Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer
File:                     bYD-tReA9_EG5hkNw-LufOdO77s.cer (raw, json)
Hash identifier:          N2S4UTZIPZIEAjVBn16u7jNSMrZyH8Esbe6nAGiuTQ0=
Subject key identifier:   6D:80:FE:B5:17:80:F7:F1:06:E6:19:0D:C3:E2:EE:7C:E7:4E:EF:BB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01AC8D
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 28 Jun 2023 16:27:52 +0000
Certificate not after:    Tue 30 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 132073
                          IP: 103.186.52.0/23
                          IP: 2001:df0:a140::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Apr 2024 12:32:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109709 (0x1ac8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun 28 16:27:52 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=A917624C/serialNumber=6D80FEB51780F7F106E6190DC3E2EE7CE74EEFBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:71:d2:59:10:00:d3:ab:32:5d:7e:b7:67:a1:
                    36:f0:04:95:54:ca:da:40:38:44:60:2a:5d:ed:cd:
                    cb:8b:e7:f4:5d:d5:d4:be:e2:96:24:52:38:c0:00:
                    93:ad:3b:c7:09:cf:a5:e8:93:52:18:30:4e:c1:2d:
                    9c:26:6e:9b:13:b9:bf:ef:d2:4d:4c:9c:ca:3a:9f:
                    7b:bf:e9:2a:16:3e:d0:a6:d9:95:ef:57:c0:26:2b:
                    b7:04:83:67:72:42:0f:57:ef:08:07:81:46:6d:38:
                    a3:df:44:4b:61:54:46:d3:5c:17:bf:69:45:25:e7:
                    aa:5e:38:4c:9c:5b:c6:d9:b5:7f:9c:b3:8e:5c:36:
                    97:c3:3e:2c:f4:73:39:55:0d:9a:bf:49:be:a4:91:
                    71:c3:72:22:35:09:2c:1b:03:62:48:e8:4c:7b:85:
                    45:f4:29:d7:b2:17:d1:be:9a:2c:05:19:88:98:29:
                    b5:1b:fb:88:ed:f4:63:3e:63:92:4c:22:a9:64:be:
                    f4:50:4b:31:3b:df:6c:a6:89:71:a2:f9:45:30:78:
                    37:39:5a:9c:c7:e2:97:14:64:f8:51:b3:df:3f:39:
                    78:d5:a6:6a:72:5e:3d:fe:48:9e:97:b7:eb:f5:0f:
                    b7:8a:fa:df:26:1c:49:0c:0e:ad:b5:46:d0:06:45:
                    17:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:80:FE:B5:17:80:F7:F1:06:E6:19:0D:C3:E2:EE:7C:E7:4E:EF:BB
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  132073

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.52.0/23
                IPv6:
                  2001:df0:a140::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:3a:9e:9c:4d:4d:36:db:3c:64:34:60:9f:c7:81:26:9f:84:
         97:d7:a2:fe:c2:93:5f:01:a4:88:44:50:85:28:8d:a2:8e:fa:
         25:0b:4b:8b:19:f7:37:61:a9:ea:50:2f:0a:7d:1b:7c:2f:d0:
         a6:11:29:4d:5a:60:87:02:d7:94:02:e2:b2:18:26:66:fe:3b:
         41:cb:81:55:7e:be:44:6a:5d:32:f1:bc:a2:a6:c4:19:5a:a1:
         64:f4:e9:ab:79:2b:d8:5d:7a:36:6b:33:c9:cf:8a:2e:88:0d:
         36:ac:f6:57:13:b9:fd:57:f1:d2:26:e1:82:bb:c6:fd:96:50:
         64:e8:38:b8:ce:73:c2:57:11:f7:b7:6c:e2:57:31:35:f6:29:
         a1:5b:f3:c6:57:d3:e7:25:02:c6:ea:02:06:e1:17:59:49:f9:
         91:07:a4:8b:ae:de:5e:27:a1:5f:f6:47:1c:69:94:df:6b:7b:
         a0:6f:ed:df:55:3b:c2:ec:9f:7d:b5:63:34:11:7c:b4:3c:4c:
         04:1f:37:26:38:a8:06:7d:1e:6c:80:87:b9:40:d6:b0:73:75:
         95:68:8a:c5:cf:cf:9a:cb:24:45:be:92:33:f3:c3:fd:f7:6d:
         b3:35:6d:87:91:58:f5:31:9a:12:17:b3:71:1c:ce:95:95:e9:
         cb:36:8f:38
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 28 13:34:10 2024 by rpki-client on console-ams.rpki-client.org