Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dw8omR3mSPiWHFfA3NrX1YtKafQ.cer
File:                     dw8omR3mSPiWHFfA3NrX1YtKafQ.cer (raw, json)
Hash identifier:          aWLdNES/j5E7kRQSbdewMkqLunA+pASBAaA0ci8zDWg=
Subject key identifier:   77:0F:28:99:1D:E6:48:F8:96:1C:57:C0:DC:DA:D7:D5:8B:4A:69:F4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01D33E
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 20 Dec 2023 16:06:57 +0000
Certificate not after:    Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 38198
                          IP: 202.43.8.0/21
                          IP: 2402:1940::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Apr 2024 15:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119614 (0x1d33e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec 20 16:06:57 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=A916699C/serialNumber=770F28991DE648F8961C57C0DCDAD7D58B4A69F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b3:74:3a:aa:a4:83:11:f5:27:20:9c:6e:9a:
                    02:a0:f3:f0:0d:7e:eb:bd:d0:96:d7:50:4c:f5:28:
                    4e:57:66:b0:72:b5:6a:b7:c9:24:e0:4a:73:53:6f:
                    8c:05:07:48:af:2c:9a:e4:57:d1:f2:32:da:ee:03:
                    bf:a1:fe:b1:41:4b:8e:26:65:ad:fe:e0:43:c7:f4:
                    a6:58:3a:1a:2d:19:d8:96:9f:75:5b:9f:aa:ec:17:
                    48:e2:99:4f:a4:71:36:30:49:63:83:e1:e6:65:f5:
                    53:11:b5:e5:f3:96:c6:bf:eb:b5:8a:e2:a2:22:e1:
                    ae:34:31:54:47:d2:32:58:40:71:34:4c:1d:72:74:
                    7c:84:2e:ba:59:8b:6d:d2:bd:15:ff:8e:72:db:d1:
                    79:36:a0:e4:5c:9b:9d:f0:8f:28:99:2d:a4:5f:91:
                    05:32:7e:a9:4a:3a:28:d0:c4:c2:9a:97:72:07:51:
                    f8:77:cf:75:cc:3c:29:2d:60:0f:ea:13:18:2d:14:
                    3f:c0:c3:01:ed:d1:9e:9b:3d:e7:0e:97:5c:84:d0:
                    4a:8a:88:55:62:05:1f:73:6d:63:7c:1e:ec:0a:b6:
                    fd:97:27:4c:ed:80:7b:ff:ff:c7:91:17:a7:bb:35:
                    2e:6b:01:f5:d1:e7:ad:fe:b9:71:5a:25:28:59:2a:
                    4f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:0F:28:99:1D:E6:48:F8:96:1C:57:C0:DC:DA:D7:D5:8B:4A:69:F4
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  38198

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.43.8.0/21
                IPv6:
                  2402:1940::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:22:17:cd:85:1b:54:46:89:ce:21:06:96:fc:28:38:13:58:
         16:e6:b3:f4:ba:7c:44:16:12:79:3e:43:d2:f1:b1:55:a3:77:
         2a:58:c9:e9:93:b5:88:6e:51:d4:a2:0f:62:95:35:db:c7:4d:
         75:19:41:b4:29:d5:87:e5:15:d3:6d:1b:49:29:08:2b:a4:db:
         fc:c2:46:fe:6c:3f:e8:ed:2a:28:57:bf:24:e1:3e:56:f5:c3:
         0c:35:c3:ea:8c:ac:e5:00:a5:53:d2:94:e0:1e:e7:f1:3d:14:
         34:6e:a9:d5:87:bf:b0:14:c5:2a:c1:4d:99:24:7e:92:d9:49:
         ab:65:61:e8:b5:5e:b2:62:aa:66:64:02:6f:fc:44:d2:03:68:
         5a:53:a3:86:1b:d6:d8:74:c7:8d:45:87:ef:2f:0e:79:8a:39:
         3e:30:32:be:73:9a:7b:90:5b:b8:06:41:0d:6b:e6:57:ad:9b:
         9a:2f:bb:ba:96:c3:fa:44:9e:e6:2a:69:4e:60:d7:7c:f0:25:
         76:7f:88:24:21:9e:2b:8a:66:98:53:45:0e:ca:dd:0a:0a:8b:
         ae:55:4d:28:b7:09:49:38:56:ee:2e:29:a4:8f:e3:72:8a:f3:
         91:5d:56:96:ca:57:7e:23:c0:20:0c:19:e0:d3:33:27:68:07:
         27:3b:97:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 16:48:42 2024 by rpki-client on console-fra.rpki-client.org