Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPPOswXHv_fe-qaMB-tBwLjjcWw.cer
File:                     aPPOswXHv_fe-qaMB-tBwLjjcWw.cer (raw, json)
Hash identifier:          Raza2a9vDyFYKAT/0oKfsmKDzntaPEEI0YZ791NK+D8=
Subject key identifier:   68:F3:CE:B3:05:C7:BF:F7:DE:FA:A6:8C:07:EB:41:C0:B8:E3:71:6C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0207B5
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 19 Aug 2024 18:35:49 +0000
Certificate not after:    Fri 31 Oct 2025 00:00:00 +0000
Subordinate resources:    AS: 131312
                          IP: 103.69.31.0/24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Dec 2024 01:13:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133045 (0x207b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 19 18:35:49 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=A9189EA6/serialNumber=68F3CEB305C7BFF7DEFAA68C07EB41C0B8E3716C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f4:82:96:75:0a:6c:0e:37:17:58:d9:66:a0:
                    f9:c2:a5:1e:b5:83:a6:9c:88:c1:34:32:40:8c:0d:
                    23:41:52:97:46:c4:7a:b2:1d:d1:ed:6d:03:af:94:
                    76:ec:06:a3:5a:7f:f7:3a:9e:b1:b0:3e:9c:79:74:
                    d2:68:ec:73:21:0d:5b:a4:9d:75:f2:5f:e3:38:00:
                    13:71:78:a2:b8:cb:f4:a1:32:29:59:98:f8:1f:38:
                    ce:b9:a3:7c:2c:2d:77:70:98:b3:c4:67:f7:0f:91:
                    56:f1:11:f5:af:77:f7:a6:d3:df:74:f0:0c:c7:d7:
                    79:24:e2:94:74:b6:9d:10:4c:2f:8b:90:74:39:81:
                    62:0a:3a:9a:69:ff:6e:a2:a2:36:bc:27:3f:c9:0d:
                    49:23:7f:e6:de:c2:9c:b8:57:d5:c1:72:f7:84:91:
                    6d:49:97:66:7a:ac:e4:97:5d:4e:dd:c3:bd:a0:55:
                    67:f1:92:a8:52:69:1a:44:09:e3:f8:01:cc:26:2c:
                    dd:02:ec:db:67:85:e8:34:c9:94:9f:aa:7e:f3:31:
                    32:d4:1e:bd:9e:96:e7:7b:57:02:db:b6:e7:9a:1a:
                    34:03:ab:b2:50:a9:47:f0:09:fd:55:1e:b9:63:78:
                    4a:d1:39:e6:c2:94:07:be:28:d9:d1:e7:0a:4c:83:
                    5f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F3:CE:B3:05:C7:BF:F7:DE:FA:A6:8C:07:EB:41:C0:B8:E3:71:6C
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131312

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.69.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:11:20:3e:dd:99:7d:0c:b6:55:af:cc:be:39:ab:b9:0b:bf:
         85:d5:c2:f5:de:42:ca:b9:78:6c:a4:fe:53:bc:e3:91:1f:ba:
         90:34:52:78:bc:b0:53:1c:f8:af:c5:d3:4b:b6:1e:ae:98:f1:
         bd:61:cd:bb:ce:be:76:b5:89:f8:01:c9:cf:13:88:7a:d0:e4:
         4c:90:b0:62:0e:dd:72:f4:80:40:fd:6d:c3:27:f2:13:d7:d6:
         82:f9:75:4f:31:81:fd:72:55:9d:35:ee:88:1f:67:56:95:d9:
         fe:ec:50:64:5e:64:9e:74:72:1f:60:c1:d6:3e:c7:ce:22:92:
         08:dc:85:65:5a:d2:f2:61:01:0d:4a:09:9c:b5:8c:f4:dd:10:
         d3:e0:83:4b:19:e1:b6:fb:58:f6:87:1f:50:7b:10:77:2f:70:
         4f:e6:52:d8:01:35:7b:94:56:e2:e0:5e:2e:67:fa:a8:e2:ed:
         a0:d4:21:74:24:f6:e1:a8:16:f3:c2:60:9d:05:ec:a8:7a:9c:
         cd:18:dd:c5:56:81:90:99:92:de:0a:c9:11:23:34:df:cb:a4:
         ca:1b:28:b2:97:7f:b6:41:c3:58:1a:b8:75:69:8e:53:98:0c:
         85:26:e5:b8:08:a1:1d:a4:02:7a:80:24:08:0d:be:eb:0b:6f:
         16:87:4e:b4
-----BEGIN CERTIFICATE-----
MIIGGjCCBQKgAwIBAgIDAge1MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDgxOTE4MzU0OVoXDTI1MTAzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxODlFQTYxMTAvBgNVBAUTKDY4RjNDRUIzMDVDN0JGRjdERUZBQTY4
QzA3RUI0MUMwQjhFMzcxNkMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDb9IKWdQpsDjcXWNlmoPnCpR61g6aciME0MkCMDSNBUpdGxHqyHdHtbQOvlHbs
BqNaf/c6nrGwPpx5dNJo7HMhDVuknXXyX+M4ABNxeKK4y/ShMilZmPgfOM65o3ws
LXdwmLPEZ/cPkVbxEfWvd/em09908AzH13kk4pR0tp0QTC+LkHQ5gWIKOppp/26i
oja8Jz/JDUkjf+bewpy4V9XBcveEkW1Jl2Z6rOSXXU7dw72gVWfxkqhSaRpECeP4
AcwmLN0C7Ntnheg0yZSfqn7zMTLUHr2elud7VwLbtueaGjQDq7JQqUfwCf1VHrlj
eErROebClAe+KNnR5wpMg199AgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUaPPOswXH
v/fe+qaMB+tBwLjjcWwwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTg5RUE2L0NEOTNGMzZDMEU3QTExRUI5MUQ4NEIzRkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE4OUVBNi9DRDkzRjM2QzBFN0ExMUVCOTFEODRCM0ZDNEY5QUUwMi9hUFBPc3dY
SHZfZmUtcWFNQi10QndMampjV3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAgDwMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ0UfMA0GCSqG
SIb3DQEBCwUAA4IBAQBRESA+3Zl9DLZVr8y+Oau5C7+F1cL13kLKuXhspP5TvOOR
H7qQNFJ4vLBTHPivxdNLth6umPG9Yc27zr52tYn4AcnPE4h60ORMkLBiDt1y9IBA
/W3DJ/IT19aC+XVPMYH9clWdNe6IH2dWldn+7FBkXmSedHIfYMHWPsfOIpII3IVl
WtLyYQENSgmctYz03RDT4INLGeG2+1j2hx9QexB3L3BP5lLYATV7lFbi4F4uZ/qo
4u2g1CF0JPbhqBbzwmCdBeyoepzNGN3FVoGQmZLeCskRIzTfy6TKGyiyl3+2QcNY
Grh1aY5TmAyFJuW4CKEdpAJ6gCQIDb7rC28Wh060
-----END CERTIFICATE-----
Generated at Wed Nov 27 02:05:13 2024 by rpki-client on console-ams.rpki-client.org