Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwAkaoWIhIw6FydS8yrk6jDGgKQ.cer
File:                     bwAkaoWIhIw6FydS8yrk6jDGgKQ.cer (raw, json)
Hash identifier:          A05PzJBjaJizzep/h3v8sXucr7ccj2brZgpZQk5YGUU=
Subject key identifier:   6F:00:24:6A:85:88:84:8C:3A:17:27:52:F3:2A:E4:EA:30:C6:80:A4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01B120
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A917983D/4162F44CF69A11ECA7853B59C4F9AE02/bwAkaoWIhIw6FydS8yrk6jDGgKQ.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A917983D/4162F44CF69A11ECA7853B59C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 19 Jul 2023 15:58:33 +0000
Certificate not after:    Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources:    IP: 103.190.40.0/23
                          IP: 2001:df0:e440::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 23:35:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110880 (0x1b120)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 19 15:58:33 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=A917983D/serialNumber=6F00246A8588848C3A172752F32AE4EA30C680A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:01:7a:77:89:5b:6a:10:60:bf:d3:7a:96:cf:
                    a3:70:67:2e:21:47:df:50:fc:cf:1f:be:de:6e:41:
                    cb:c8:d3:44:0d:a7:32:88:73:b5:f7:39:ae:25:6a:
                    d7:2b:f5:f7:7e:f3:8f:9a:23:35:30:99:5e:1c:a3:
                    ff:6e:ee:6d:05:37:bf:93:cc:ed:39:26:5d:92:bf:
                    54:25:db:a5:47:2b:c6:dd:a6:43:a8:22:fa:18:96:
                    98:8b:d1:4d:5f:40:29:44:86:3c:df:e6:73:a0:5c:
                    66:40:df:f1:89:0a:0c:9a:ec:00:26:ec:2f:49:a3:
                    17:f7:5a:fe:74:54:f6:ad:ae:3f:92:d4:fb:ca:e3:
                    e2:4c:f2:b8:f1:fb:65:84:82:8b:90:63:58:7c:5b:
                    3d:5b:db:b7:5f:bf:bc:d4:1d:b3:1b:f5:7b:3f:24:
                    32:b1:ec:67:54:f9:14:da:45:9c:17:fb:8e:72:c4:
                    99:d2:89:22:be:0c:b0:c4:9f:5a:01:c4:a3:3f:9d:
                    ba:23:d0:54:85:6c:d2:39:d1:c0:f7:be:d3:5d:ff:
                    3c:4e:5c:f0:a4:60:9f:5c:d2:13:cf:b9:c7:4a:12:
                    fd:fb:9b:1f:c0:0d:ab:9f:cc:d9:4f:42:de:1d:ee:
                    d2:70:4b:a6:a4:c5:8b:ef:94:7f:f8:69:c5:86:a8:
                    0e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:00:24:6A:85:88:84:8C:3A:17:27:52:F3:2A:E4:EA:30:C6:80:A4
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917983D/4162F44CF69A11ECA7853B59C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917983D/4162F44CF69A11ECA7853B59C4F9AE02/bwAkaoWIhIw6FydS8yrk6jDGgKQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.40.0/23
                IPv6:
                  2001:df0:e440::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:e2:1b:d1:d4:eb:7e:2a:61:af:6d:46:9f:85:b6:c7:4a:c1:
         ae:55:de:89:cc:b7:4d:14:5b:de:e5:e1:c7:91:26:00:e6:64:
         db:d0:37:2e:bb:28:a8:29:f1:ef:31:d9:06:0c:fd:93:34:69:
         fc:0d:3a:95:06:73:1b:7c:e4:ac:6a:ef:b8:2b:be:fb:0c:10:
         70:d3:eb:78:18:89:cf:61:b1:db:d7:a7:5b:3e:d1:3c:3b:ad:
         ad:e3:1b:46:86:ad:8d:71:eb:ca:cb:1e:dc:70:41:61:10:c0:
         ce:48:34:da:d6:56:7a:a2:2c:cc:68:59:7b:00:f8:c1:42:67:
         16:30:df:61:6f:2e:40:2e:fb:50:7c:a2:2d:46:a4:5d:78:d2:
         aa:65:ac:07:f6:5a:2f:a6:fb:ab:4c:43:76:36:7d:a2:58:fe:
         b2:81:f0:7d:43:21:9f:89:b8:39:bf:42:6e:b4:a0:0d:2f:23:
         35:e6:06:f3:9a:59:6d:91:70:58:8a:58:8a:80:f1:2d:30:2c:
         12:35:01:f8:04:a3:f9:60:53:74:ba:fa:83:07:c2:4a:de:a4:
         93:32:74:2d:26:47:c0:67:1d:28:fe:fc:70:53:42:b3:4b:a7:
         91:fe:24:7a:4a:4e:4d:df:63:4c:b1:3f:b5:66:ec:35:38:41:
         b2:2b:07:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 01:03:04 2024 by rpki-client on console-fra.rpki-client.org