Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cyrtpBw-sfatmUNCIXD-fAJJ5bQ.cer
File:                     cyrtpBw-sfatmUNCIXD-fAJJ5bQ.cer (raw, json)
Hash identifier:          5fmIxLy7cRYZ2vorE5lSqHXXpBInS/Zg0wj73v7qL1w=
Subject key identifier:   73:2A:ED:A4:1C:3E:B1:F6:AD:99:43:42:21:70:FE:7C:02:49:E5:B4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01BC6D
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91F9090/F52E9A20C53611EC93978E29C4F9AE02/cyrtpBw-sfatmUNCIXD-fAJJ5bQ.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91F9090/F52E9A20C53611EC93978E29C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 08 Sep 2023 19:01:54 +0000
Certificate not after:    Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 131192
                          IP: 43.242.44.0/22
                          IP: 103.37.248.0/22
                          IP: 2402:1f40::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Apr 2024 04:49:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113773 (0x1bc6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep  8 19:01:54 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=A91F9090/serialNumber=732AEDA41C3EB1F6AD9943422170FE7C0249E5B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6c:7a:57:9e:02:e6:d9:20:4d:b7:23:69:48:
                    b6:e5:94:c5:7c:47:cc:96:69:ff:27:b7:19:ac:8f:
                    7c:c3:5d:c7:de:ab:a0:1f:6e:97:50:ce:3e:21:57:
                    ae:82:5b:b9:b6:ec:47:68:8c:d7:b4:43:ba:3d:d7:
                    a6:0a:ca:0e:85:79:5e:49:21:b8:c2:68:61:c3:55:
                    7e:f4:56:a6:83:5b:d8:5c:09:83:d4:ec:91:a5:e5:
                    b3:bf:30:a6:bd:14:b4:92:70:89:ac:57:a6:81:3f:
                    4f:e9:96:29:f4:9d:b5:cd:39:d5:d6:d4:f9:b6:8c:
                    e7:6c:c7:74:8b:55:89:d7:c7:17:c1:96:62:22:a5:
                    bf:1c:a0:ee:0e:b9:3f:43:1c:50:19:b9:fc:3f:e1:
                    49:44:04:54:4f:05:0f:40:98:0a:ec:0b:a7:a7:bb:
                    ad:b0:aa:78:bc:ed:14:24:5f:a3:3f:a0:96:b2:fc:
                    e6:69:b8:02:fa:ed:a3:a8:60:a0:99:0e:8d:7f:6e:
                    72:7a:c0:7c:51:d6:9c:42:8b:f4:49:ac:60:1d:37:
                    10:68:7f:bf:8a:44:85:b2:65:23:43:b9:00:33:3f:
                    b7:cb:04:74:30:85:27:78:b5:44:cb:45:cd:f8:19:
                    9d:05:9c:13:12:63:2c:52:4d:bd:61:79:18:79:85:
                    1d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:2A:ED:A4:1C:3E:B1:F6:AD:99:43:42:21:70:FE:7C:02:49:E5:B4
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F9090/F52E9A20C53611EC93978E29C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F9090/F52E9A20C53611EC93978E29C4F9AE02/cyrtpBw-sfatmUNCIXD-fAJJ5bQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131192

