Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer
File:                     ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer (raw, json)
Hash identifier:          GULXhshu2TfX4/8iJv5NoOH6/v/pxJwLFHSeWFGg9Ss=
Subject key identifier:   64:45:23:7E:56:EE:89:44:2B:F3:14:35:2C:FC:54:3D:65:D1:B6:0E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01D53A
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sun 31 Dec 2023 12:30:13 +0000
Certificate not after:    Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 150440
                          IP: 103.42.202.0/23
                          IP: 2001:df1:9540::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Apr 2024 12:32:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120122 (0x1d53a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec 31 12:30:13 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=A9115AC8/serialNumber=6445237E56EE89442BF314352CFC543D65D1B60E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:78:2b:06:23:2c:07:7f:7f:16:e7:3f:3d:a9:
                    8f:bc:2d:c7:d2:a2:11:a7:2d:71:9b:02:b5:6e:f3:
                    e9:e4:5b:c8:43:30:21:df:8e:95:5a:0c:00:4f:c9:
                    50:4d:1a:d2:d3:d0:18:52:75:11:6c:3a:7c:cc:b6:
                    ec:d9:1b:81:76:bc:8c:05:17:e4:97:bd:fb:81:34:
                    1b:74:4a:1a:4b:26:63:89:a1:56:42:13:98:52:9a:
                    ae:16:c5:bf:10:f2:81:ca:5a:d0:6d:4b:b4:46:d2:
                    a3:c2:80:bb:e1:3f:13:ef:98:e4:b7:b9:85:78:53:
                    ab:d4:a1:51:1c:53:5c:19:63:1a:c1:dd:06:32:d8:
                    07:d5:41:ce:00:2d:29:b4:60:b5:60:d2:e6:78:6e:
                    2f:e4:b3:e7:9e:c1:b1:36:74:7d:b9:c0:42:04:eb:
                    3a:23:36:58:59:99:41:82:9b:10:5a:a1:a0:f5:02:
                    0d:69:63:91:e2:bf:f0:91:c0:37:cc:f8:ac:60:2f:
                    c7:5c:a8:5a:b0:c2:8e:de:9b:e7:35:a7:7d:57:d1:
                    5c:32:07:fa:6e:db:9f:bb:0f:0a:67:d4:22:96:e6:
                    28:b1:da:00:f2:9c:f3:b1:90:ef:2e:7c:cc:86:3e:
                    41:3d:e6:6b:93:92:63:eb:d5:1c:7b:e2:30:93:76:
                    d2:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:45:23:7E:56:EE:89:44:2B:F3:14:35:2C:FC:54:3D:65:D1:B6:0E
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  150440

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.202.0/23
                IPv6:
                  2001:df1:9540::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:c8:49:71:42:c9:c3:27:23:1e:5d:d9:94:e6:60:80:a2:fe:
         0e:2e:ab:81:3f:2c:80:6c:77:97:4d:a3:90:42:ef:4d:70:35:
         d0:dd:5f:30:08:80:1a:58:39:d9:21:e7:79:56:ae:f9:f1:d4:
         4d:40:dc:b2:6d:b3:b8:26:fb:cd:e9:d7:fc:42:eb:27:1a:16:
         aa:fb:61:dc:f7:32:16:96:61:a2:cf:07:4f:c1:cd:e3:0a:af:
         97:f3:86:16:81:da:91:de:20:8d:f4:8a:78:1f:d1:c8:13:fb:
         3b:a4:70:76:a0:a4:29:33:32:36:64:3c:9c:1d:80:e1:14:80:
         e2:54:b0:55:78:56:06:e1:27:5a:16:3d:e8:b9:ab:08:fa:5a:
         93:75:7d:db:f4:95:49:08:37:db:ba:fe:9a:79:12:f7:2a:fa:
         57:b0:a1:75:3a:61:8a:30:35:62:46:0f:5c:f2:48:06:e8:1d:
         74:14:34:46:1b:a7:ac:72:1f:a8:6e:4a:bb:39:42:69:fb:76:
         73:9f:d0:22:c6:1c:f5:82:e4:e6:30:19:3d:a0:c4:35:7b:c8:
         85:dd:ee:2f:57:cc:fd:eb:21:3e:ad:19:b6:19:17:b6:35:72:
         b1:3d:e6:0c:96:88:3c:58:2f:5a:8d:92:63:c9:1d:d7:56:98:
         aa:ec:8f:58
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAdU6MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMTIzMTEyMzAxM1oXDTI1MDMwMjAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMTVBQzgxMTAvBgNVBAUTKDY0NDUyMzdFNTZFRTg5NDQyQkYzMTQz
NTJDRkM1NDNENjVEMUI2MEUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCeeCsGIywHf38W5z89qY+8LcfSohGnLXGbArVu8+nkW8hDMCHfjpVaDABPyVBN
GtLT0BhSdRFsOnzMtuzZG4F2vIwFF+SXvfuBNBt0ShpLJmOJoVZCE5hSmq4Wxb8Q
8oHKWtBtS7RG0qPCgLvhPxPvmOS3uYV4U6vUoVEcU1wZYxrB3QYy2AfVQc4ALSm0
YLVg0uZ4bi/ks+eewbE2dH25wEIE6zojNlhZmUGCmxBaoaD1Ag1pY5Hiv/CRwDfM
+KxgL8dcqFqwwo7em+c1p31X0VwyB/pu25+7Dwpn1CKW5iix2gDynPOxkO8ufMyG
PkE95muTkmPr1Rx74jCTdtKFAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUZEUjflbu
iUQr8xQ1LPxUPWXRtg4wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTE1QUM4L0JBNkQyN0Q0NkM1RDExRUQ4QzVDNjQxQ0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTExNUFDOC9CQTZEMjdENDZDNUQxMUVEOEM1QzY0MUNDNEY5QUUwMi9aRVVqZmxi
dWlVUXI4eFExTFB4VVBXWFJ0ZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAkuoMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZyrKMA8EAgAC
MAkDBwAgAQ3xlUAwDQYJKoZIhvcNAQELBQADggEBAATISXFCycMnIx5d2ZTmYICi
/g4uq4E/LIBsd5dNo5BC701wNdDdXzAIgBpYOdkh53lWrvnx1E1A3LJts7gm+83p
1/xC6ycaFqr7Ydz3MhaWYaLPB0/BzeMKr5fzhhaB2pHeII30ingf0cgT+zukcHag
pCkzMjZkPJwdgOEUgOJUsFV4VgbhJ1oWPei5qwj6WpN1fdv0lUkIN9u6/pp5Evcq
+lewoXU6YYowNWJGD1zySAboHXQUNEYbp6xyH6huSrs5Qmn7dnOf0CLGHPWC5OYw
GT2gxDV7yIXd7i9XzP3rIT6tGbYZF7Y1crE95gyWiDxYL1qNkmPJHddWmKrsj1g=
-----END CERTIFICATE-----
Generated at Thu Mar 28 13:34:07 2024 by rpki-client on console-ams.rpki-client.org