Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chw2Z39Z_uqbZwezIlPzBi_fyJk.cer
File:                     chw2Z39Z_uqbZwezIlPzBi_fyJk.cer (raw, json)
Hash identifier:          VLfVs2axrxOGR83Ft4gRO9Ff+b5RMJ6yWD73IYX5ak4=
Subject key identifier:   72:1C:36:67:7F:59:FE:EA:9B:67:07:B3:22:53:F3:06:2F:DF:C8:99
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02BE3D
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/721C36677F59FEEA9B6707B32253F3062FDFC899.mft
caRepository:             rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/
Notify URL:               https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before:   Thu 18 Jun 2026 14:16:45 +0000
Certificate not after:    Fri 28 May 2027 00:00:00 +0000
Subordinate resources:    AS: 151951
                          IP: 103.181.164.0/23
                          IP: 2400:5a60::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Jul 2026 02:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179773 (0x2be3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun 18 14:16:45 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=A91B10180000, serialNumber=721C36677F59FEEA9B6707B32253F3062FDFC899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0b:57:33:b5:bd:8e:cf:22:45:a9:28:95:88:
                    ef:0d:42:8c:55:35:fc:72:b8:8b:25:36:96:28:dd:
                    c7:c3:b9:4e:00:45:64:14:1e:15:e8:27:17:a1:83:
                    80:78:06:c4:87:8a:78:ad:3e:49:ac:27:99:c4:87:
                    a2:e7:c5:16:0c:f0:7b:99:a7:e8:45:4c:0e:23:3f:
                    d8:a9:6d:78:bb:df:6f:26:a9:b8:09:23:31:15:a0:
                    68:07:3c:56:fb:99:a7:10:8b:8e:48:5b:4b:75:90:
                    33:62:cb:9e:66:75:eb:d5:5f:59:f6:ee:44:15:24:
                    e5:d7:e3:60:47:0c:bc:f1:41:38:57:fd:d2:33:f1:
                    17:8e:66:66:f4:97:f4:63:7d:e4:1d:f3:7e:08:5d:
                    aa:85:d6:68:9c:93:5c:7b:51:e7:9d:01:7b:c3:45:
                    33:e3:60:ef:df:87:36:d5:fd:14:24:f5:74:a3:e2:
                    ce:1d:dc:79:68:1c:b4:aa:a1:a8:c6:03:f9:00:d6:
                    6b:0e:a2:93:14:de:07:fb:e3:69:29:74:46:ad:e6:
                    d6:f6:0e:4c:65:28:6b:45:37:de:51:e6:dc:25:b5:
                    fb:ac:95:f1:7b:94:14:78:2c:bb:bb:cb:1a:c5:24:
                    a5:9a:a2:30:49:59:13:d8:25:a7:22:7c:88:fd:e7:
                    87:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:1C:36:67:7F:59:FE:EA:9B:67:07:B3:22:53:F3:06:2F:DF:C8:99
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/
                RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/721C36677F59FEEA9B6707B32253F3062FDFC899.mft
                RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  151951

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.164.0/23
                IPv6:
                  2400:5a60::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:f9:66:78:80:57:73:f8:ba:b6:7f:29:3b:7c:03:df:29:72:
         70:25:b8:4b:01:d9:a9:86:c7:1b:df:aa:da:f5:bd:5e:6c:f6:
         ad:7a:e7:d0:c8:40:b1:d4:06:7c:41:06:57:74:b5:9c:14:41:
         c6:11:ca:fd:5e:e7:a8:0c:37:1f:22:10:d4:d9:e5:1c:18:c2:
         17:0a:06:5f:48:c2:a1:3e:63:3a:68:bc:87:69:15:ea:53:af:
         4d:27:48:0e:d3:f8:39:28:fc:96:68:2b:93:08:f9:ff:2a:52:
         55:ba:e0:db:01:5c:b6:5b:0d:3a:9d:3a:dd:de:df:d1:16:3c:
         fc:b7:ae:b0:fe:96:d7:16:e3:0a:55:f9:0b:c2:e6:0f:47:66:
         8b:cf:2f:c7:46:0b:13:06:db:ca:c6:0f:7b:cd:00:0d:6b:8f:
         40:65:5f:4f:e5:c9:18:fc:61:fe:61:cf:8a:c9:e6:3a:c5:58:
         63:bf:36:c1:b4:7a:62:3f:79:6b:29:a2:5e:91:71:ed:c6:72:
         c6:92:83:ab:46:fc:aa:ab:7e:51:15:c0:9e:5a:fd:40:92:21:
         1c:5a:97:b0:39:42:e1:a4:94:99:99:6c:c5:ff:92:61:6d:b9:
         b4:76:f4:32:ad:23:e9:8e:1b:56:3e:23:28:a7:15:67:f1:a2:
         9a:ca:b0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 06:53:58 2026 by rpki-client