Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X4rzWXP9T6Vj8ztzdlNGghB7yPk.cer
File:                     X4rzWXP9T6Vj8ztzdlNGghB7yPk.cer (raw, json)
Hash identifier:          WOYmNXp1BWUj+LdfM0uHZr50kdpCWGpMPFIT4F1ETmk=
Subject key identifier:   5F:8A:F3:59:73:FD:4F:A5:63:F3:3B:73:76:53:46:82:10:7B:C8:F9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01A08C
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91CE285/5E1648B684BC11EAA5262263C4F9AE02/X4rzWXP9T6Vj8ztzdlNGghB7yPk.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91CE285/5E1648B684BC11EAA5262263C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 02 May 2023 02:08:48 +0000
Certificate not after:    Tue 30 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 140585
                          IP: 103.150.166.0/23
                          IP: 2001:df1:ad40::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 May 2024 02:50:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106636 (0x1a08c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May  2 02:08:48 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=A91CE285/serialNumber=5F8AF35973FD4FA563F33B7376534682107BC8F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7d:17:04:44:9c:fe:e0:a4:81:f4:1e:44:d8:
                    ce:26:bd:40:40:20:31:e4:c2:0e:bd:7a:7e:a4:ab:
                    74:fb:9d:3b:3b:a8:28:c3:ea:02:3d:0b:79:d1:d4:
                    7a:5d:6b:db:34:b3:24:ad:d5:17:29:c2:50:1a:fe:
                    5e:29:2f:6f:64:d2:cd:46:7d:f8:32:b3:48:85:8c:
                    19:ec:82:97:ee:eb:4e:c0:f4:34:2c:6d:f3:24:c8:
                    6f:d9:04:f3:eb:e0:26:6d:db:1e:22:de:21:bf:c9:
                    a0:15:2a:06:38:0d:8e:96:7f:fb:bd:f1:2f:4f:9a:
                    72:30:05:1b:b7:2b:fd:ad:23:1e:a8:af:d4:f3:7e:
                    60:98:0a:be:28:a7:8c:96:13:0e:78:86:68:b7:a1:
                    c3:77:f4:08:4f:cd:d6:1d:d5:2b:0e:93:f3:3c:49:
                    d3:b5:0e:2b:ab:77:26:a7:25:e3:6f:4e:8b:1b:a4:
                    f4:3a:d0:b3:d5:61:b8:6a:f9:34:6c:9a:03:26:df:
                    10:b1:69:1e:fe:35:d0:f8:55:45:6f:52:6f:0b:23:
                    75:97:a6:ad:61:1e:d2:f1:a5:a8:5f:af:5e:23:53:
                    37:4d:d7:da:4f:54:6a:42:3c:40:1f:b3:33:84:b7:
                    00:29:b8:37:d2:4c:91:41:9d:13:64:a8:86:c8:c2:
                    86:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:8A:F3:59:73:FD:4F:A5:63:F3:3B:73:76:53:46:82:10:7B:C8:F9
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CE285/5E1648B684BC11EAA5262263C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CE285/5E1648B684BC11EAA5262263C4F9AE02/X4rzWXP9T6Vj8ztzdlNGghB7yPk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  140585

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.166.0/23
                IPv6:
                  2001:df1:ad40::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:d6:10:ea:4d:ec:0e:33:a5:e1:ac:ec:e7:7a:af:22:e5:80:
         51:a0:fe:4c:8c:d1:9e:d0:c6:26:47:cf:d4:38:7d:29:f1:62:
         b0:4d:a0:27:e1:bb:25:aa:c5:a0:f8:a4:0b:a7:30:7e:5b:29:
         60:bb:59:cf:fe:8d:d6:e8:08:46:ec:cc:25:5e:fc:02:e9:1f:
         de:4b:cf:de:eb:0b:d1:5a:3d:53:2e:c4:61:dc:e6:61:d8:b2:
         19:7e:59:a0:ba:ca:ac:83:fc:0c:27:d8:d1:bd:0b:00:f7:6c:
         34:ab:2a:56:18:7e:84:7a:e5:63:0e:6b:28:bf:39:b7:38:8e:
         0d:4a:4b:24:14:74:64:89:dc:59:b8:d8:83:fc:bd:93:73:08:
         43:17:e0:d7:ec:04:43:de:db:e4:7e:22:88:f9:a0:11:7d:52:
         71:ab:13:d0:8a:bf:a1:9f:a3:6d:99:a4:14:46:4a:d1:d5:5d:
         4b:bb:c0:6f:c2:c4:c1:b1:7d:d8:d7:39:ae:27:8b:e3:e3:db:
         af:28:c8:12:9c:74:6b:50:60:74:a4:51:39:c2:2a:31:3a:5f:
         b1:6a:70:e3:66:d0:85:f6:41:2a:a3:72:86:1c:3d:55:08:22:
         61:fa:9f:ba:3f:e5:c1:ac:55:21:db:cc:5b:34:e7:7e:98:37:
         47:c6:01:9f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Apr 24 03:22:31 2024 by rpki-client on console-ams.rpki-client.org