Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKwrcgiF6COCTBln7fw2Psh0do0.cer
File:                     bKwrcgiF6COCTBln7fw2Psh0do0.cer (raw, json)
Hash identifier:          UzD7djgl1kNIxqlonNsP/83IiT96+cxz3J0MAs2Al6o=
Subject key identifier:   6C:AC:2B:72:08:85:E8:23:82:4C:19:67:ED:FC:36:3E:C8:74:76:8D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01DFB4
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91D5BA2/14FEC2EC579311ECBA2FB048C4F9AE02/bKwrcgiF6COCTBln7fw2Psh0do0.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91D5BA2/14FEC2EC579311ECBA2FB048C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 19 Feb 2024 23:19:54 +0000
Certificate not after:    Thu 01 May 2025 00:00:00 +0000
Subordinate resources:    AS: 133951
                          IP: 103.49.204.0/24
                          IP: 103.93.19.0/24
                          IP: 103.112.46.0/24
                          IP: 103.114.231.0/24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Apr 2024 14:50:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122804 (0x1dfb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb 19 23:19:54 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=A91D5BA2/serialNumber=6CAC2B720885E823824C1967EDFC363EC874768D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a9:15:3c:ce:39:a0:0d:83:44:0a:71:b3:85:
                    e1:71:9f:d2:1f:55:ab:45:43:67:7a:f4:4a:03:6c:
                    d8:f6:e2:07:ec:4d:82:4b:e5:8a:d9:94:81:f9:86:
                    f0:29:27:16:01:6e:97:c0:f9:42:72:56:81:e0:5e:
                    bd:b7:0d:17:ee:b7:49:d2:5f:16:74:9e:7b:bc:89:
                    43:c1:fe:70:bc:18:02:2a:23:a7:31:12:c4:67:20:
                    a7:e3:04:e3:6e:6f:f5:98:7e:65:95:48:28:ab:92:
                    dc:6a:a0:60:23:2c:47:ad:b7:68:33:36:a7:a5:98:
                    22:ca:f1:29:23:f3:80:e7:82:39:43:b8:6e:71:03:
                    1a:39:7b:5c:73:d8:7d:b0:48:4c:5b:6f:c9:59:d2:
                    05:cc:76:21:f5:ef:c2:b8:ea:ef:90:67:8b:9d:bd:
                    3b:34:ec:9e:0c:0a:1b:f7:7a:b2:70:7c:bf:91:af:
                    78:94:a3:46:a0:e2:c3:39:95:04:c8:31:c7:43:6b:
                    3a:06:cd:1c:4c:39:b5:f7:74:d4:93:16:ab:4f:43:
                    76:5d:40:75:36:34:7f:fd:3f:c1:f7:6a:62:8b:46:
                    c7:68:cf:a3:73:f4:02:f0:67:db:15:48:67:11:02:
                    c3:fc:5e:c4:00:fd:15:19:af:6e:bb:8f:aa:9b:6e:
                    3d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:AC:2B:72:08:85:E8:23:82:4C:19:67:ED:FC:36:3E:C8:74:76:8D
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D5BA2/14FEC2EC579311ECBA2FB048C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D5BA2/14FEC2EC579311ECBA2FB048C4F9AE02/bKwrcgiF6COCTBln7fw2Psh0do0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  133951

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.204.0/24
                  103.93.19.0/24
                  103.112.46.0/24
                  103.114.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d1:7e:ca:76:b0:84:a3:3e:fe:cb:04:38:ae:3d:04:a3:e4:c7:
         09:ca:06:c4:8e:c1:81:2a:86:07:bb:d7:61:4b:af:87:10:61:
         1f:04:03:e0:ae:40:1b:da:59:49:5c:36:60:19:14:ed:73:7a:
         03:5f:95:a3:95:c4:e6:b3:de:9b:36:9c:c2:bc:51:57:5b:b2:
         c2:84:07:25:28:63:1d:28:8a:c1:28:bc:45:44:c9:af:96:82:
         38:1e:5b:98:38:aa:89:d9:c1:ea:f9:04:b3:49:d0:33:10:00:
         b9:14:33:18:ea:79:81:24:eb:ea:5c:74:7a:a9:ea:02:0d:64:
         82:5f:f9:ca:7d:26:57:78:21:be:cb:b5:d1:56:d3:87:13:94:
         a5:f5:6b:92:54:b4:b4:ee:5d:34:5e:e7:bd:62:a8:de:2b:33:
         77:e2:fe:25:50:58:fe:a7:6e:9f:1f:9d:28:22:47:1f:d5:75:
         61:9c:11:5f:04:ec:fe:df:44:1b:b3:5f:b3:e8:f8:4b:c5:88:
         78:51:7b:cf:62:a7:40:24:e3:94:4f:c1:56:73:61:87:bb:99:
         1f:66:2b:30:10:c6:8b:29:78:ca:51:13:45:b1:14:54:f0:2b:
         d8:4f:ba:f4:33:92:22:08:f9:ee:74:e4:a1:be:20:cf:f2:e2:
         fb:41:c2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 16:08:18 2024 by rpki-client on console-ams.rpki-client.org