Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIDTI6o_LVFGBQZA8yGmEpAA3wM.cer
File:                     aIDTI6o_LVFGBQZA8yGmEpAA3wM.cer (raw, json)
Hash identifier:          EqZOBvFpmd9tx9x0opN9G2xF4ZosUyyQer4yDiBwxkM=
Subject key identifier:   68:80:D3:23:AA:3F:2D:51:46:05:06:40:F3:21:A6:12:90:00:DF:03
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01C014
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 27 Sep 2023 13:45:19 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 142162
                          IP: 103.167.40.0/23
                          IP: 2001:df6:a580::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 00:38:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114708 (0x1c014)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep 27 13:45:19 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=A915AF7A/serialNumber=6880D323AA3F2D5146050640F321A6129000DF03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4e:f1:57:09:de:4c:d0:ce:dd:3b:9f:7e:80:
                    09:d4:17:f0:88:59:0d:cf:4b:f2:39:a8:7f:cd:9c:
                    72:37:af:da:00:58:0a:ec:49:0f:9b:90:65:13:c9:
                    82:0f:bb:32:7d:c1:7b:ec:f3:6c:89:4f:03:31:60:
                    55:9c:75:fa:54:e6:6d:1f:cf:63:58:85:2e:9f:83:
                    4f:e1:23:3f:61:2f:3f:f1:61:10:44:08:f5:fd:8e:
                    57:8b:98:6a:e5:28:93:54:63:f1:ae:12:98:dc:a2:
                    99:6d:8d:ad:e4:20:cb:fa:3c:d1:63:47:03:6b:03:
                    74:01:0e:33:42:be:97:cd:95:48:e6:6b:53:0f:be:
                    e5:82:ac:0f:28:22:96:0d:3e:17:2d:cb:b9:6d:76:
                    1c:b9:cc:2b:bd:13:06:43:4a:07:88:74:b0:a4:14:
                    44:3e:65:48:d4:5d:db:a1:0b:fd:0e:02:75:2a:e4:
                    c8:c2:25:1e:df:9d:11:63:e6:3a:da:53:b0:2b:3a:
                    4b:aa:26:7e:c2:d9:eb:5c:08:2a:ad:17:45:5c:fc:
                    b0:41:a3:31:b0:22:96:2f:f1:1d:b3:de:53:90:d6:
                    a5:89:28:85:2b:5c:ec:72:e2:91:39:9f:ce:4c:17:
                    e0:39:ee:7b:53:02:a7:72:a4:fa:93:6b:ee:bd:e1:
                    aa:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:80:D3:23:AA:3F:2D:51:46:05:06:40:F3:21:A6:12:90:00:DF:03
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  142162

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.40.0/23
                IPv6:
                  2001:df6:a580::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:4c:64:3e:1c:90:d8:ab:44:87:b3:a0:c7:68:73:f6:03:3b:
         f9:78:a8:5b:3e:f0:70:42:81:ff:8b:50:ca:fb:ef:3c:18:49:
         40:31:d7:1f:da:e0:f5:0f:22:cd:2e:f4:32:41:c9:47:95:4d:
         f2:e6:f0:f7:84:70:0b:22:54:90:a0:89:f1:1a:2a:ae:80:3a:
         0c:8c:88:2d:6c:a1:9f:21:a0:91:64:7d:a4:b9:42:c9:e8:54:
         89:32:d7:79:7a:b9:7a:39:cc:00:2e:9b:25:f3:de:27:14:d9:
         e9:31:2f:c3:67:26:88:c3:a5:35:1d:87:dc:89:fe:1e:3d:ab:
         08:54:7c:d7:36:7c:40:fd:ca:bd:b7:4f:99:2f:54:81:cb:a9:
         53:f6:4b:fa:93:51:37:25:2b:89:33:67:32:02:75:7e:4f:1d:
         9a:be:27:e2:ba:2f:51:97:12:c1:25:04:25:1a:df:e5:63:36:
         61:70:4c:82:07:8d:00:41:5e:82:1d:99:e7:8b:80:53:46:58:
         2a:eb:81:30:20:f3:e9:40:a0:d0:f4:e9:1a:00:18:95:31:de:
         d5:2f:df:58:97:10:17:8b:60:9c:c9:e9:7a:fa:8b:bd:bb:77:
         68:b6:38:af:7d:e1:62:8a:38:f6:e2:30:c9:7e:23:66:28:19:
         56:86:96:9d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 19 01:17:04 2024 by rpki-client on console-fra.rpki-client.org