Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ex0xxneDebryS2uQVqe7Mf0dzqg.cer
File:                     ex0xxneDebryS2uQVqe7Mf0dzqg.cer (raw, json)
Hash identifier:          x/fR34ToBzCgokaYqPSXkJHqnMf5EF+Idj5cEYfGxN4=
Subject key identifier:   7B:1D:31:C6:77:83:79:BA:F2:4B:6B:90:56:A7:BB:31:FD:1D:CE:A8
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01C984
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 07 Nov 2023 13:42:13 +0000
Certificate not after:    Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 136970
                          AS: 138152
                          AS: 142403
                          IP: 39.109.104.0/24
                          IP: 39.109.112.0 -- 39.109.117.255
                          IP: 39.109.122.0/23
                          IP: 39.109.126.0/23
                          IP: 103.100.208.0/22
                          IP: 2001:df3:9100::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 23:35:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117124 (0x1c984)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov  7 13:42:13 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=A9138B0D/serialNumber=7B1D31C6778379BAF24B6B9056A7BB31FD1DCEA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:63:09:93:cc:8e:29:66:b0:74:24:f2:f2:5f:
                    55:16:36:c0:5f:ab:97:b3:f3:d6:6e:7a:d3:f7:87:
                    dd:57:38:46:53:e8:ec:f5:d1:5c:8b:6a:8a:1d:b3:
                    b4:26:6a:a7:a5:49:ee:ce:37:2c:f0:68:40:21:bf:
                    90:c3:49:01:bb:6d:6f:f8:5a:1e:20:e1:90:01:38:
                    ba:d7:af:94:57:34:00:8d:ad:6c:0e:82:3f:11:04:
                    96:f2:d4:36:11:80:97:f5:5f:8c:5c:9a:bd:8c:56:
                    d3:33:c0:5f:c0:b7:d9:7e:ca:1e:23:c1:3e:a8:76:
                    38:e9:08:27:c4:a2:20:3a:d6:16:09:06:44:d4:25:
                    ac:95:18:cb:ae:78:15:ce:fc:95:b3:a2:11:ed:a7:
                    a5:9e:53:6a:e6:91:13:6a:a1:7f:27:f9:1a:ae:28:
                    79:7e:ed:d8:96:14:71:3e:62:dc:d7:b3:b0:9b:19:
                    92:fc:06:dc:a7:26:96:f2:d3:0b:d5:1d:31:af:bc:
                    10:8b:f7:77:5d:2a:94:ee:00:af:11:38:19:b5:72:
                    9b:b1:88:d5:66:4f:f0:48:41:81:7c:7d:0e:99:7f:
                    dd:a9:4f:73:48:d8:45:35:6f:b7:9f:08:4e:8f:55:
                    e9:0c:13:f1:7a:b5:a1:2f:3e:7b:82:48:b3:1d:dc:
                    b6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:1D:31:C6:77:83:79:BA:F2:4B:6B:90:56:A7:BB:31:FD:1D:CE:A8
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  136970
                  138152
                  142403

            sbgp-ipAddrBlock: critical
                IPv4:
                  39.109.104.0/24
                  39.109.112.0-39.109.117.255
                  39.109.122.0/23
                  39.109.126.0/23
                  103.100.208.0/22
                IPv6:
                  2001:df3:9100::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:e1:44:d0:21:ac:b3:bf:09:f5:63:0e:13:af:ff:c9:bd:ac:
         16:ab:c8:ed:33:3c:e0:ce:ef:3a:f7:b7:bc:29:a1:a5:84:66:
         d8:27:2b:57:7b:b1:ab:c3:03:45:21:07:9c:50:ed:98:aa:4f:
         fd:65:0c:72:cd:d6:b5:d1:01:73:5d:48:1d:5b:4f:fb:ec:7b:
         6f:e7:f4:15:53:67:72:0e:57:43:5e:f8:5f:92:3c:6c:20:ef:
         98:71:fc:77:2c:ca:e2:f4:8b:80:af:3c:41:8a:ad:c3:00:98:
         7b:0c:b2:1a:fc:a9:f2:69:7f:e8:ae:67:c2:83:bb:65:33:a2:
         cd:00:21:d7:4c:50:75:53:27:80:06:42:82:73:96:4b:58:d2:
         9c:63:53:92:12:86:c2:c1:27:76:7b:99:a8:d5:fa:77:43:51:
         56:89:6d:0f:d9:49:1c:f6:76:52:70:f4:c2:92:be:8a:5a:4a:
         f9:33:4d:81:6a:d4:fb:31:54:58:c7:ad:ab:91:35:fa:4f:59:
         c1:aa:89:9c:01:8e:b7:1a:f6:2f:16:0a:3b:d8:37:a7:9e:e6:
         82:1f:81:c3:6e:cf:4e:f2:fb:05:b5:d9:12:d0:08:75:31:01:
         cf:87:3f:39:91:b3:56:3b:a0:b4:d0:88:f1:36:b1:02:25:a2:
         82:1a:7c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 01:10:27 2024 by rpki-client on console-ams.rpki-client.org