Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLaGsF3L6L6pKAdTLeKad5BRVvU.cer
File:                     ZLaGsF3L6L6pKAdTLeKad5BRVvU.cer (download)
Hash identifier:          nEBN1odebwZcqfcrgmS0KIIxIDXg8wkySKXMEwJWz7I=
Subject key identifier:   64:B6:86:B0:5D:CB:E8:BE:A9:28:07:53:2D:E2:9A:77:90:51:56:F5
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       016076
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91476F2/2BE43DA0CB2C11EBBC35C440C4F9AE02/ZLaGsF3L6L6pKAdTLeKad5BRVvU.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91476F2/2BE43DA0CB2C11EBBC35C440C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate valid until:  Sat 30 Sep 2023 00:00:00 +0000
Subordinate resources:
    1: AS: 139640
    2: IP: 103.66.56.0/22
    3: IP: 103.228.168.0/22
    4: IP: 2403:1d40::/32

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90230 (0x16076)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul  6 01:54:38 2022 GMT
            Not After : Sep 30 00:00:00 2023 GMT
        Subject: CN=A91476F2/serialNumber=64B686B05DCBE8BEA92807532DE29A77905156F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8c:31:e5:dd:72:f9:73:2d:b7:83:75:e3:6d:
                    c5:5d:be:2a:dd:d0:90:7b:57:d0:b0:d3:93:03:96:
                    bc:a7:55:60:44:ce:b1:92:0d:2d:2d:0d:0d:df:50:
                    4f:98:4e:03:66:e6:0f:3c:51:32:bf:a0:f3:49:f6:
                    b6:9c:b8:82:ed:7f:fd:3b:9d:39:97:cd:28:9c:3d:
                    c0:bd:fa:7e:2a:61:ae:07:fe:b3:da:d7:2f:27:d4:
                    37:07:38:ca:91:bb:61:c6:b3:6e:6f:e9:f3:23:6d:
                    0e:38:77:c4:a5:4a:d3:02:e0:ed:f7:36:23:47:49:
                    87:e0:54:b7:82:a7:87:69:72:7a:91:c5:a7:1b:c8:
                    01:d8:17:b9:e5:c1:5e:67:6c:b7:d8:17:08:71:4f:
                    52:a9:1c:35:da:48:02:73:74:0e:11:e6:81:f5:07:
                    ff:eb:30:9e:e1:10:0a:73:c7:2b:21:90:6d:b8:25:
                    35:14:cc:85:35:09:79:f4:95:40:e1:26:49:15:70:
                    f1:3d:df:5a:56:48:d2:41:4a:96:ec:14:dc:d3:03:
                    6f:a1:61:59:9b:16:9e:77:8a:8f:17:ad:ca:1c:b6:
                    4a:66:40:c6:fd:c7:00:bb:94:e6:10:f1:d3:95:19:
                    74:4a:5c:81:bb:3e:7e:ee:0c:5b:6e:3a:e4:b0:33:
                    cc:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                64:B6:86:B0:5D:CB:E8:BE:A9:28:07:53:2D:E2:9A:77:90:51:56:F5
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91476F2/2BE43DA0CB2C11EBBC35C440C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91476F2/2BE43DA0CB2C11EBBC35C440C4F9AE02/ZLaGsF3L6L6pKAdTLeKad5BRVvU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  139640

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.66.56.0/22
                  103.228.168.0/22
                IPv6:
                  2403:1d40::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:04:1e:d7:50:74:a2:ab:40:30:31:31:6a:f5:89:30:aa:a2:
         b6:a7:11:59:75:bc:da:de:33:66:33:4e:f1:19:b2:bd:16:2d:
         cd:ba:b5:fd:41:66:c0:db:57:2f:1d:ac:58:c1:d4:db:91:d8:
         25:f4:c6:6b:e8:03:29:d5:a2:c7:07:c0:1f:7e:e2:4f:15:8c:
         6a:77:65:c0:08:91:cd:ff:ec:d6:7f:0a:26:47:79:af:80:94:
         1c:e8:b1:75:e2:66:0d:97:2b:9e:14:0e:90:90:5b:83:01:70:
         4e:90:fd:c3:c2:7d:1a:2d:ba:ec:1d:c5:ee:c5:f9:c9:db:87:
         87:7a:42:8e:9c:db:98:58:5e:d1:aa:3c:a4:cf:31:86:ff:b1:
         40:ea:11:3d:2e:fc:0f:65:f2:f8:9b:44:5c:0e:0a:16:df:fa:
         11:e8:81:32:cf:e5:ca:b3:1b:0a:95:b5:24:98:35:c6:40:f6:
         c2:22:51:fb:90:5d:17:6e:10:65:07:12:28:3f:ce:04:c1:10:
         f2:ad:42:b1:bb:76:65:64:e7:1f:7b:63:9c:54:5e:d6:84:00:
         68:ae:66:b5:1a:b1:1d:8c:02:be:40:96:5f:da:91:1b:cd:dd:
         ec:a3:52:87:36:c0:df:2b:33:00:ae:b4:f9:73:8c:28:9c:a7:
         4a:ab:e7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 5 13:58:46 2023 by rpki-client.