Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer
File:                     f95kLEQhft58x2dxm6Z9A20X0Es.cer (raw, json)
Hash identifier:          RIc29m6Cv7dYxERXeoy8w64uooER1B2775Shtm3+Syo=
Subject key identifier:   7F:DE:64:2C:44:21:7E:DE:7C:C7:67:71:9B:A6:7D:03:6D:17:D0:4B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01C5CE
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 24 Oct 2023 14:08:17 +0000
Certificate not after:    Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources:    AS: 132227
                          IP: 103.214.248.0/23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 03:13:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116174 (0x1c5ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct 24 14:08:17 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=A9189883/serialNumber=7FDE642C44217EDE7CC767719BA67D036D17D04B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a2:2e:23:37:19:e0:13:a1:7b:80:a7:c9:4b:
                    89:ab:66:a8:e8:99:50:c7:23:d8:da:fc:51:3d:a7:
                    9d:10:9d:9d:cb:3a:08:28:55:fd:8f:87:30:ae:b6:
                    11:5c:74:66:a6:99:de:89:bc:cc:40:e6:17:98:c9:
                    e0:8c:4a:a5:d5:4e:e3:67:87:c9:85:2f:57:3e:ed:
                    80:ac:98:b9:1d:8e:23:bb:d5:b3:13:d3:84:4e:37:
                    16:56:42:36:6a:95:a9:03:2e:6a:8d:99:3c:8d:b5:
                    55:97:52:f4:e6:42:cd:88:43:ca:4e:fa:f5:16:e4:
                    6b:28:ad:48:72:61:13:ca:d0:28:6d:ab:b2:e2:ff:
                    ed:28:01:87:01:42:68:fb:d1:0b:f6:08:38:03:48:
                    1e:d4:9f:6d:a6:8c:56:1e:1d:17:70:83:fe:96:8a:
                    86:df:aa:ee:58:0b:81:ed:dc:00:d1:70:a2:07:04:
                    9f:17:10:96:eb:59:df:5b:49:2e:40:08:2d:54:13:
                    54:50:53:51:84:a3:fe:43:db:ff:79:b0:91:53:3b:
                    b1:d4:cc:1a:5c:16:6d:f5:2e:fa:eb:e2:0b:09:11:
                    51:53:23:a6:e2:db:11:94:ba:b2:8c:68:f5:2d:12:
                    73:8c:ad:94:87:50:a8:86:6c:e3:2a:44:16:88:cd:
                    88:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:DE:64:2C:44:21:7E:DE:7C:C7:67:71:9B:A6:7D:03:6D:17:D0:4B
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  132227

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b5:31:47:50:ea:94:af:80:24:a5:98:6c:19:e2:65:1a:1d:9d:
         d9:86:36:9c:b5:bb:96:e2:53:1f:df:86:1b:d6:4e:5d:6c:9f:
         4b:d1:62:52:66:35:34:f7:e2:ab:90:cc:e4:36:47:16:46:24:
         91:3b:0a:ea:37:dc:a5:5d:cf:23:ce:77:01:ae:3b:8e:e5:3a:
         16:34:3b:8c:a3:eb:fb:f0:f5:1c:72:c4:41:fe:07:8d:9c:1c:
         40:ea:3e:da:db:81:c5:bd:bd:d7:67:5f:fc:9b:b8:ec:bb:f8:
         7c:ed:05:85:68:f3:6a:8f:4c:7b:1a:fc:cf:b9:16:e7:44:f9:
         c9:55:cf:7b:27:f5:3e:15:e2:1a:02:be:5b:0f:0d:c8:56:a4:
         54:76:8e:f7:9b:4a:4a:4c:7c:af:32:2a:01:6f:3c:bc:3e:c3:
         6b:9d:58:83:5e:fa:69:1d:72:77:5e:2c:48:b2:ef:62:fe:15:
         2b:06:37:e4:57:55:29:13:dc:cb:e8:d6:29:18:57:55:f8:37:
         59:77:dd:ef:08:dc:b9:b8:83:81:fd:00:19:bf:9f:59:52:6d:
         32:02:ed:1c:50:24:66:83:6a:bf:f1:4a:7c:2f:6c:d7:22:a7:
         d8:37:f7:0f:66:b4:28:9e:af:86:14:58:12:79:50:5d:86:8f:
         11:62:1b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:05:12 2024 by rpki-client on console-fra.rpki-client.org