Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5zZIVaek_nSaxOlqn43bPtfBpA.cer
File:                     d5zZIVaek_nSaxOlqn43bPtfBpA.cer (raw, json)
Hash identifier:          FOOMkc5CdMprgjCyZK7DPVyNJAHoJTna25EKEbkXsHc=
Subject key identifier:   77:9C:D9:21:56:9E:93:F9:D2:6B:13:A5:AA:7E:37:6C:FB:5F:06:90
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01BB1A
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sat 02 Sep 2023 16:26:20 +0000
Certificate not after:    Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 132464
                          IP: 103.73.58.0/24
                          IP: 103.145.187.0/24
                          IP: 2400:7de0::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Apr 2024 09:37:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113434 (0x1bb1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep  2 16:26:20 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=A91AF317/serialNumber=779CD921569E93F9D26B13A5AA7E376CFB5F0690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4a:6c:aa:c9:96:02:60:3b:93:be:02:57:73:
                    cb:6a:b7:37:3b:51:25:a3:fc:44:08:da:e6:94:58:
                    d8:17:87:62:ca:10:b7:e3:df:91:a5:cb:63:c1:f3:
                    2a:54:79:a4:13:42:17:f8:5a:14:0f:2c:8e:a8:92:
                    ca:5f:7a:66:71:64:46:d9:41:9e:96:68:6d:0e:19:
                    06:6c:ea:c4:38:00:70:a5:c4:78:03:b2:33:9f:4f:
                    4b:69:65:76:e9:82:51:91:19:73:23:da:25:0d:2a:
                    cf:28:ea:58:b2:75:0d:ae:38:f1:e9:66:9d:ad:16:
                    df:20:a1:1d:4c:e9:f6:7e:92:f7:a9:9b:66:49:4a:
                    2a:c5:ae:73:b8:be:35:0b:80:04:58:0d:a0:7f:35:
                    81:1a:9a:dd:3e:45:4f:b0:aa:59:bc:8f:b8:81:b8:
                    5d:cf:9a:3a:34:c8:dd:03:9a:db:1a:b1:f9:b5:a0:
                    83:2b:9d:34:87:15:19:f4:59:c3:ed:ca:ee:0d:2e:
                    97:47:35:ef:3b:15:9a:3a:b7:dc:d4:1f:e7:97:2a:
                    5d:45:e9:c6:5d:8a:18:6b:34:c6:27:af:26:e2:20:
                    53:52:c5:a2:4f:9c:aa:f4:76:ab:81:84:39:d2:c4:
                    2f:1b:52:bc:16:2f:5f:33:dc:21:8b:a8:e9:40:fc:
                    0e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:9C:D9:21:56:9E:93:F9:D2:6B:13:A5:AA:7E:37:6C:FB:5F:06:90
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  132464

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.58.0/24
                  103.145.187.0/24
                IPv6:
                  2400:7de0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:87:2c:f8:b7:5c:94:aa:de:45:35:70:1e:e2:f4:2c:12:02:
         60:db:2e:52:ef:b3:79:e0:75:e9:be:ca:cd:38:36:26:5a:c1:
         15:73:ee:30:15:70:78:26:00:b1:0a:85:a2:f6:b3:cb:b7:f7:
         f4:1a:33:87:d1:b3:01:ac:f3:70:2c:db:5c:a1:8b:23:0a:3e:
         e1:86:51:43:61:c1:13:8b:ca:a1:0e:e0:7d:2b:b7:0c:07:9e:
         f8:2e:0c:b1:06:a1:74:e8:f1:1b:8a:86:66:29:72:13:19:57:
         3e:98:23:49:33:a7:82:1e:ec:0a:78:50:ac:5f:d0:27:39:94:
         85:0b:e6:aa:77:0d:45:4b:6a:68:4c:ce:cb:d3:b4:c4:9a:f7:
         4e:37:18:f7:ae:17:99:0d:0b:15:f4:2e:7d:fb:71:49:d8:42:
         41:22:36:02:4f:f4:f7:15:13:d6:d2:46:66:48:a4:aa:d3:93:
         0b:13:59:e7:05:15:33:fc:1d:e6:0d:62:17:0b:20:c0:1d:b1:
         6d:fa:14:94:8a:40:95:3b:a2:f8:aa:a8:27:1e:68:92:dc:d9:
         53:0c:95:19:36:d2:21:d5:16:92:34:b3:b2:64:4e:e1:ed:f8:
         ba:ee:a3:a7:e3:40:69:ef:9c:08:c5:7d:bb:4d:b0:60:94:85:
         37:16:e3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 10:51:34 2024 by rpki-client on console-ams.rpki-client.org