Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK5b6xu35ELO4KfgFAKf9y49tB8.cer
File:                     aK5b6xu35ELO4KfgFAKf9y49tB8.cer (raw, json)
Hash identifier:          PpVRZduU8fCj8i6bRydGXlp0bzgJM+1OAB3ibB6bxp0=
Subject key identifier:   68:AE:5B:EB:1B:B7:E4:42:CE:E0:A7:E0:14:02:9F:F7:2E:3D:B4:1F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01C5C4
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 24 Oct 2023 12:20:38 +0000
Certificate not after:    Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 131686
                          IP: 103.76.240.0/22
                          IP: 162.12.212.0/22
                          IP: 2407:7b80::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Apr 2024 18:03:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116164 (0x1c5c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct 24 12:20:38 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=A91104C9/serialNumber=68AE5BEB1BB7E442CEE0A7E014029FF72E3DB41F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2b:37:77:b2:b0:f8:50:f6:58:0f:76:19:ed:
                    dc:bb:ed:d8:b0:4f:ce:71:b0:7d:73:e1:34:ff:0f:
                    82:63:73:59:53:7b:45:bd:56:80:02:e0:7d:21:e5:
                    6c:6a:49:d2:e0:cb:f2:6e:96:27:72:72:e2:ea:84:
                    65:cd:0f:4e:d6:6e:23:70:a2:02:46:df:f6:bc:11:
                    a5:65:69:8d:88:95:8a:1f:d1:c2:5b:56:5e:a7:e6:
                    83:49:40:e1:1c:6c:e2:62:d3:10:d3:98:e7:7a:1c:
                    f3:45:f8:45:21:15:08:26:16:f9:6c:f7:dc:fb:da:
                    e5:a7:70:22:f9:06:b8:ad:08:2a:b0:e6:55:21:04:
                    d7:a4:30:ac:d9:61:c8:6c:13:2b:91:93:4d:62:e9:
                    48:d6:27:b0:fe:0e:f7:69:d6:17:20:04:1f:2c:fe:
                    3a:5b:bf:5f:94:05:4b:c3:88:7d:85:92:01:ce:14:
                    e0:8f:79:43:51:5f:6f:d4:7c:42:b0:55:7b:30:54:
                    52:9a:7b:35:a1:66:33:b0:6b:47:65:5a:9d:90:6b:
                    56:c5:4b:6b:2d:b2:a2:cb:f8:70:1c:66:61:68:61:
                    ca:f7:0e:17:70:34:6c:23:bf:fe:d2:e9:91:7b:2d:
                    38:df:bf:8f:85:be:06:e7:65:70:1d:6e:61:de:4b:
                    48:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:AE:5B:EB:1B:B7:E4:42:CE:E0:A7:E0:14:02:9F:F7:2E:3D:B4:1F
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131686

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.76.240.0/22
                  162.12.212.0/22
                IPv6:
                  2407:7b80::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:19:91:0e:3a:ce:0e:e7:d6:a0:cc:e2:e2:39:b9:d0:a6:60:
         9a:0d:72:a5:8d:e4:6a:c1:eb:26:7c:a8:e6:e1:3b:6e:09:c1:
         54:e5:b3:c7:83:59:83:20:a3:c4:06:1f:d9:bf:e6:ea:33:a3:
         59:69:bb:f9:98:a9:06:57:ea:c5:17:31:9c:2c:56:bb:8a:16:
         17:f7:7e:b2:2d:97:c6:70:01:8d:f9:fa:e2:3b:a5:0d:25:df:
         8a:64:46:4b:5f:ef:80:61:bf:8f:53:1c:02:66:3c:08:85:8d:
         70:ed:bc:b0:36:8b:dc:e3:6c:91:df:e2:8a:d7:19:03:0d:98:
         10:c3:2c:3e:aa:91:95:98:1f:ee:13:3d:b5:7b:6e:70:dc:5b:
         c6:f1:a6:3a:84:a5:28:73:42:6f:82:12:02:ab:e1:3f:d0:93:
         c5:1b:4f:7a:98:a4:9a:0b:0f:74:fa:3a:af:dc:bc:c4:d5:68:
         83:f6:00:4a:18:b3:63:c4:a4:c0:19:72:03:24:ac:8e:47:02:
         d6:5a:8a:ae:6c:8c:6f:bd:21:0b:a0:25:11:0e:b8:b6:00:6e:
         05:98:20:f5:83:f3:ab:ce:02:32:29:dc:91:6d:7b:92:68:ac:
         1f:d6:ed:65:bc:0b:d0:5c:90:b5:be:08:84:7a:6c:cb:e7:20:
         f4:f6:fd:a5
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIDAcXEMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMTAyNDEyMjAzOFoXDTI0MTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMTA0QzkxMTAvBgNVBAUTKDY4QUU1QkVCMUJCN0U0NDJDRUUwQTdF
MDE0MDI5RkY3MkUzREI0MUYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC+Kzd3srD4UPZYD3YZ7dy77diwT85xsH1z4TT/D4Jjc1lTe0W9VoAC4H0h5Wxq
SdLgy/JulidycuLqhGXND07WbiNwogJG3/a8EaVlaY2IlYof0cJbVl6n5oNJQOEc
bOJi0xDTmOd6HPNF+EUhFQgmFvls99z72uWncCL5BritCCqw5lUhBNekMKzZYchs
EyuRk01i6UjWJ7D+Dvdp1hcgBB8s/jpbv1+UBUvDiH2FkgHOFOCPeUNRX2/UfEKw
VXswVFKaezWhZjOwa0dlWp2Qa1bFS2stsqLL+HAcZmFoYcr3DhdwNGwjv/7S6ZF7
LTjfv4+FvgbnZXAdbmHeS0hRAgMBAAGjggMkMIIDIDAdBgNVHQ4EFgQUaK5b6xu3
5ELO4KfgFAKf9y49tB8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTEwNEM5LzJBQThCMzg4MTRDODExRUE4N0QxNTE2Q0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTExMDRDOS8yQUE4QjM4ODE0QzgxMUVBODdEMTUxNkNDNEY5QUUwMi9hSzViNnh1
MzVFTE80S2ZnRkFLZjl5NDl0QjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAgJmMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCZ0zwAwQCogzU
MA0EAgACMAcDBQAkB3uAMA0GCSqGSIb3DQEBCwUAA4IBAQCqGZEOOs4O59agzOLi
ObnQpmCaDXKljeRqwesmfKjm4TtuCcFU5bPHg1mDIKPEBh/Zv+bqM6NZabv5mKkG
V+rFFzGcLFa7ihYX936yLZfGcAGN+friO6UNJd+KZEZLX++AYb+PUxwCZjwIhY1w
7bywNovc42yR3+KK1xkDDZgQwyw+qpGVmB/uEz21e25w3FvG8aY6hKUoc0JvghIC
q+E/0JPFG096mKSaCw90+jqv3LzE1WiD9gBKGLNjxKTAGXIDJKyORwLWWoqubIxv
vSELoCURDri2AG4FmCD1g/OrzgIyKdyRbXuSaKwf1u1lvAvQXJC1vgiEemzL5yD0
9v2l
-----END CERTIFICATE-----
Generated at Thu Mar 28 18:55:15 2024 by rpki-client on console-ams.rpki-client.org