Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7FuQPo8p3_OJMTJpGRWg8OeihE.cer
File:                     f7FuQPo8p3_OJMTJpGRWg8OeihE.cer (raw, json)
Hash identifier:          sFQ9TClA1RjnEZW/R1zaQkDbLgclsf9kXU+XGPFDSHE=
Subject key identifier:   7F:B1:6E:40:FA:3C:A7:7F:CE:24:C4:C9:A4:64:56:83:C3:9E:8A:11
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01CEF3
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 01 Dec 2023 23:07:33 +0000
Certificate not after:    Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources:    AS: 141359
                          IP: 103.174.227.0/24
                          IP: 2001:df7:da80::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Apr 2024 04:49:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118515 (0x1cef3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec  1 23:07:33 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=A91AF83D/serialNumber=7FB16E40FA3CA77FCE24C4C9A4645683C39E8A11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7b:55:11:ce:49:96:30:47:f0:61:1a:43:ee:
                    fa:3a:6d:30:46:82:c4:ac:d4:d0:a6:77:8f:0c:42:
                    90:5b:b4:0b:ed:08:8c:dc:28:7b:ce:63:d9:67:e5:
                    d9:57:aa:8f:4b:cc:1f:86:af:e4:fb:f7:d8:36:ab:
                    5c:2d:6c:52:09:63:11:81:96:49:09:ac:00:8e:f0:
                    b7:ba:a6:7e:7a:b4:e8:f0:b4:75:61:4f:41:77:f2:
                    38:50:af:16:0f:70:2e:56:d9:40:26:b8:ce:25:f0:
                    f7:b7:9c:0a:c2:3e:40:b2:bb:a2:fb:51:74:a6:ee:
                    57:24:44:17:34:29:73:89:9d:07:ec:9f:75:70:46:
                    df:e1:04:a5:31:fa:75:b8:7a:79:44:d9:9c:4e:ad:
                    88:23:b3:50:73:44:76:ca:46:1b:cb:3d:b3:41:9f:
                    90:c2:57:b0:53:41:7c:f6:f8:e3:7c:6b:91:de:24:
                    ca:34:c3:22:f7:22:99:71:d9:b0:5c:ab:dc:0c:ce:
                    48:13:ae:db:52:20:54:2c:00:f0:56:18:b6:f3:44:
                    e2:18:c7:93:3a:a9:79:9e:5a:e8:0b:97:7f:86:85:
                    1e:7f:de:23:bc:cd:24:cb:5e:df:3c:8c:9c:f6:3b:
                    28:09:19:ee:a4:7f:a1:65:ee:4a:48:d2:db:3f:60:
                    41:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:B1:6E:40:FA:3C:A7:7F:CE:24:C4:C9:A4:64:56:83:C3:9E:8A:11
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  141359

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.227.0/24
                IPv6:
                  2001:df7:da80::/48

    Signature Algorithm: sha256WithRSAEncryption
         ad:31:9d:6e:f4:08:6c:d7:61:f6:c7:6f:9f:ca:15:62:a9:93:
         26:b5:75:26:1f:e2:a8:e2:df:59:63:eb:ee:5f:08:67:ff:11:
         d2:98:6e:e5:c7:9a:11:a7:9c:17:4f:9e:58:8e:5b:e9:cf:df:
         a9:5b:e5:90:d3:da:aa:7f:ed:08:60:b3:d6:0c:24:0d:15:ba:
         fc:71:4f:11:39:b0:4b:f7:92:3e:43:11:58:b2:68:05:79:26:
         60:45:54:d6:e5:3e:1a:53:0e:c0:1a:d2:04:d8:d7:e1:7f:fa:
         01:65:ff:67:c8:40:0d:e5:cc:67:7d:2c:ea:c6:a2:c6:42:ee:
         b2:10:91:1a:7d:c4:87:89:56:51:a1:31:d6:2f:08:b3:b3:05:
         88:ca:b7:a2:52:95:78:88:ae:99:15:59:05:28:73:e7:fe:ee:
         33:3e:0f:a5:ef:2c:91:33:1e:98:28:e2:85:c5:20:92:4c:13:
         1f:f1:ea:ac:d0:f3:75:2c:73:76:ff:3e:39:6e:6b:b7:d0:9a:
         cd:04:05:53:63:25:83:fa:da:6a:44:eb:22:31:a3:6a:80:df:
         34:d2:dd:a4:ac:dc:a5:0b:94:80:0d:61:c4:50:8d:72:57:43:
         f7:72:89:8c:23:bf:ce:15:b5:3f:e4:e3:92:77:98:96:1b:c0:
         b9:f8:90:65
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAc7zMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMTIwMTIzMDczM1oXDTI1MDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQUY4M0QxMTAvBgNVBAUTKDdGQjE2RTQwRkEzQ0E3N0ZDRTI0QzRD
OUE0NjQ1NjgzQzM5RThBMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC5e1URzkmWMEfwYRpD7vo6bTBGgsSs1NCmd48MQpBbtAvtCIzcKHvOY9ln5dlX
qo9LzB+Gr+T799g2q1wtbFIJYxGBlkkJrACO8Le6pn56tOjwtHVhT0F38jhQrxYP
cC5W2UAmuM4l8Pe3nArCPkCyu6L7UXSm7lckRBc0KXOJnQfsn3VwRt/hBKUx+nW4
enlE2ZxOrYgjs1BzRHbKRhvLPbNBn5DCV7BTQXz2+ON8a5HeJMo0wyL3Iplx2bBc
q9wMzkgTrttSIFQsAPBWGLbzROIYx5M6qXmeWugLl3+GhR5/3iO8zSTLXt88jJz2
OygJGe6kf6Fl7kpI0ts/YEFnAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUf7FuQPo8
p3/OJMTJpGRWg8OeihEwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUFGODNEL0EzRDUyRkI4Qzg1MDExRURBRjVCQkE4N0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFBRjgzRC9BM0Q1MkZCOEM4NTAxMUVEQUY1QkJBODdDNEY5QUUwMi9mN0Z1UVBv
OHAzX09KTVRKcEdSV2c4T2VpaEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAigvMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAZ67jMA8EAgAC
MAkDBwAgAQ332oAwDQYJKoZIhvcNAQELBQADggEBAK0xnW70CGzXYfbHb5/KFWKp
kya1dSYf4qji31lj6+5fCGf/EdKYbuXHmhGnnBdPnliOW+nP36lb5ZDT2qp/7Qhg
s9YMJA0VuvxxTxE5sEv3kj5DEViyaAV5JmBFVNblPhpTDsAa0gTY1+F/+gFl/2fI
QA3lzGd9LOrGosZC7rIQkRp9xIeJVlGhMdYvCLOzBYjKt6JSlXiIrpkVWQUoc+f+
7jM+D6XvLJEzHpgo4oXFIJJMEx/x6qzQ83Usc3b/Pjlua7fQms0EBVNjJYP62mpE
6yIxo2qA3zTS3aSs3KULlIANYcRQjXJXQ/dyiYwjv84VtT/k45J3mJYbwLn4kGU=
-----END CERTIFICATE-----
Generated at Fri Mar 29 06:02:31 2024 by rpki-client on console-fra.rpki-client.org