Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewWczGC6qvz28UEhbv3WjocMJVE.cer
File:                     ewWczGC6qvz28UEhbv3WjocMJVE.cer (download)
Hash identifier:          uGMOopIOJvniax0+UnSl/cHjNjPILsT/7MIn76b7aJU=
Subject key identifier:   7B:05:9C:CC:60:BA:AA:FC:F6:F1:41:21:6E:FD:D6:8E:87:0C:25:51
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       016945
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/ewWczGC6qvz28UEhbv3WjocMJVE.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate valid until:  Thu 31 Aug 2023 00:00:00 +0000
Subordinate resources:
    1: IP: 43.255.80.0/22
    2: IP: 103.238.128.0/22
    3: IP: 2401:4e80::/32

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92485 (0x16945)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 22 00:04:59 2022 GMT
            Not After : Aug 31 00:00:00 2023 GMT
        Subject: CN=A91A6131/serialNumber=7B059CCC60BAAAFCF6F141216EFDD68E870C2551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:dc:a8:ab:83:20:55:d1:94:a7:c9:b2:31:71:
                    ae:5b:5f:0c:7a:96:28:83:91:1e:f9:16:17:b7:e0:
                    fb:2c:db:1e:4a:bd:9b:8d:9c:f9:fb:c4:42:fd:70:
                    2e:fe:bc:91:c5:49:6e:f0:0e:5f:8a:d3:cb:a4:8b:
                    60:cc:fb:14:7a:30:da:cc:61:7a:cf:76:79:49:91:
                    4c:28:62:97:c8:13:48:3e:28:89:73:9a:12:b4:f2:
                    24:62:c3:48:18:9f:4d:6b:58:db:18:f1:36:f4:06:
                    cc:3e:d8:1a:2b:f7:ad:70:04:93:4c:88:a0:53:aa:
                    c0:7f:5f:48:d7:5c:ef:48:c4:8f:dd:5e:87:a1:75:
                    82:93:7f:32:72:24:d1:c5:f7:f6:bc:67:4a:2a:46:
                    ec:1b:6e:e8:e1:d0:7e:5f:a1:2f:8a:69:78:6d:e3:
                    d2:b3:b3:ed:13:f9:82:cf:f6:fa:c4:76:db:b2:9d:
                    01:15:92:e0:f9:d7:65:8f:19:df:93:be:b6:0b:30:
                    da:de:4a:48:d8:88:4b:16:cd:9b:04:00:58:c0:78:
                    07:23:16:3a:76:29:66:39:bf:5f:75:2d:2e:86:a5:
                    db:54:2d:e5:c8:f6:11:c9:df:b9:01:10:7c:22:79:
                    af:a7:da:a3:3a:b7:5b:eb:73:ec:30:cd:a6:51:5a:
                    66:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                7B:05:9C:CC:60:BA:AA:FC:F6:F1:41:21:6E:FD:D6:8E:87:0C:25:51
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/ewWczGC6qvz28UEhbv3WjocMJVE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.255.80.0/22
                  103.238.128.0/22
                IPv6:
                  2401:4e80::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:94:68:e0:d8:38:20:62:13:2f:38:74:f9:9f:bd:02:e1:0f:
         7c:61:fd:f2:02:83:1f:d4:b9:a0:29:ee:cf:b9:2a:a3:79:70:
         83:04:fc:66:9f:e3:91:97:2a:81:9c:81:1a:60:18:12:78:21:
         0c:0f:1d:bb:97:3b:3c:5c:9a:e6:7b:69:8d:dc:37:64:11:24:
         d9:35:45:e6:05:35:2b:b1:99:42:bd:98:5b:75:a1:8c:d3:e3:
         32:1e:76:c0:8c:e6:39:a8:d8:58:5c:62:22:a9:c3:f4:55:08:
         8b:62:e2:7b:0f:e7:63:85:87:da:94:33:09:fa:d2:c8:16:ef:
         8a:48:01:bf:b4:d3:88:2f:af:eb:c4:a0:ff:aa:0d:9d:10:82:
         ea:c5:9a:4e:4f:8a:86:a9:82:2d:01:8e:36:ea:6b:93:58:61:
         9a:ae:92:c7:70:fa:0f:a7:b7:d4:55:84:c6:2c:8e:c0:60:d7:
         46:7f:89:bd:12:24:db:8e:ec:95:b4:ee:1b:e7:ac:1c:8c:1b:
         c6:4f:0f:64:60:15:2e:6c:4b:9a:d0:17:1b:c1:74:48:23:b0:
         c2:89:e9:51:6d:0f:e3:c2:f6:4f:0c:bf:51:78:3f:80:70:f9:
         13:92:3c:a9:c3:37:6d:37:58:40:25:61:5a:89:7c:f4:b6:c7:
         5e:72:51:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 4 02:11:31 2023 by rpki-client.