9B992322F2D7C07734543F79897ED8037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:52:2e:0f:8e:6a:f6:61:13:20:b8:85:05:76:
                    43:34:d8:4f:10:b3:98:cf:15:06:de:b3:34:0c:0a:
                    e3:b2:9a:2c:00:3b:f8:fa:10:34:be:6c:14:2c:c5:
                    01:0c:7a:f3:08:63:8b:ba:ee:f5:b3:7b:4d:ff:ab:
                    04:de:44:8e:ae:a2:65:11:41:2e:e3:72:a7:a9:9c:
                    69:c6:4c:0e:9f:40:2c:f2:14:cc:a8:f1:91:fb:c3:
                    e0:00:4b:37:c9:6d:83:93:04:51:f3:2b:5d:65:3c:
                    1a:b8:c4:8d:dd:8c:66:63:d3:d8:46:ad:e0:bd:88:
                    fe:25:e3:32:8e:15:3f:84:0d:d9:22:e6:9c:1b:d9:
                    d0:e1:fa:c6:84:b2:e3:8b:f1:64:24:ac:4a:a6:16:
                    a3:f7:ab:40:2b:a6:f0:27:ec:9f:3a:dd:9c:9a:66:
                    83:3d:03:0f:92:a0:d9:ce:a8:22:b8:44:7d:ff:77:
                    c7:c1:bd:3a:29:35:2b:14:bd:13:b3:12:cc:58:3e:
                    8c:b8:cf:0c:62:23:a0:d0:ea:3b:de:1f:11:78:b3:
                    97:a2:ae:20:ca:70:4a:f9:12:31:c7:db:4e:25:b8:
                    f0:71:1a:4e:4e:65:e8:d2:6d:84:63:d6:87:f8:76:
                    de:ea:b5:12:ce:17:d3:16:79:93:82:4c:b8:ce:f5:
                    58:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:8F:C6:D9:B9:92:32:2F:2D:7C:07:73:45:43:F7:98:97:ED:80:37
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  134243

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.227.28.0/22
                  43.229.108.0/22
                  45.116.60.0-45.116.67.255
                  103.47.220.0/22
                  103.47.248.0/22
                  103.71.236.0/22
                  103.72.164.0/22
                  150.242.124.0/22
                  160.19.48.0/22
                  203.78.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:be:04:9c:ff:43:5c:19:71:27:bb:38:20:f2:ec:d0:22:5c:
         7d:44:9e:44:ab:27:e5:79:fe:b2:a4:af:cd:04:bc:58:cc:eb:
         bd:5d:72:2c:ab:c6:24:ed:30:bd:cd:99:e1:e3:68:00:8d:f7:
         11:30:89:f6:00:24:55:18:5c:18:dd:1a:99:8a:ac:11:bd:55:
         17:e9:16:b9:5d:c2:9d:10:d0:25:f5:c9:ff:45:e5:21:bf:ef:
         c6:07:a4:c5:bc:bb:3a:c5:7d:50:cb:6d:26:c8:35:c4:c6:ae:
         4e:a1:f2:02:08:c3:d0:75:81:a1:24:7e:45:26:7d:48:cb:30:
         06:6d:35:3f:cc:36:6d:1f:3f:72:cf:89:9c:41:ff:b2:b9:56:
         55:13:c6:f9:34:09:4c:66:8c:f2:5e:97:88:67:73:0a:bc:64:
         68:e9:e7:ba:68:bb:04:cd:bd:52:6e:c3:ee:da:3a:0f:4a:62:
         2a:c3:67:5a:98:68:47:76:64:76:e5:8c:f1:c9:15:38:0d:29:
         91:a0:56:4b:1b:ed:70:b9:ed:5a:16:a5:14:5d:e8:ec:ca:0d:
         70:d7:b8:17:57:26:34:0c:9d:75:c5:9b:c8:7a:0d:89:25:e6:
         c9:9c:f4:5f:08:a9:37:56:fa:ab:85:ee:81:7c:eb:48:7b:f6:
         1c:88:4e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 02:02:50 2024 by rpki-client on console-fra.rpki-client.org