Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eQFKXwcxnwRg_NBPxKqrzOCe00Q.cer
File:                     eQFKXwcxnwRg_NBPxKqrzOCe00Q.cer (raw, json)
Hash identifier:          bhGwa5wXtvTvYfyXtXEeJ9MCfUIP9PhrSAhJ11K4cZA=
Subject key identifier:   79:01:4A:5F:07:31:9F:04:60:FC:D0:4F:C4:AA:AB:CC:E0:9E:D3:44
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01B6EE
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/eQFKXwcxnwRg_NBPxKqrzOCe00Q.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 15 Aug 2023 13:18:34 +0000
Certificate not after:    Thu 31 Oct 2024 00:00:00 +0000
Subordinate resources:    AS: 45282
                          IP: 123.176.56.0/22
                          IP: 202.129.192.0/22
                          IP: 2405:8200::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 May 2024 02:50:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112366 (0x1b6ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 15 13:18:34 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=A9128992/serialNumber=79014A5F07319F0460FCD04FC4AAABCCE09ED344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a0:39:ec:4c:d8:20:ba:47:18:52:aa:06:d1:
                    2a:88:2f:d0:fc:ce:0d:25:9e:d8:58:48:0d:d5:2f:
                    e7:b1:24:59:9b:d4:0e:eb:6f:61:61:2a:76:41:d8:
                    7d:71:4d:b1:2b:7e:07:8d:52:70:26:cb:a1:c3:ed:
                    9c:f0:6d:2f:66:4f:76:e8:1e:bf:5b:fa:3e:7a:39:
                    6f:97:db:02:02:26:80:4a:d2:f8:eb:78:bc:a6:60:
                    0c:5a:bd:57:ca:86:09:bc:33:70:c9:40:02:1b:b3:
                    61:04:49:16:2b:12:b2:34:db:19:03:bb:51:a7:d9:
                    b5:9d:1e:bb:c8:63:f3:a7:a1:2f:c9:62:cf:98:d3:
                    f6:f1:74:6f:01:54:e8:da:50:01:cb:72:0a:b1:27:
                    2d:9c:33:a4:ef:99:58:64:66:aa:a8:93:0a:a2:44:
                    d0:3a:05:a6:ad:a1:5b:16:21:04:03:4c:8f:6a:c4:
                    8a:c9:a3:f3:f3:45:89:ad:6f:8a:e4:69:a3:af:1e:
                    9e:8d:38:7e:bd:b4:c2:9e:90:49:89:6d:99:46:5c:
                    8d:d3:d1:2a:45:a9:47:84:0a:7c:a6:fc:a7:ad:83:
                    8c:63:a6:9f:80:10:7d:51:38:ed:7a:ca:9a:0a:5f:
                    7a:28:d5:c1:d0:01:ca:50:66:f5:3b:40:c5:37:43:
                    60:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:01:4A:5F:07:31:9F:04:60:FC:D0:4F:C4:AA:AB:CC:E0:9E:D3:44
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/eQFKXwcxnwRg_NBPxKqrzOCe00Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  45282

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.176.56.0/22
                  202.129.192.0/22
                IPv6:
                  2405:8200::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:82:3a:99:42:87:01:01:07:cf:ad:13:53:72:63:eb:c0:fb:
         a6:98:47:cc:03:65:da:da:ea:d8:af:91:90:88:6b:84:26:ad:
         4c:31:f6:2a:3b:1b:9e:f9:a6:fc:c6:b5:ee:51:68:b6:3b:cb:
         2c:69:4a:75:2d:40:7f:f5:15:21:ec:91:b1:2e:6c:f8:2b:a2:
         b8:ff:1d:16:cb:0d:dc:45:1e:fd:09:53:98:51:b5:21:56:08:
         2a:52:b0:b5:66:2c:80:23:0c:dc:61:99:17:39:d5:b2:e4:37:
         0c:0f:bb:e3:31:b5:82:94:a6:86:b7:b9:00:ef:bc:b8:4e:e9:
         65:03:b7:9b:fd:1d:99:7a:d7:09:74:f4:94:e5:2f:fb:c5:a1:
         76:4b:e1:5a:96:4b:ce:de:66:90:a3:9f:ff:b0:16:98:52:91:
         fd:e6:41:3a:3d:c4:22:ec:20:69:99:6e:9a:ba:f5:6c:1a:7d:
         4e:04:f0:cd:1e:20:10:6f:94:1e:ce:be:27:f4:4f:a0:40:8c:
         78:85:18:45:1c:60:9d:31:66:0f:75:e7:1e:a6:48:3e:db:56:
         36:ca:53:ea:25:84:32:ee:f9:5c:50:66:a3:36:a6:7c:ac:f4:
         94:3e:30:11:77:86:ec:24:b0:ba:78:b8:5b:1d:be:49:40:74:
         b7:33:ff:ac
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIDAbbuMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMDgxNTEzMTgzNFoXDTI0MTAzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMjg5OTIxMTAvBgNVBAUTKDc5MDE0QTVGMDczMTlGMDQ2MEZDRDA0
RkM0QUFBQkNDRTA5RUQzNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDPoDnsTNggukcYUqoG0SqIL9D8zg0lnthYSA3VL+exJFmb1A7rb2FhKnZB2H1x
TbErfgeNUnAmy6HD7ZzwbS9mT3boHr9b+j56OW+X2wICJoBK0vjreLymYAxavVfK
hgm8M3DJQAIbs2EESRYrErI02xkDu1Gn2bWdHrvIY/OnoS/JYs+Y0/bxdG8BVOja
UAHLcgqxJy2cM6TvmVhkZqqokwqiRNA6BaatoVsWIQQDTI9qxIrJo/PzRYmtb4rk
aaOvHp6NOH69tMKekEmJbZlGXI3T0SpFqUeECnym/Ketg4xjpp+AEH1ROO16ypoK
X3oo1cHQAcpQZvU7QMU3Q2AxAgMBAAGjggMkMIIDIDAdBgNVHQ4EFgQUeQFKXwcx
nwRg/NBPxKqrzOCe00QwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTI4OTkyL0ZBREJDNTZDODdBMTExRTVBRUI0N0Y0REM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEyODk5Mi9GQURCQzU2Qzg3QTExMUU1QUVCNDdGNERDNEY5QUUwMi9lUUZLWHdj
eG53UmdfTkJQeEtxcnpPQ2UwMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDALDiMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCe7A4AwQCyoHA
MA0EAgACMAcDBQAkBYIAMA0GCSqGSIb3DQEBCwUAA4IBAQAQgjqZQocBAQfPrRNT
cmPrwPummEfMA2Xa2urYr5GQiGuEJq1MMfYqOxue+ab8xrXuUWi2O8ssaUp1LUB/
9RUh7JGxLmz4K6K4/x0Wyw3cRR79CVOYUbUhVggqUrC1ZiyAIwzcYZkXOdWy5DcM
D7vjMbWClKaGt7kA77y4TullA7eb/R2ZetcJdPSU5S/7xaF2S+FalkvO3maQo5//
sBaYUpH95kE6PcQi7CBpmW6auvVsGn1OBPDNHiAQb5Qezr4n9E+gQIx4hRhFHGCd
MWYPdecepkg+21Y2ylPqJYQy7vlcUGajNqZ8rPSUPjARd4bsJLC6eLhbHb5JQHS3
M/+s
-----END CERTIFICATE-----
Generated at Wed Apr 24 04:48:00 2024 by rpki-client on console-fra.rpki-client.org