Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_h1b-QL6kS1-C16YDPkdvf0rtk8.cer
File:                     _h1b-QL6kS1-C16YDPkdvf0rtk8.cer (raw, json)
Hash identifier:          qsvxHEqGhZfqPiCq8HCjiraCleMs28GGlEYaw/qd94Y=
Subject key identifier:   FE:1D:5B:F9:02:FA:91:2D:7E:0B:5E:98:0C:F9:1D:BD:FD:2B:B6:4F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01E122
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 28 Feb 2024 01:21:22 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 64072
                          IP: 103.25.120.0/22
                          IP: 2404:bc80::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 07:49:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123170 (0x1e122)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb 28 01:21:22 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=A91F8534/serialNumber=FE1D5BF902FA912D7E0B5E980CF91DBDFD2BB64F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ac:ae:b2:91:5c:ac:90:8f:f2:89:5c:2b:a7:
                    87:6d:44:86:80:58:2c:34:76:80:1b:81:cb:fd:f2:
                    b7:98:58:c4:fd:a8:4c:35:9b:6f:af:57:52:50:84:
                    fd:97:74:0d:62:51:bd:37:32:c0:8e:31:e1:9f:d6:
                    1f:f7:89:05:5a:dc:23:9f:bc:7f:ab:5e:10:aa:c9:
                    47:0a:31:d9:e3:bb:81:c4:47:09:8f:5d:82:99:f8:
                    ab:4a:22:bd:17:cd:33:1c:b6:11:01:50:46:e1:b6:
                    39:f4:79:a1:82:0f:4a:da:91:5e:ff:13:ac:4e:51:
                    df:9e:8a:01:38:b9:54:24:49:09:25:35:3f:88:6e:
                    19:7f:64:78:56:00:72:67:82:ee:4a:88:2a:ec:1d:
                    d3:7a:37:73:91:49:26:a3:dd:00:1d:34:a8:5e:4a:
                    da:84:e1:cb:85:b6:40:85:57:76:c2:b2:b1:b3:e5:
                    c1:41:58:53:84:3c:14:ca:37:2f:19:c9:52:07:21:
                    d6:bf:56:fa:6c:d7:30:73:98:1c:63:62:00:c5:0c:
                    c1:bf:22:8a:bf:fa:4c:d3:ae:70:a1:d8:73:36:89:
                    b9:ef:ce:8a:e9:5f:c3:57:bb:63:77:40:c1:ee:0f:
                    1f:56:d2:13:ea:0c:4c:17:26:62:95:e2:a3:80:70:
                    d8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:1D:5B:F9:02:FA:91:2D:7E:0B:5E:98:0C:F9:1D:BD:FD:2B:B6:4F
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  64072

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.25.120.0/22
                IPv6:
                  2404:bc80::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:00:c0:f2:80:38:4f:0e:b9:e1:f5:17:73:7b:76:11:3f:3b:
         70:e6:e2:0d:b9:c4:21:80:43:07:47:2d:a7:d8:7a:97:6c:f7:
         3e:7f:24:c1:9b:cc:90:ea:35:06:37:ea:c6:54:ad:3d:58:5d:
         ee:ef:8d:08:13:8c:4c:fe:91:67:0e:41:91:cd:c3:50:ab:fc:
         e7:48:4c:34:4f:85:a5:99:6c:d1:c8:21:eb:ec:70:45:ef:f5:
         cb:ba:30:98:98:8b:4e:7f:69:58:cc:fd:31:cd:51:5c:95:d5:
         00:d3:54:e8:75:5e:75:0c:a6:d3:fd:ff:7e:fd:a4:61:de:72:
         45:72:c2:89:ae:81:7d:6c:54:f7:9a:92:73:21:11:66:7d:a5:
         d6:24:8c:64:8d:ff:05:85:a6:64:b4:52:a0:0b:4c:1d:f8:1e:
         bf:a9:e0:e6:f9:f3:67:d5:51:68:70:3e:9c:f3:16:ed:9a:7d:
         87:63:8d:df:cb:4f:36:3c:52:6c:71:15:00:64:8a:55:d0:4e:
         93:bd:55:03:10:73:4a:5b:a0:da:78:85:1d:5d:ea:9b:b9:d4:
         6e:39:06:81:46:19:af:0f:59:7e:8b:16:ea:44:b0:f3:7b:77:
         77:54:8f:b3:27:ea:01:c2:05:90:00:01:9c:36:54:26:6d:7f:
         a1:22:49:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----