Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer
File:                     ez9g2bGigAKgeHXKtYohRXBz4X8.cer (raw, json)
Hash identifier:          H+rekiBVP3PxA1p3IEIqoGJX+e5q62yrFCuRe+06RRI=
Subject key identifier:   7B:3F:60:D9:B1:A2:80:02:A0:78:75:CA:B5:8A:21:45:70:73:E1:7F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01A54C
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 26 May 2023 14:30:42 +0000
Certificate not after:    Tue 30 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 9989
                          IP: 27.111.208.0 -- 27.111.239.255
                          IP: 101.97.64.0/18
                          IP: 118.103.180.0/22
                          IP: 202.79.192.0/19
                          IP: 2403:b100::/31

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 07:49:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107852 (0x1a54c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May 26 14:30:42 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=A914254C/serialNumber=7B3F60D9B1A28002A07875CAB58A21457073E17F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7a:57:aa:b7:3e:c3:29:5b:a9:93:1e:a2:27:
                    73:8b:ec:3e:ee:fd:ad:7f:13:9e:51:88:26:b2:9b:
                    e3:74:f2:50:4d:5c:40:ab:10:ba:9c:5c:e1:ba:84:
                    62:60:ad:2c:2b:8d:bd:1d:eb:18:4d:22:de:ca:d8:
                    d8:e9:0d:f1:e7:b7:c9:05:3c:ac:a4:14:3c:52:fa:
                    ee:72:fc:a2:68:e0:31:f9:5b:9a:ff:16:da:e2:a4:
                    7d:d3:24:e3:d1:f4:b0:62:8c:2b:01:15:e2:a0:3f:
                    e8:bf:cf:8c:ef:20:2f:09:2b:02:51:c2:9f:7e:31:
                    53:40:fa:80:fd:4e:c7:ff:6f:77:a4:43:9b:c0:2e:
                    72:d0:3d:2f:e2:0e:d2:f7:6b:b5:23:d5:af:cc:9c:
                    40:44:f6:54:0a:2a:d5:67:fa:ac:3b:3b:f2:7c:ce:
                    56:10:49:09:e5:42:c9:78:27:69:6b:68:22:2b:cc:
                    53:77:2b:5c:b6:71:b6:7a:26:0e:3d:98:4e:2b:4c:
                    67:ef:c2:1a:b7:62:d4:7e:c8:8e:51:c4:38:c7:71:
                    cb:ee:61:97:39:2e:16:5e:11:c9:33:c8:81:7f:2a:
                    b3:f7:fb:c7:65:4f:8a:98:81:cf:91:b5:d8:36:8c:
                    77:2c:1a:7d:49:94:b5:2a:ae:a9:8f:a0:43:ad:8f:
                    91:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:3F:60:D9:B1:A2:80:02:A0:78:75:CA:B5:8A:21:45:70:73:E1:7F
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  9989

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.111.208.0-27.111.239.255
                  101.97.64.0/18
                  118.103.180.0/22
                  202.79.192.0/19
                IPv6:
                  2403:b100::/31

    Signature Algorithm: sha256WithRSAEncryption
         28:8c:98:26:75:3a:a7:a1:ca:ef:c3:3e:45:70:22:ec:cc:6d:
         11:a5:c6:35:b4:1b:c3:d4:1d:32:17:32:30:ba:e4:16:b7:9d:
         1f:d7:55:09:5a:88:ce:81:f1:51:ad:ff:42:75:7a:d2:66:48:
         8e:cb:7b:ab:2e:6d:07:9b:b9:c0:bc:d5:e1:ac:7f:b7:e9:dd:
         44:e2:28:40:c2:75:bf:2e:77:36:aa:78:41:95:b7:5b:e5:f7:
         43:dd:95:aa:de:54:f4:7a:30:91:32:7d:e7:0b:52:66:db:41:
         7f:e8:94:9f:b4:05:d9:1b:7e:ce:11:75:bd:e1:d5:ff:af:ff:
         5b:9e:55:8d:6e:2e:9f:11:9e:a8:b4:ab:f8:fd:75:e1:c2:cd:
         e4:31:61:d0:a5:56:82:79:a2:c2:24:41:31:33:e1:2e:c2:63:
         0a:2b:6c:1b:76:a4:eb:a9:1f:4d:23:3a:e3:4c:ad:bf:ba:9d:
         b0:87:40:15:b4:e7:49:2c:f5:50:2d:26:1f:e1:2c:30:57:46:
         7d:d3:5d:eb:f6:a0:46:86:ab:fe:f3:51:8c:97:d2:4e:fa:1e:
         4d:cd:2e:ba:4e:95:ea:91:f8:bb:fc:0d:d0:38:ef:9d:52:fb:
         ad:a2:f0:0e:87:77:9e:e0:fe:11:37:8f:49:78:6a:a0:8c:7a:
         a8:7c:af:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:03:04 2024 by rpki-client on console-ams.rpki-client.org