Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbChG9lEvNqGW7mx-_fuBtVzvXE.cer
File:                     YbChG9lEvNqGW7mx-_fuBtVzvXE.cer (raw, json)
Hash identifier:          QWijDUgoJqlnrlN418Y/ZRjKvrnc6pM92EfBQIZyyoE=
Subject key identifier:   61:B0:A1:1B:D9:44:BC:DA:86:5B:B9:B1:FB:F7:EE:06:D5:73:BD:71
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01E29C
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/YbChG9lEvNqGW7mx-_fuBtVzvXE.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 04 Mar 2024 13:26:08 +0000
Certificate not after:    Thu 01 May 2025 00:00:00 +0000
Subordinate resources:    AS: 63954
                          IP: 103.51.220.0/24
                          IP: 103.94.102.0/24
                          IP: 2001:df7:a100::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Apr 2024 14:50:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123548 (0x1e29c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Mar  4 13:26:08 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=A9127656/serialNumber=61B0A11BD944BCDA865BB9B1FBF7EE06D573BD71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:48:b1:d6:cb:2d:bb:0a:d0:7a:7e:55:d2:81:
                    91:10:14:6e:97:f2:94:e3:3c:cf:73:e1:be:1b:15:
                    19:54:64:c8:58:e7:35:a1:26:c9:f3:b6:04:ef:0c:
                    1d:c9:d5:13:2c:c7:8c:63:12:2b:06:eb:a4:a8:44:
                    e0:12:6e:a0:f1:f5:4f:0a:f6:5d:b4:e6:b8:56:8e:
                    ff:d4:b5:03:1b:6c:11:6e:42:97:e8:3d:37:e8:77:
                    68:6f:a9:c8:63:06:c8:86:65:86:8b:83:43:fa:14:
                    54:26:0e:5b:c7:8e:c4:7b:f0:2e:90:46:dd:f3:64:
                    51:f8:40:16:cd:f1:bf:7c:82:f3:79:ba:6b:00:09:
                    a6:eb:f1:1b:63:88:df:bc:93:a1:65:ae:f4:59:31:
                    33:c8:fb:30:e1:7c:93:38:29:09:51:f4:bb:67:b7:
                    cb:58:e2:d0:a7:a0:cd:72:a1:f4:ea:2d:0d:36:73:
                    ed:99:ac:4e:4f:fb:ea:b4:5b:31:e5:19:7b:6a:e4:
                    0c:19:a8:d3:3f:d7:fe:b5:be:b5:4c:88:c1:0a:a1:
                    51:eb:fe:d0:de:63:fb:83:8a:3b:05:09:ae:6d:0a:
                    70:d4:2c:45:af:10:ab:df:e4:c5:ee:0e:f3:02:5e:
                    d8:e6:0d:6a:10:47:90:ff:88:6d:27:52:c8:2c:2b:
                    6e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:B0:A1:1B:D9:44:BC:DA:86:5B:B9:B1:FB:F7:EE:06:D5:73:BD:71
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/YbChG9lEvNqGW7mx-_fuBtVzvXE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  63954

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.51.220.0/24
                  103.94.102.0/24
                IPv6:
                  2001:df7:a100::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:4b:59:58:47:90:58:ec:ee:fc:3c:14:d0:e7:e4:17:dc:49:
         e0:32:07:09:a2:17:82:17:c3:cc:33:83:00:a0:f6:f8:db:ea:
         35:0d:7c:f7:54:f5:59:d6:c8:bf:f9:61:3c:b6:d6:d1:2f:85:
         a4:54:8b:61:42:bf:0d:42:b3:93:10:00:6f:96:ab:1c:1b:99:
         e1:22:e9:08:81:fb:16:66:64:89:ac:27:9d:ea:a9:73:bb:50:
         3f:c4:a4:7f:84:5b:20:82:f8:51:3e:26:3e:68:e6:79:1c:81:
         a3:61:40:a9:24:22:d7:14:1d:f5:0e:e1:14:b1:ff:1d:a0:6f:
         66:ce:de:02:be:51:7b:b3:00:3d:b8:81:c2:d2:65:70:cf:5a:
         b9:c5:3d:95:e4:24:91:05:4c:01:db:0c:c3:03:dd:c6:f2:aa:
         aa:19:ea:ee:67:48:f0:5c:8c:1e:00:bb:c6:5a:23:37:0a:39:
         34:66:89:5c:16:b8:91:64:13:ac:fc:81:68:c3:c0:73:bd:d1:
         79:cf:8d:6c:cc:49:50:70:2e:44:74:eb:88:cf:e3:2b:93:c9:
         45:e2:d5:ea:82:a0:93:21:8f:b0:b8:78:67:7b:19:e9:a9:d4:
         be:b6:fe:15:ea:8a:2d:28:5e:9a:3e:78:21:15:db:ed:57:5c:
         0e:c8:ad:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 16:08:16 2024 by rpki-client on console-ams.rpki-client.org