Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer
File:                     a-rAl7V48XydcRl3ez9RFPvglxs.cer (raw, json)
Hash identifier:          CFaMbdn+5xpG4ozenI7HqjXpsooWo5N9wXUKhn5jCGo=
Subject key identifier:   6B:EA:C0:97:B5:78:F1:7C:9D:71:19:77:7B:3F:51:14:FB:E0:97:1B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0208C2
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sat 24 Aug 2024 18:25:27 +0000
Certificate not after:    Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources:    AS: 139282
                          IP: 103.140.204.0/23
                          IP: 2001:df0:d380::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133314 (0x208c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 24 18:25:27 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=A91C5A9F/serialNumber=6BEAC097B578F17C9D7119777B3F5114FBE0971B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:21:f1:8e:00:7d:86:76:2f:8f:f0:33:f1:97:
                    f7:01:e4:b7:94:07:59:41:2f:54:a5:ee:cd:1a:e9:
                    94:40:d6:1c:c0:35:e3:23:a6:33:a2:3a:56:71:14:
                    01:de:fd:e5:2b:5b:b8:b2:98:10:85:51:a8:d9:8f:
                    1e:fa:0b:04:9e:84:d5:48:58:32:25:bd:ea:c6:c7:
                    eb:43:79:22:bb:2d:56:c4:9c:a2:7b:8a:7b:d0:ad:
                    8f:ea:e3:b7:f7:65:8a:ef:7d:9b:12:0c:29:37:fa:
                    fb:36:5b:20:6d:74:3a:dd:f2:6e:83:26:87:3e:21:
                    e9:f1:e6:8c:95:99:57:0f:47:2e:b1:27:e6:24:2f:
                    d3:2f:92:de:23:0a:1b:24:9c:aa:7e:43:c3:78:c5:
                    f2:e9:5d:8c:07:1d:63:ff:50:c6:67:a3:55:cc:72:
                    f7:5f:66:d5:85:d2:4c:61:c9:f1:3a:16:8f:2d:db:
                    37:82:5b:26:45:ed:2d:41:ec:d3:ac:15:44:16:43:
                    ee:88:24:d1:72:4c:18:34:2e:b7:a8:55:c9:32:dc:
                    dc:a0:cf:00:3b:24:9d:92:10:57:cf:3d:03:eb:21:
                    30:a8:fe:ec:b4:d7:f7:23:03:38:b1:c1:2c:b8:85:
                    8a:2b:f5:f9:07:94:dd:67:21:3f:4e:b2:0f:9f:61:
                    f8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:EA:C0:97:B5:78:F1:7C:9D:71:19:77:7B:3F:51:14:FB:E0:97:1B
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  139282

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.204.0/23
                IPv6:
                  2001:df0:d380::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:85:c3:82:4c:b2:ca:51:2d:37:c7:62:05:92:48:b3:f8:0e:
         72:59:68:fa:78:a5:7d:98:25:d2:e5:23:fa:e6:d3:e1:b2:7f:
         cd:1a:76:00:e6:aa:58:92:55:87:87:e5:f9:52:cb:f4:2e:60:
         f7:81:cb:39:f5:5b:65:f8:c4:cf:99:35:e3:27:08:94:b6:f9:
         c8:0c:2e:f9:d4:92:e8:f0:f9:3f:50:1b:2e:09:af:27:a4:c5:
         3f:c2:13:74:de:b2:e9:45:7d:7e:7f:c1:46:3d:12:55:70:eb:
         e3:78:1a:26:67:d2:bf:84:e8:a6:5a:45:11:8f:31:9c:33:d4:
         3f:4e:11:0d:2a:78:dd:90:b9:f2:6a:1b:b8:b0:c6:f8:e5:50:
         12:c0:8c:4e:94:49:3a:bd:74:41:a0:c8:5d:33:3e:c6:0b:51:
         58:3a:12:27:28:a6:3f:37:5f:18:f4:61:50:8a:cd:74:59:74:
         3f:93:e7:57:f6:73:be:a7:53:63:af:2c:20:80:11:d3:f9:4b:
         2c:6b:54:ea:ec:59:1d:cb:2b:11:ee:84:0d:47:d7:a7:30:02:
         f3:9c:37:9c:95:12:4f:08:54:f1:2a:f1:34:91:f2:f6:ac:10:
         bb:5b:e1:4c:fa:0c:72:7e:92:cf:ce:e0:ba:81:06:ba:88:fa:
         ba:b3:19:5e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----