Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eS4LPrNgRCf8hI-WxzSsTZn-dZY.cer
File:                     eS4LPrNgRCf8hI-WxzSsTZn-dZY.cer (raw, json)
Hash identifier:          lAsNt/ZBqFhENP7XeqgXVBqxQj2QwSHrJLDVqbuRJbg=
Subject key identifier:   79:2E:0B:3E:B3:60:44:27:FC:84:8F:96:C7:34:AC:4D:99:FE:75:96
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01B028
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 14 Jul 2023 03:34:29 +0000
Certificate not after:    Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources:    AS: 151465
                          IP: 103.229.188.0/23
                          IP: 2001:df2:9ec0::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 00:15:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110632 (0x1b028)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 14 03:34:29 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=A9113A27/serialNumber=792E0B3EB3604427FC848F96C734AC4D99FE7596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:42:1b:23:2b:3e:bd:10:ab:18:64:02:aa:b5:
                    66:22:19:38:bd:ed:a2:af:d8:c2:6c:ab:7a:6e:0c:
                    d3:3b:49:6f:15:77:59:17:82:4f:75:9b:1d:76:89:
                    5f:83:1a:c7:4a:76:6e:87:4a:e0:19:9a:82:c4:ed:
                    41:09:05:c5:be:bb:33:17:3e:ee:c5:77:42:fe:d8:
                    ed:f9:33:4d:3c:f6:d2:99:5f:9c:c7:ca:6c:6a:0e:
                    d2:08:61:26:bc:b1:f4:a9:e7:df:7d:66:55:52:58:
                    25:a3:60:e2:1e:bb:e5:35:d8:03:a4:35:ce:f6:33:
                    74:e1:f4:c4:1e:04:76:76:19:ee:66:90:94:36:cc:
                    c1:30:f2:15:3c:75:3f:7f:f3:c9:cc:0a:b4:6b:26:
                    33:f3:a4:3f:2b:09:8e:f5:fe:f5:43:2d:22:98:2c:
                    63:eb:cd:e2:53:f6:5a:81:b5:fb:47:fb:17:76:01:
                    a3:23:43:9f:41:27:7c:1c:36:92:4e:00:23:c2:2c:
                    66:d3:17:7c:c3:ba:ce:94:ea:96:dc:3a:be:af:a5:
                    4e:4c:fc:1b:91:f2:0f:e5:66:50:6f:17:7a:08:50:
                    95:bc:16:e9:f6:c0:44:07:d9:28:eb:62:ae:6a:71:
                    3d:5c:af:72:e9:62:3e:fb:21:2d:6f:5b:fb:d6:fd:
                    11:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:2E:0B:3E:B3:60:44:27:FC:84:8F:96:C7:34:AC:4D:99:FE:75:96
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  151465

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.229.188.0/23
                IPv6:
                  2001:df2:9ec0::/48

    Signature Algorithm: sha256WithRSAEncryption
         d4:d8:29:60:f3:7e:6d:f8:94:69:88:7d:76:38:3b:be:2e:e9:
         02:25:e5:39:4e:c3:a0:21:4d:d9:bd:4e:54:52:b6:96:3d:0a:
         b9:67:b9:69:e4:8a:72:7f:e4:fa:e1:e1:96:17:4a:30:13:6e:
         9b:76:2f:1a:c4:c7:ed:20:55:1b:39:f4:49:45:e9:e6:ef:fd:
         c8:7c:33:02:75:cd:d6:a6:c8:b3:26:a0:9b:34:c9:7d:d8:5d:
         0e:2d:5f:1e:d3:71:1c:f4:52:c0:e4:4c:2b:da:75:6e:c4:f3:
         be:f2:69:b6:15:e9:8f:89:76:c5:be:8c:77:17:d5:cc:dd:4c:
         9a:83:98:9e:a0:68:d7:fd:17:8a:03:f9:b1:f7:9b:d2:36:f5:
         7b:3a:c6:29:2b:95:71:3f:b3:94:b6:29:5c:01:5d:c5:d2:8e:
         63:d1:2e:f7:a2:3d:35:a0:e4:6e:62:3c:5f:50:36:09:16:8a:
         65:e1:ee:ea:1a:4f:9a:0a:bf:7a:e6:13:96:76:74:ea:a6:8c:
         36:a3:fa:de:8c:7a:3c:d5:db:88:bb:6a:b2:6e:c5:e9:e8:c6:
         c6:fd:30:1f:ff:94:dd:fc:24:bc:11:f3:f5:45:c2:4f:e0:d6:
         4d:d6:70:d2:a4:48:1f:80:9b:97:b4:62:d2:36:cd:68:c2:f9:
         fe:f3:d8:0c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 2 01:07:19 2024 by rpki-client on console-fra.rpki-client.org