Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
File:                     XS3RVLXc4h-3hsUm297xsEWSirg.cer (download)
Hash identifier:          /nV8VsgpQkgrqBNIKQCwuIBiK7RoYSJ2jHnHYnk1ur0=
Subject key identifier:   5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       014BE5
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate valid until:  Sun 28 May 2023 00:00:00 +0000
Subordinate resources:
    1: AS: 7707
    2: AS: 9299
    3: AS: 17796
    4: AS: 24458
    5: AS: 45664
    6: AS: 131180
    7: AS: 132508
    8: AS: 132803
    9: AS: 133754
   10: AS: 134140
   11: AS: 134154
   12: AS: 134779
   13: AS: 135499
   14: AS: 136227
   15: AS: 137202
   16: AS: 137417
   17: AS: 137459
   18: AS: 138036
   19: AS: 138445
   20: AS: 139040
   21: AS: 139350
   22: AS: 139639
   23: AS: 139710
   24: AS: 139867
   25: AS: 141238
   26: AS: 142648
   27: IP: 27.110.128.0/17
   28: IP: 45.125.248.0/22
   29: IP: 49.144.0.0/13
   30: IP: 58.69.0.0/16
   31: IP: 58.71.0.0/17
   32: IP: 103.10.178.0/23
   33: IP: 103.233.36.0/22
   34: IP: 112.200.0.0 -- 112.211.255.255
   35: IP: 115.146.160.0 -- 115.147.255.255
   36: IP: 119.92.0.0/14
   37: IP: 122.2.0.0/15
   38: IP: 122.52.0.0/14
   39: IP: 124.83.0.0/17
   40: IP: 124.104.0.0/14
   41: IP: 124.217.0.0/17
   42: IP: 180.192.0.0/14
   43: IP: 202.86.200.0/21
   44: IP: 202.138.128.0/18
   45: IP: 203.213.192.0/19
   46: IP: 210.1.64.0/19
   47: IP: 210.5.64.0/18
   48: IP: 210.14.0.0/19
   49: IP: 210.185.176.0/20
   50: IP: 210.213.64.0 -- 210.213.255.255
   51: IP: 2001:4450::/29
   52: IP: 2400:f200::/32

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84965 (0x14be5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Mar 28 04:26:47 2022 GMT
            Not After : May 28 00:00:00 2023 GMT
        Subject: CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ce:06:82:a6:89:2b:9f:d5:85:90:d5:61:c5:
                    ce:bc:c2:a8:fe:7c:d2:6b:74:24:4f:6a:af:cd:a2:
                    f1:9f:5b:f5:bb:fb:77:c0:64:57:51:76:86:6f:2e:
                    c8:4c:79:5d:f6:99:a7:a9:52:e3:6b:ea:54:a3:af:
                    15:7d:36:d7:f6:b7:55:6f:57:e3:eb:9e:4f:3b:76:
                    be:70:04:f0:8e:a9:5d:e4:75:d1:88:e5:9b:df:76:
                    e2:17:67:68:c7:43:f1:0a:a2:e1:dc:0e:0e:92:77:
                    51:70:3d:30:88:c3:5a:a7:26:71:db:58:f8:cd:25:
                    72:0d:02:6c:22:23:5b:b5:91:6e:47:7b:5b:f7:2e:
                    f7:d6:58:d1:c4:e7:21:b7:a4:2d:77:9c:81:33:b2:
                    ea:ec:df:fa:c2:ec:5e:65:15:0d:1f:01:3e:a8:c6:
                    ad:af:8f:82:e8:49:26:36:50:ef:e0:f0:cc:c2:3a:
                    ed:ef:9a:af:19:06:c2:4f:bd:54:a8:15:54:ab:d2:
                    57:b9:e1:a5:8d:f4:b5:0a:e4:0e:c5:07:8c:e8:d7:
                    1c:0a:55:96:aa:5e:aa:dc:77:44:3d:4e:8f:3d:f3:
                    af:b3:ca:a4:bc:26:2b:95:25:d2:e4:d8:c4:12:28:
                    33:63:a5:64:9e:25:1a:1b:62:04:98:3d:9d:64:54:
                    4e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  7707
                  9299
                  17796
                  24458
                  45664
                  131180
                  132508
                  132803
                  133754
                  134140
                  134154
                  134779
                  135499
                  136227
                  137202
                  137417
                  137459
                  138036
                  138445
                  139040
                  139350
                  139639
                  139710
                  139867
                  141238
                  142648

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.110.128.0/17
                  45.125.248.0/22
                  49.144.0.0/13
                  58.69.0.0/16
                  58.71.0.0/17
                  103.10.178.0/23
                  103.233.36.0/22
                  112.200.0.0-112.211.255.255
                  115.146.160.0-115.147.255.255
                  119.92.0.0/14
                  122.2.0.0/15
                  122.52.0.0/14
                  124.83.0.0/17
                  124.104.0.0/14
                  124.217.0.0/17
                  180.192.0.0/14
                  202.86.200.0/21
                  202.138.128.0/18
                  203.213.192.0/19
                  210.1.64.0/19
                  210.5.64.0/18
                  210.14.0.0/19
                  210.185.176.0/20
                  210.213.64.0-210.213.255.255
                IPv6:
                  2001:4450::/29
                  2400:f200::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:3c:97:b8:f3:29:75:36:58:bc:91:f8:50:2e:a7:73:d7:01:
         70:31:a8:74:29:ff:be:c1:ee:0b:f8:54:d8:45:89:ed:76:2a:
         2d:22:e9:16:0a:33:66:fd:5c:44:ae:9f:95:34:02:41:41:98:
         7f:54:b6:94:bd:08:30:67:33:1e:74:3c:f6:79:da:4c:0a:48:
         66:06:fe:34:87:f4:54:57:21:8a:e3:e4:55:f6:a6:5f:33:87:
         ab:59:30:17:d3:7f:91:e3:67:cd:a1:c7:09:11:92:f3:6d:26:
         14:ad:50:29:63:7b:48:0b:c6:70:ae:a1:e6:54:58:13:63:d0:
         5a:ee:e1:2e:35:98:55:af:69:53:76:30:8f:f5:55:02:d3:5a:
         b2:32:05:7f:8b:01:c6:48:a7:ef:b1:cf:9c:fc:e3:29:5e:8e:
         ca:5f:d0:1c:de:0a:e6:e8:7c:83:b0:05:11:89:b9:ce:f1:5e:
         f9:e7:61:a2:d3:c6:48:b5:5e:bf:d8:09:ee:ba:eb:06:9c:fe:
         ba:c9:a8:72:2c:52:7f:ef:63:84:2c:84:cf:38:dc:f7:ef:38:
         0e:aa:92:86:cf:8b:7c:2f:2c:f3:ba:ee:57:8d:f4:1f:54:cb:
         27:a1:d7:a7:c5:94:13:7e:80:97:73:40:22:87:bb:53:a4:4d:
         f2:7e:3f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 2 15:27:22 2023 by rpki-client.