Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer
File:                     Wsl8kSmaL6nIztiqxnD_78e2mhs.cer (raw, json)
Hash identifier:          Fj767v8fRCqXQnJjZMyh7SoUmB0k6+qiDsDXaF3oazc=
Subject key identifier:   5A:C9:7C:91:29:9A:2F:A9:C8:CE:D8:AA:C6:70:FF:EF:C7:B6:9A:1B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01A1DB
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sat 06 May 2023 19:12:07 +0000
Certificate not after:    Tue 30 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 140543
                          IP: 103.150.30.0/23
                          IP: 2405:f9c0::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Apr 2024 02:50:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106971 (0x1a1db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May  6 19:12:07 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=A91F3260/serialNumber=5AC97C91299A2FA9C8CED8AAC670FFEFC7B69A1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a4:bc:5b:d9:2a:40:09:d3:0f:13:c5:03:24:
                    2f:12:cc:85:79:dc:6b:04:8f:d0:da:84:a7:59:56:
                    b5:ee:66:09:a4:de:92:26:40:81:6f:c2:6f:df:66:
                    ad:ce:3f:20:14:79:07:8e:b6:b4:93:13:fb:a9:65:
                    25:39:29:cb:36:ff:a0:5d:38:89:b8:99:c8:55:20:
                    74:64:b7:84:6e:ac:ff:33:0a:b5:b0:32:fd:3f:0a:
                    1d:0c:43:42:04:d4:8b:f7:bd:31:d1:be:2f:fc:66:
                    bf:89:7d:cd:be:55:19:79:18:6b:b7:38:2c:3a:f4:
                    6a:e7:a0:de:46:26:3b:95:61:84:6a:f6:12:99:c2:
                    d4:49:58:b7:4e:c4:a9:a3:68:39:48:e4:ad:bd:92:
                    48:2b:14:43:83:bd:35:28:f2:08:14:77:f2:a7:27:
                    79:66:26:f5:f5:3a:f7:f3:d6:b7:22:10:7f:23:8b:
                    a9:7e:9a:e3:e5:0e:70:f2:88:5f:72:4d:48:fa:16:
                    fd:9c:c4:d2:ea:65:54:e7:60:15:3d:43:38:0d:38:
                    f6:04:01:44:79:59:ff:fd:04:12:9f:7e:d6:c1:3c:
                    59:18:c8:83:2a:3f:55:80:c3:1e:7c:56:50:de:b1:
                    12:1d:a9:eb:66:51:f4:55:de:21:74:c6:15:ce:85:
                    12:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:C9:7C:91:29:9A:2F:A9:C8:CE:D8:AA:C6:70:FF:EF:C7:B6:9A:1B
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  140543

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.30.0/23
                IPv6:
                  2405:f9c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:f5:58:d2:9b:25:39:52:91:9f:ed:41:40:fd:6b:e2:7f:d9:
         ea:66:07:13:42:e1:12:d0:55:1c:3a:bf:87:b3:ba:25:e2:4c:
         a2:8d:9c:e5:66:da:a8:d1:d9:8f:66:9e:85:f2:70:fa:a2:64:
         5c:0e:b0:22:28:b1:81:f8:44:00:20:4c:6d:09:5c:06:68:08:
         4d:a7:24:44:7c:03:d7:45:b1:e6:86:f0:5e:18:b0:22:5b:17:
         18:ca:e7:cd:74:2a:8b:7a:ab:d2:58:9f:53:14:de:34:ed:51:
         78:bc:d5:e4:fe:14:29:b3:67:23:e7:5a:b8:b9:bb:b5:bd:48:
         7f:01:5d:0a:62:aa:4a:4f:bc:de:a3:25:07:56:c3:f3:f8:a0:
         0b:32:11:77:e6:ce:48:0f:11:ea:2f:15:66:a4:fd:70:53:d0:
         5f:32:b2:c0:d9:51:c6:a6:aa:e2:72:56:17:46:61:78:bb:7e:
         a1:6b:fb:9d:b2:bc:44:5a:7d:31:13:2f:34:ad:b1:ca:5f:67:
         9a:c7:2f:c4:86:5e:fb:5e:14:42:de:3c:61:5c:2d:59:3f:0d:
         75:60:83:68:71:1d:5e:4f:cf:8d:a2:65:ab:f2:9c:2a:b6:bb:
         07:ad:66:87:6d:ec:67:16:47:ed:a2:a3:15:4a:d1:10:25:26:
         2e:ee:dc:ca
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAaHbMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMDUwNjE5MTIwN1oXDTI0MDczMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRjMyNjAxMTAvBgNVBAUTKDVBQzk3QzkxMjk5QTJGQTlDOENFRDhB
QUM2NzBGRkVGQzdCNjlBMUIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDgpLxb2SpACdMPE8UDJC8SzIV53GsEj9DahKdZVrXuZgmk3pImQIFvwm/fZq3O
PyAUeQeOtrSTE/upZSU5Kcs2/6BdOIm4mchVIHRkt4RurP8zCrWwMv0/Ch0MQ0IE
1Iv3vTHRvi/8Zr+Jfc2+VRl5GGu3OCw69GrnoN5GJjuVYYRq9hKZwtRJWLdOxKmj
aDlI5K29kkgrFEODvTUo8ggUd/KnJ3lmJvX1Ovfz1rciEH8ji6l+muPlDnDyiF9y
TUj6Fv2cxNLqZVTnYBU9QzgNOPYEAUR5Wf/9BBKfftbBPFkYyIMqP1WAwx58VlDe
sRIdqetmUfRV3iF0xhXOhRKBAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUWsl8kSma
L6nIztiqxnD/78e2mhswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUYzMjYwL0Q3OEQyQUEyNzFBNjExRUI4NzQ1MDQ2NkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFGMzI2MC9ENzhEMkFBMjcxQTYxMUVCODc0NTA0NjZDNEY5QUUwMi9Xc2w4a1Nt
YUw2bkl6dGlxeG5EXzc4ZTJtaHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAiT/MC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZ5YeMA0EAgAC
MAcDBQAkBfnAMA0GCSqGSIb3DQEBCwUAA4IBAQBy9VjSmyU5UpGf7UFA/Wvif9nq
ZgcTQuES0FUcOr+Hs7ol4kyijZzlZtqo0dmPZp6F8nD6omRcDrAiKLGB+EQAIExt
CVwGaAhNpyREfAPXRbHmhvBeGLAiWxcYyufNdCqLeqvSWJ9TFN407VF4vNXk/hQp
s2cj51q4ubu1vUh/AV0KYqpKT7zeoyUHVsPz+KALMhF35s5IDxHqLxVmpP1wU9Bf
MrLA2VHGpqriclYXRmF4u36ha/udsrxEWn0xEy80rbHKX2eaxy/Ehl77XhRC3jxh
XC1ZPw11YINocR1eT8+NomWr8pwqtrsHrWaHbexnFkftoqMVStEQJSYu7tzK
-----END CERTIFICATE-----
Generated at Fri Mar 29 03:25:36 2024 by rpki-client on console-ams.rpki-client.org