Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X48BYbesuyVfE88IG2ZTYZtOLAI.cer
File:                     X48BYbesuyVfE88IG2ZTYZtOLAI.cer (raw, json)
Hash identifier:          JTuyus4kAX55TykoQ7wXC6wWLwcJhei9LKgeFDuLZaU=
Subject key identifier:   5F:8F:01:61:B7:AC:BB:25:5F:13:CF:08:1B:66:53:61:9B:4E:2C:02
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01D6C1
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 04 Jan 2024 15:39:49 +0000
Certificate not after:    Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 138456
                          AS: 151970
                          IP: 103.126.24.0/24
                          IP: 103.152.206.0/24
                          IP: 2001:df7:3700::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 21:10:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120513 (0x1d6c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan  4 15:39:49 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=A9149A0D/serialNumber=5F8F0161B7ACBB255F13CF081B6653619B4E2C02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c1:63:59:6c:83:07:d3:fb:17:98:ab:44:95:
                    96:c6:cb:cd:3b:89:89:05:55:42:fc:04:2e:4c:9d:
                    b5:22:78:97:b4:98:ec:04:11:a2:79:91:2f:14:08:
                    25:89:71:c6:88:a5:ba:89:34:7a:5f:54:1f:e2:f1:
                    0d:a7:11:fd:3c:8e:77:81:24:8a:bd:c4:fe:b7:a6:
                    2d:eb:dc:dd:3d:20:8a:c0:17:2c:b2:b2:c3:07:51:
                    56:74:e4:df:cc:2d:7d:43:34:a7:73:fa:a8:06:77:
                    56:dd:f4:13:2d:96:b9:af:cf:c6:1c:d2:92:3c:92:
                    de:9e:66:9a:de:1c:1f:7a:45:c7:56:4a:d4:c1:1c:
                    ca:c3:75:15:79:a0:57:81:94:fb:f9:9b:62:da:3e:
                    81:0d:cd:00:4b:57:62:7f:d5:44:18:a9:5b:8c:f6:
                    2f:3e:23:52:c8:a7:e3:6b:30:48:25:4b:68:0d:69:
                    2e:f8:58:e9:bd:60:2a:94:c3:e0:2f:c2:d2:e3:e2:
                    a6:5e:e2:5b:8a:5d:c7:ed:3f:f2:35:a3:dd:38:de:
                    fc:61:60:b1:51:95:6e:66:33:6d:16:95:52:8c:62:
                    e2:8f:1b:d6:d2:58:9d:fe:13:24:29:41:2b:da:69:
                    b9:5d:f7:c4:b8:9b:d2:03:ae:2f:f8:45:c6:ed:f2:
                    20:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:8F:01:61:B7:AC:BB:25:5F:13:CF:08:1B:66:53:61:9B:4E:2C:02
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  138456
                  151970

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.24.0/24
                  103.152.206.0/24
                IPv6:
                  2001:df7:3700::/48

    Signature Algorithm: sha256WithRSAEncryption
         cb:e0:e4:28:50:b5:f0:9d:02:ff:ed:70:84:65:53:2c:a7:ff:
         64:15:0e:d3:78:63:ee:16:b0:dc:35:7c:94:78:a6:d1:cd:4f:
         c6:fe:e7:99:c0:8b:83:d1:45:dd:09:9a:ad:6b:ed:ad:74:18:
         99:97:71:4a:76:2d:fd:15:e4:89:24:95:c6:11:64:13:fd:3c:
         35:ff:94:c6:23:7f:16:4f:81:38:9c:62:de:ce:53:50:76:49:
         a7:10:e7:f6:b0:81:e7:8e:a4:b9:2d:a2:ba:c6:a9:e7:b3:a3:
         52:54:81:9d:64:06:36:97:bd:ed:f6:4e:97:12:d9:d2:53:5e:
         f1:49:83:e4:9b:78:06:46:f7:4d:1b:20:48:f3:09:33:90:76:
         5e:e5:bb:52:4a:48:64:b9:17:fb:bd:65:96:00:c4:c7:9e:88:
         3c:c0:f2:36:70:2d:59:c4:a8:f0:c8:9d:e5:1b:ea:8e:6d:30:
         99:10:45:68:dc:b6:a1:ca:24:65:86:1d:bd:6c:2a:54:2f:a5:
         8f:78:10:a0:18:e6:7a:fb:fc:04:9a:94:77:95:c6:49:b9:1d:
         9d:6b:9d:65:66:87:a0:d9:6c:51:1b:48:d8:36:a2:14:b6:d0:
         85:41:35:fc:b4:a5:cf:c6:1b:5d:01:38:96:83:29:f1:50:28:
         18:68:b6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:34:26 2024 by rpki-client on console-fra.rpki-client.org