Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOklSpy_oHBCJDc13OT79-VGEWY.cer
File:                     bOklSpy_oHBCJDc13OT79-VGEWY.cer (raw, json)
Hash identifier:          UvoS5loaOegSad5Ob1BsL++29peVDbwY06qff7SAPi8=
Subject key identifier:   6C:E9:25:4A:9C:BF:A0:70:42:24:37:35:DC:E4:FB:F7:E5:46:11:66
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01CAD1
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91454F3/1EF7866805DC11EA9743BA5FC4F9AE02/bOklSpy_oHBCJDc13OT79-VGEWY.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91454F3/1EF7866805DC11EA9743BA5FC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 14 Nov 2023 15:00:42 +0000
Certificate not after:    Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 133477
                          IP: 103.95.38.0/24
                          IP: 103.101.249.0 -- 103.101.251.255
                          IP: 2001:df1:9900::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Apr 2024 02:50:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117457 (0x1cad1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov 14 15:00:42 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=A91454F3/serialNumber=6CE9254A9CBFA07042243735DCE4FBF7E5461166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:20:4b:ce:4c:3e:75:dd:93:81:83:e1:92:ce:
                    91:49:df:a4:d4:5f:d3:a8:87:56:54:ee:50:d5:58:
                    16:c7:2b:d8:87:bb:5c:65:69:f7:48:f3:48:ef:aa:
                    9f:60:3e:a4:31:b7:bf:11:a5:11:0b:80:72:d6:02:
                    3a:c7:43:b0:26:46:90:52:a5:88:cb:06:0e:d7:3c:
                    01:c2:91:33:1b:b8:2a:96:f9:30:62:59:13:f5:64:
                    96:a7:4b:bc:cc:d6:31:e4:ce:e0:31:c3:39:b2:35:
                    d5:99:f0:d1:68:63:24:32:c2:cd:f8:1a:1e:af:cc:
                    f0:04:c9:9c:f4:5b:48:1f:9d:ef:8c:db:de:81:22:
                    49:c9:f7:54:cf:d0:6c:6c:7f:ba:2d:fa:f0:f5:e4:
                    20:3f:70:99:d3:34:81:55:18:b6:b4:d0:d9:d0:37:
                    09:9c:5a:e5:cf:96:c9:25:d3:c7:ac:7a:4c:1c:7d:
                    cc:8d:f8:b8:ed:a5:8f:99:47:c2:4d:68:0e:77:06:
                    3b:18:61:b3:43:c9:42:9e:6d:aa:88:44:3e:99:49:
                    1f:58:da:00:e7:a5:b6:84:75:ca:8a:8b:2a:96:3c:
                    37:aa:2d:0e:b6:bb:8d:d3:82:16:bd:df:3f:07:07:
                    73:e9:81:b3:e9:f5:76:2b:02:3d:97:c6:5d:9a:ad:
                    ff:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E9:25:4A:9C:BF:A0:70:42:24:37:35:DC:E4:FB:F7:E5:46:11:66
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91454F3/1EF7866805DC11EA9743BA5FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91454F3/1EF7866805DC11EA9743BA5FC4F9AE02/bOklSpy_oHBCJDc13OT79-VGEWY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  133477

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.95.38.0/24
                  103.101.249.0-103.101.251.255
                IPv6:
                  2001:df1:9900::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:51:25:41:6c:45:38:ea:dd:2c:03:6e:69:fe:3b:82:75:ba:
         ad:68:0e:39:d3:58:b3:27:e5:0a:1e:ab:0d:a1:c1:a3:2a:c5:
         61:10:f1:95:a2:31:2b:a8:95:c3:60:bc:27:ea:31:31:12:3c:
         d6:d7:9c:89:f8:53:7a:17:bc:e7:76:d8:8b:2d:f6:44:1c:ae:
         61:8d:44:8a:71:e6:b4:eb:57:0d:ca:32:f8:4b:98:8b:4b:06:
         6d:5b:0b:69:ca:00:a5:e4:cc:5d:70:cf:aa:89:db:dc:01:2a:
         fe:6a:86:e3:48:14:f1:ee:9a:f2:f1:70:04:a8:a9:31:19:1a:
         96:08:76:76:7f:03:62:cf:19:d1:35:24:fb:7f:fc:0b:b4:b7:
         f4:55:fb:43:a7:26:5c:cf:68:4d:f3:02:57:89:8a:92:68:6b:
         f4:ac:90:90:19:18:72:55:e2:fb:ec:20:de:08:e2:7c:06:8d:
         14:15:31:87:26:4f:fd:6d:3b:e0:c3:3a:cd:aa:d2:a7:1d:a0:
         8f:71:22:00:3d:64:6e:82:2a:33:f3:a9:2d:35:2d:e8:f7:c4:
         f6:05:9a:3d:ee:a6:ba:85:00:98:37:69:4e:86:c7:73:0d:8b:
         60:1b:1c:2e:93:4a:8b:cd:ff:b5:e3:85:49:3b:36:e6:1d:40:
         ca:fb:14:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 03:44:28 2024 by rpki-client on console-fra.rpki-client.org