Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer
File:                     _zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer (raw, json)
Hash identifier:          XmNnXMP47m5YaVkQ20gD7n6oKvyjLVian8fTJGN5daE=
Subject key identifier:   FF:32:78:A3:AD:58:B1:8A:54:6E:3F:ED:CD:53:78:40:52:77:67:A8
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01A51A
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 25 May 2023 14:23:46 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 45766
                          IP: 45.127.48.0/22
                          IP: 103.40.226.0/23
                          IP: 103.51.2.0/23
                          IP: 113.21.228.0/22
                          IP: 2400:f940::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Apr 2024 15:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107802 (0x1a51a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May 25 14:23:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=A914A8CB/serialNumber=FF3278A3AD58B18A546E3FEDCD537840527767A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:50:7a:71:08:98:85:8b:41:08:79:bd:41:d2:
                    3c:c2:b5:34:a8:ab:a9:95:b9:0c:2b:78:d4:8d:a8:
                    c7:9e:2d:a6:7b:77:3d:c1:f0:69:7b:33:be:d4:4b:
                    55:24:47:28:96:c0:bd:c1:3e:76:a4:99:63:82:35:
                    96:45:3c:1e:05:aa:e9:f8:d6:18:cc:71:8b:eb:69:
                    2a:b3:f4:b0:84:50:9d:13:3a:f6:53:85:b3:82:9f:
                    a2:53:66:db:53:c9:59:79:bd:ac:fd:f5:d3:7c:35:
                    7f:c0:a0:cc:41:f6:59:fc:db:4c:7e:4c:9a:fe:0d:
                    66:39:d1:e3:13:46:78:45:d5:aa:64:07:ae:3d:b0:
                    bb:6d:4f:65:27:c3:87:2e:11:1b:ca:e7:82:c9:3d:
                    8a:c5:42:02:ac:3e:51:47:7a:86:99:5d:f0:dc:29:
                    38:0d:7d:b5:89:81:7d:2d:83:32:3f:1f:61:36:17:
                    59:4e:8d:e5:36:35:9d:54:ba:6c:82:e9:7e:9b:9e:
                    da:8d:63:83:ae:44:5d:7a:08:7e:a1:a3:c6:c3:01:
                    c1:7f:93:dd:11:85:ce:f7:6d:78:2c:67:03:f7:d7:
                    0c:de:1c:3d:b2:a2:7f:8a:94:d3:44:14:41:7b:e6:
                    a5:3a:53:ca:5b:1c:b8:a3:d5:58:58:f9:b9:17:b6:
                    fe:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:32:78:A3:AD:58:B1:8A:54:6E:3F:ED:CD:53:78:40:52:77:67:A8
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  45766

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.127.48.0/22
                  103.40.226.0/23
                  103.51.2.0/23
                  113.21.228.0/22
                IPv6:
                  2400:f940::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:a7:9c:9f:07:31:ee:41:2f:f3:9a:0d:21:5f:c1:9b:64:61:
         45:30:a7:f3:16:14:ca:cd:52:77:59:7b:09:54:2d:78:e0:60:
         1e:66:5b:01:cb:b7:aa:d0:f7:5e:a6:25:a3:ef:22:f3:91:44:
         2f:44:0c:ec:4a:c3:32:dd:2d:5c:20:48:87:83:00:bd:2d:dc:
         f3:92:5b:85:a0:0c:22:ba:1c:f9:ef:71:4e:cb:19:ee:d3:b7:
         ec:5f:cf:a4:02:6a:bd:8a:74:82:9b:e6:f8:32:20:67:ac:db:
         d6:94:28:72:e9:3e:fd:60:25:3f:ad:ef:b9:d4:96:3b:c9:59:
         6b:9b:2c:5b:4e:49:04:7b:80:ae:61:1c:34:bb:ee:ca:da:3f:
         cc:51:fa:f9:c6:d7:39:4e:cb:0a:c9:0e:f9:80:90:b6:c7:70:
         49:0f:f2:d0:a1:6e:ec:a1:c9:69:4e:5e:dc:d8:d8:f8:01:ab:
         aa:2a:fa:e9:0b:89:be:d6:81:68:2a:8c:e4:0f:0f:ba:f8:8f:
         7e:d4:b3:8d:b6:d5:ff:5d:54:12:6d:7b:c9:71:0e:8f:23:4c:
         90:25:7b:d9:61:eb:ad:fd:fa:12:d7:60:db:27:ec:be:80:cb:
         3f:9a:aa:13:82:d6:cb:27:21:31:5c:5d:8d:1a:bb:a5:9f:d1:
         d7:27:8e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 16:11:42 2024 by rpki-client on console-fra.rpki-client.org