Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UjB9wiqo66vdMV3Lu8jiT6wSas.cer
File:                     _UjB9wiqo66vdMV3Lu8jiT6wSas.cer (raw, json)
Hash identifier:          6fPwYFCacCHKaVBTYK86KVrNiCR0cvzllqGzQuORK+U=
Subject key identifier:   FD:48:C1:F7:08:AA:A3:AE:AF:74:C5:77:2E:EF:23:89:3E:B0:49:AB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0195DE
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91D8AD4/B29910BA568611EC9C8EF651C4F9AE02/_UjB9wiqo66vdMV3Lu8jiT6wSas.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91D8AD4/B29910BA568611EC9C8EF651C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 03 Apr 2023 20:09:17 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 103.87.72.0/22
                          IP: 116.204.216.0/22

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Apr 2024 09:37:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103902 (0x195de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Apr  3 20:09:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=A91D8AD4/serialNumber=FD48C1F708AAA3AEAF74C5772EEF23893EB049AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9f:58:d4:82:8e:6c:56:95:73:f0:e7:9b:66:
                    c8:29:ac:c3:46:73:97:4f:61:02:16:ff:34:a0:74:
                    8a:fd:50:2f:59:c3:b8:aa:e9:98:83:3c:ea:fc:3a:
                    1f:b0:e0:a0:b4:6a:ab:be:ad:59:5e:e7:f8:38:92:
                    14:ac:4a:15:cf:92:be:ed:f8:5f:ab:02:79:bb:cb:
                    1d:ca:73:1f:4c:30:e7:6d:88:2b:a7:d0:5c:57:a5:
                    05:38:f3:2b:13:2e:b6:de:40:ed:e0:e6:bf:0f:f4:
                    1d:a4:c7:35:b6:8e:fa:c9:83:21:35:50:63:e4:2e:
                    d3:e6:7b:33:ec:51:0e:88:13:7a:e8:03:46:60:9f:
                    f4:1b:21:4d:88:b7:dc:45:2c:9a:76:d3:be:ad:ba:
                    9d:9e:ac:57:c6:fb:a8:16:c3:a2:09:40:ed:9e:79:
                    8a:71:af:26:62:84:3a:5e:4c:ab:8f:1d:2d:be:b6:
                    7c:49:64:26:6e:16:88:6c:6e:aa:9c:85:a2:e9:bc:
                    87:81:5f:ef:04:00:cd:28:97:88:5d:ab:96:c2:43:
                    3e:86:43:8e:64:26:2d:44:e3:11:bb:de:0d:1b:f2:
                    2c:bf:fb:ae:04:2f:4a:4e:fb:ef:ce:78:49:14:32:
                    74:81:0d:cd:86:f7:bc:0d:9d:d1:43:73:36:2d:db:
                    45:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:48:C1:F7:08:AA:A3:AE:AF:74:C5:77:2E:EF:23:89:3E:B0:49:AB
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D8AD4/B29910BA568611EC9C8EF651C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D8AD4/B29910BA568611EC9C8EF651C4F9AE02/_UjB9wiqo66vdMV3Lu8jiT6wSas.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.87.72.0/22
                  116.204.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:64:a7:70:b4:fa:0e:45:dc:15:56:d5:eb:28:fb:a0:97:e9:
         67:bf:ee:35:d9:8b:35:43:c3:3f:c0:62:37:79:92:80:8c:b6:
         d4:b6:75:7a:53:dd:bf:17:40:6c:3e:b1:cb:71:28:10:c5:52:
         2b:a6:81:49:75:e7:56:dd:7e:3a:6d:49:d7:bd:a2:1b:dd:d4:
         3c:f8:be:f0:b0:c0:2d:c0:65:cc:88:11:7b:12:99:ef:25:2f:
         f6:e7:53:72:55:96:3c:d4:f5:1a:8a:a0:ee:cf:06:28:99:4a:
         6e:58:49:71:a3:81:53:ea:d8:6a:be:a5:db:06:94:ad:14:c0:
         93:82:31:0a:7e:62:1c:e4:72:7b:74:13:30:6f:28:c1:70:e4:
         a8:0d:da:19:c9:1c:d6:c6:0b:a0:f0:f3:4a:fe:7b:b7:bf:32:
         c7:06:4d:dd:c1:eb:5a:16:e4:bf:d4:91:6f:ae:3f:78:39:5f:
         56:1b:e2:b9:37:9b:c5:7d:e6:eb:c4:b6:d3:07:22:f8:d3:a5:
         a9:ec:b6:93:d5:2e:99:7f:e3:10:2c:56:13:4f:01:8b:74:12:
         6b:f3:c0:78:3f:1f:14:43:11:2b:1b:2d:e8:bd:3f:71:14:3b:
         50:58:a0:42:d4:23:98:5d:d5:c8:a6:47:50:74:19:ea:1d:17:
         a7:98:dc:0b
-----BEGIN CERTIFICATE-----
MIIGBDCCBOygAwIBAgIDAZXeMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMDQwMzIwMDkxN1oXDTI0MDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRDhBRDQxMTAvBgNVBAUTKEZENDhDMUY3MDhBQUEzQUVBRjc0QzU3
NzJFRUYyMzg5M0VCMDQ5QUIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCan1jUgo5sVpVz8OebZsgprMNGc5dPYQIW/zSgdIr9UC9Zw7iq6ZiDPOr8Oh+w
4KC0aqu+rVle5/g4khSsShXPkr7t+F+rAnm7yx3Kcx9MMOdtiCun0FxXpQU48ysT
LrbeQO3g5r8P9B2kxzW2jvrJgyE1UGPkLtPmezPsUQ6IE3roA0Zgn/QbIU2It9xF
LJp2076tup2erFfG+6gWw6IJQO2eeYpxryZihDpeTKuPHS2+tnxJZCZuFohsbqqc
haLpvIeBX+8EAM0ol4hdq5bCQz6GQ45kJi1E4xG73g0b8iy/+64EL0pO++/OeEkU
MnSBDc2G97wNndFDczYt20XNAgMBAAGjggL5MIIC9TAdBgNVHQ4EFgQU/UjB9wiq
o66vdMV3Lu8jiT6wSaswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUQ4QUQ0L0IyOTkxMEJBNTY4NjExRUM5QzhFRjY1MUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFEOEFENC9CMjk5MTBCQTU2ODYxMUVDOUM4RUY2NTFDNEY5QUUwMi9fVWpCOXdp
cW82NnZkTVYzTHU4amlUNndTYXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8EFjAU
MBIEAgABMAwDBAJnV0gDBAJ0zNgwDQYJKoZIhvcNAQELBQADggEBAB9kp3C0+g5F
3BVW1eso+6CX6We/7jXZizVDwz/AYjd5koCMttS2dXpT3b8XQGw+sctxKBDFUium
gUl151bdfjptSde9ohvd1Dz4vvCwwC3AZcyIEXsSme8lL/bnU3JVljzU9RqKoO7P
BiiZSm5YSXGjgVPq2Gq+pdsGlK0UwJOCMQp+Yhzkcnt0EzBvKMFw5KgN2hnJHNbG
C6Dw80r+e7e/MscGTd3B61oW5L/UkW+uP3g5X1Yb4rk3m8V95uvEttMHIvjTpans
tpPVLpl/4xAsVhNPAYt0EmvzwHg/HxRDESsbLei9P3EUO1BYoELUI5hd1cimR1B0
GeodF6eY3As=
-----END CERTIFICATE-----
Generated at Thu Mar 28 11:22:33 2024 by rpki-client on console-fra.rpki-client.org