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.242.44.0/22
                  103.37.248.0/22
                IPv6:
                  2402:1f40::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:8a:0c:fd:4d:58:e6:d8:7b:68:bd:01:8d:3d:38:ca:37:10:
         1d:ec:f2:c1:1d:49:c6:ad:9a:5e:6b:71:b9:2b:f6:3d:85:31:
         d7:4f:24:a6:b1:48:ac:07:1a:8b:95:d4:3e:c8:2a:61:43:2c:
         e2:dd:47:75:c5:f2:02:66:3b:8a:7f:05:4f:a6:e7:a0:84:56:
         59:85:5d:41:92:04:49:bb:41:ec:da:3e:5d:22:57:8a:a1:33:
         14:14:5c:4f:d1:dc:2d:7a:bb:41:08:bc:bb:2a:0d:c5:f9:57:
         77:e8:bb:33:b7:ad:42:f8:4a:9c:fc:bc:c4:ea:2a:0b:a4:77:
         a5:1c:d0:a3:d7:a0:43:34:98:fe:bd:24:ee:ed:16:e6:9a:d2:
         4d:b5:18:2f:5f:e7:8a:3d:dc:5f:c4:3a:76:43:a2:18:39:bd:
         40:66:81:db:72:ca:6b:5e:e2:97:da:58:b2:88:9f:61:c7:68:
         cd:f8:8d:a8:70:b6:4e:62:d9:d8:8a:e2:d4:66:46:f9:87:dd:
         fb:89:0a:20:3c:65:56:38:de:c5:24:b1:c0:86:a7:ab:35:eb:
         b0:23:ec:5b:71:91:00:62:2c:ec:5c:86:40:20:24:1a:54:c0:
         91:e6:39:e7:3c:3e:75:6d:38:fb:cd:31:41:e3:cb:11:c4:a5:
         18:3a:a6:a1
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIDAbxtMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMDkwODE5MDE1NFoXDTI0MTIwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRjkwOTAxMTAvBgNVBAUTKDczMkFFREE0MUMzRUIxRjZBRDk5NDM0
MjIxNzBGRTdDMDI0OUU1QjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDYbHpXngLm2SBNtyNpSLbllMV8R8yWaf8ntxmsj3zDXcfeq6AfbpdQzj4hV66C
W7m27EdojNe0Q7o916YKyg6FeV5JIbjCaGHDVX70VqaDW9hcCYPU7JGl5bO/MKa9
FLSScImsV6aBP0/plin0nbXNOdXW1Pm2jOdsx3SLVYnXxxfBlmIipb8coO4OuT9D
HFAZufw/4UlEBFRPBQ9AmArsC6enu62wqni87RQkX6M/oJay/OZpuAL67aOoYKCZ
Do1/bnJ6wHxR1pxCi/RJrGAdNxBof7+KRIWyZSNDuQAzP7fLBHQwhSd4tUTLRc34
GZ0FnBMSYyxSTb1heRh5hR1pAgMBAAGjggMkMIIDIDAdBgNVHQ4EFgQUcyrtpBw+
sfatmUNCIXD+fAJJ5bQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUY5MDkwL0Y1MkU5QTIwQzUzNjExRUM5Mzk3OEUyOUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFGOTA5MC9GNTJFOUEyMEM1MzYxMUVDOTM5NzhFMjlDNEY5QUUwMi9jeXJ0cEJ3
LXNmYXRtVU5DSVhELWZBSko1YlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAgB4MDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCK/IsAwQCZyX4
MA0EAgACMAcDBQAkAh9AMA0GCSqGSIb3DQEBCwUAA4IBAQCtigz9TVjm2HtovQGN
PTjKNxAd7PLBHUnGrZpea3G5K/Y9hTHXTySmsUisBxqLldQ+yCphQyzi3Ud1xfIC
ZjuKfwVPpueghFZZhV1BkgRJu0Hs2j5dIleKoTMUFFxP0dwtertBCLy7Kg3F+Vd3
6Lszt61C+Eqc/LzE6ioLpHelHNCj16BDNJj+vSTu7RbmmtJNtRgvX+eKPdxfxDp2
Q6IYOb1AZoHbcsprXuKX2liyiJ9hx2jN+I2ocLZOYtnYiuLUZkb5h937iQogPGVW
ON7FJLHAhqerNeuwI+xbcZEAYizsXIZAICQaVMCR5jnnPD51bTj7zTFB48sRxKUY
Oqah
-----END CERTIFICATE-----
Generated at Fri Mar 29 06:02:29 2024 by rpki-client on console-fra.rpki-client.org