Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
File:                     XAVrgGGoYiwsBruFeG6dxhNhS8o.cer (raw, json)
Hash identifier:          BnUqULTAwt8DIFUmIy26sa8rYd3hnmQsE2bVzq5F9Hc=
Subject key identifier:   5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01B96E
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 29 Aug 2023 04:07:21 +0000
Certificate not after:    Thu 31 Oct 2024 00:00:00 +0000
Subordinate resources:    IP: 103.62.0.0/22
                          IP: 103.230.8.0/22

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 23:35:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113006 (0x1b96e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 29 04:07:21 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7b:e4:6d:aa:7a:ea:d6:0f:9d:84:f4:f1:32:
                    64:b8:86:5e:9c:6d:5e:0b:c2:43:8c:04:e1:36:c3:
                    b3:51:e4:49:f9:9e:f6:89:7d:b8:36:b5:7c:32:2f:
                    22:60:87:86:a3:07:82:04:d7:e6:2f:68:8c:48:f6:
                    c3:40:85:d6:36:1d:e5:35:15:a7:21:28:15:75:4a:
                    2d:36:1b:28:03:f0:6b:25:8c:7a:01:76:51:42:ac:
                    2c:29:fc:4f:d7:5a:c7:d5:65:fa:8b:06:d0:20:11:
                    fc:e5:20:f6:57:82:6d:3f:a2:a4:3e:f3:91:92:8f:
                    a4:f3:a3:13:84:73:4b:b4:6e:58:d5:6e:0d:02:24:
                    85:19:44:d4:9e:45:07:02:3b:76:d7:db:11:c8:82:
                    2a:4f:6c:c3:b7:de:1d:d8:cf:45:63:66:d4:63:7f:
                    3f:87:9c:2e:b9:cf:68:6b:26:f3:28:26:f4:cb:96:
                    23:0a:a9:84:ea:9e:44:71:55:43:c4:c7:f1:e2:ef:
                    a0:a9:85:c8:01:51:dc:a5:74:12:9f:7f:94:fb:b5:
                    e7:55:5b:0f:a2:76:2c:36:fb:82:4a:e0:2f:cf:6a:
                    6b:6e:53:f5:41:8c:cc:7c:ae:d7:cb:50:5e:2b:a1:
                    3c:c5:9a:df:8c:0c:88:49:73:d0:22:4a:f7:6b:ae:
                    6f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.62.0.0/22
                  103.230.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:15:39:51:e1:cc:ef:ff:39:08:82:39:c0:48:03:a6:70:12:
         fe:87:1e:1e:b1:b6:29:bc:a5:71:df:2d:e3:30:f8:d8:3d:65:
         f4:e6:46:e4:b1:57:ba:ae:4b:2c:dc:e1:e2:8d:ac:83:96:4f:
         65:74:20:88:7e:1d:f0:9d:b4:e8:d8:1f:98:db:d5:68:27:cf:
         e1:d2:9e:ea:01:20:ca:08:65:0a:f6:c5:f5:46:16:79:08:ba:
         0a:1b:84:c2:3e:2b:24:48:62:bf:5f:3f:40:92:b4:a8:3d:c6:
         b7:d5:3a:ae:e8:43:0e:b3:f8:e0:ce:03:ce:8e:c7:75:cf:3b:
         7b:f7:63:4f:09:89:24:fe:bd:5c:be:89:1a:fe:f7:20:8c:34:
         a4:60:13:37:39:80:c1:82:f7:3e:60:19:82:f8:4f:d3:fd:69:
         ed:cf:d2:d5:8d:fb:26:12:31:e8:9c:2e:e0:eb:6d:21:2f:91:
         a4:9e:f9:a5:3e:b0:28:06:6f:11:77:ad:f2:17:7d:20:55:75:
         40:4f:3b:ee:73:5d:40:fa:52:14:cf:2f:a6:c4:f9:6d:54:00:
         11:61:9f:ae:06:44:f1:ed:93:59:b9:8a:ee:31:80:1d:f1:70:
         04:1d:f8:65:16:53:97:d5:91:26:38:35:2f:48:96:e8:19:a5:
         fc:89:7e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 01:10:20 2024 by rpki-client on console-ams.rpki-client.org