Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYQNfZjFz5vWvrRIatRnQGXxR0E.cer
File:                     cYQNfZjFz5vWvrRIatRnQGXxR0E.cer (raw, json)
Hash identifier:          x0oMN/SI7zoboOGRlUnqvxIRHHJT3PGCpQ+PefXwYWI=
Subject key identifier:   71:84:0D:7D:98:C5:CF:9B:D6:BE:B4:48:6A:D4:67:40:65:F1:47:41
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01B48F
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 02 Aug 2023 20:12:00 +0000
Certificate not after:    Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources:    AS: 142413
                          IP: 103.168.18.0/23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Apr 2024 18:26:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111759 (0x1b48f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug  2 20:12:00 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=A91B7B61/serialNumber=71840D7D98C5CF9BD6BEB4486AD4674065F14741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:12:2a:74:86:ed:68:53:b9:ba:87:52:93:56:
                    cc:2a:ba:ae:9a:36:e6:01:05:ae:2c:46:54:35:95:
                    67:18:02:6b:5a:46:a6:10:8d:92:d2:6f:77:6f:ad:
                    d6:84:0d:c7:2a:04:aa:f1:ae:ba:b8:74:06:38:c3:
                    0d:2d:60:79:1d:b0:06:2b:4d:ea:25:75:57:02:67:
                    67:37:26:d2:e1:b3:7c:44:a2:17:ce:95:6a:9e:1a:
                    b1:50:c5:a1:4e:13:ec:dd:1b:04:08:37:6b:60:79:
                    96:9d:cc:80:e5:b5:0d:e9:3d:38:d3:95:21:29:8c:
                    6b:d2:ef:91:6c:a7:0e:27:71:23:3a:cd:ed:b2:c7:
                    69:75:da:bd:3d:96:d5:77:7d:03:cc:c3:4a:2b:a9:
                    54:63:24:d0:bd:3e:7b:70:f4:9b:e6:d5:24:0e:39:
                    90:0d:be:1e:13:5a:9d:12:7e:dc:e2:8c:2c:61:26:
                    cb:1b:58:d1:a0:7f:47:ad:c1:86:23:4b:6c:b7:f9:
                    aa:da:bc:7f:8f:83:11:5e:58:5b:0b:ff:d0:85:d7:
                    f7:95:ac:d2:13:44:6a:56:9a:ad:3d:6a:89:60:65:
                    4f:df:16:0d:4e:6f:b4:73:44:06:43:ab:85:61:27:
                    9d:c9:6d:92:90:65:a0:ca:f5:9c:30:67:a1:22:1a:
                    bf:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:84:0D:7D:98:C5:CF:9B:D6:BE:B4:48:6A:D4:67:40:65:F1:47:41
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  142413

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:8d:ec:05:95:59:c7:39:38:ab:63:bf:d9:a4:f7:1d:33:0e:
         e5:50:27:5e:c6:07:37:ef:fa:c7:12:b6:27:4d:60:c2:6b:0e:
         8a:65:7e:cf:f8:04:4d:07:42:25:02:a0:f4:4a:41:c6:81:ac:
         fe:f0:86:30:fc:4c:dd:94:0f:8a:5b:42:a5:9b:f3:04:75:36:
         fe:73:d0:a6:cf:0b:25:dc:a9:a2:5e:f1:c9:2d:14:f6:fe:fe:
         a6:83:79:0a:f6:79:6e:f6:8b:7d:12:ff:d4:84:8d:35:a2:be:
         61:6e:39:05:0f:6b:88:9e:22:55:a3:75:33:97:39:8b:c0:1d:
         1a:74:f8:3a:b7:20:16:95:3f:39:68:e3:2e:69:63:7a:fd:8f:
         3c:fa:0f:70:fc:c6:91:61:0f:5e:43:38:0d:bc:42:44:c6:52:
         7b:7c:45:b9:ed:c2:e1:36:b2:2e:48:84:5b:66:36:23:54:da:
         b5:46:32:52:46:6c:19:9b:89:dd:12:5f:c6:f5:71:6e:63:61:
         2c:07:6b:e6:eb:5d:cf:6c:35:30:0a:9a:81:01:9d:69:1a:ba:
         88:d8:41:f3:eb:2d:e9:e6:7f:2f:af:81:06:d7:c1:8a:88:1f:
         c1:e0:6e:74:a7:26:d9:67:c3:3e:4b:7b:e1:53:15:69:b9:e1:
         8c:52:89:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 19:45:02 2024 by rpki-client on console-fra.rpki-client.org