Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSxGJ1bUkw5gMpuitqcGbzsImu0.cer
File:                     fSxGJ1bUkw5gMpuitqcGbzsImu0.cer (raw, json)
Hash identifier:          9u68iCF/lRjUPe4bifvtXqJjkZEueY/kndZo4xAlngM=
Subject key identifier:   7D:2C:46:27:56:D4:93:0E:60:32:9B:A2:B6:A7:06:6F:3B:08:9A:ED
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01B246
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 26 Jul 2023 14:08:07 +0000
Certificate not after:    Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources:    AS: 139464
                          IP: 103.141.202.0/23
                          IP: 2001:df1:d80::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 23:35:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111174 (0x1b246)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 26 14:08:07 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=A9151631/serialNumber=7D2C462756D4930E60329BA2B6A7066F3B089AED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1c:5c:aa:76:1c:e0:83:69:b7:4f:e6:72:37:
                    f0:1f:2f:d8:5e:69:6f:22:2d:38:28:d8:ca:b4:59:
                    4b:b7:cc:4a:f1:dd:a3:b5:dc:ed:02:5c:a6:2e:e1:
                    7b:48:24:ba:3f:40:a0:f0:85:45:69:b8:fa:7c:e9:
                    b5:5b:a5:dd:ba:6c:51:ed:8f:a1:ad:76:bb:c1:47:
                    70:64:56:c5:f0:9d:32:5e:ed:a9:37:53:ff:88:9a:
                    1b:ed:4b:9f:e9:ed:3a:c9:b2:75:fc:83:44:dd:96:
                    61:1b:55:15:97:26:b5:8b:12:81:6e:88:a3:09:ab:
                    bd:2e:37:05:a3:7c:76:1a:90:b1:1d:f1:90:d7:fc:
                    0e:f8:ca:b9:92:30:bc:d1:d8:85:9e:12:bd:52:9e:
                    09:c3:25:3d:0f:33:39:98:94:27:fd:a8:42:e6:7f:
                    2e:ad:f1:53:bc:82:75:8b:a9:c1:e0:89:d9:85:3b:
                    4a:b5:32:a9:2f:d4:43:46:d7:c3:4b:f1:9d:2b:cd:
                    19:43:a0:e7:08:56:da:c4:3a:b9:c1:7e:58:44:1f:
                    2f:ee:f1:48:cf:40:96:95:76:df:28:f9:aa:13:9c:
                    ce:95:7d:cd:86:1a:c6:1e:2d:90:7c:e4:a3:25:a7:
                    7e:31:f8:ef:8b:18:9e:60:20:05:7b:bf:e2:02:bc:
                    45:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:2C:46:27:56:D4:93:0E:60:32:9B:A2:B6:A7:06:6F:3B:08:9A:ED
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  139464

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.202.0/23
                IPv6:
                  2001:df1:d80::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:5c:73:63:43:dc:58:f7:11:4d:9e:c3:72:95:e9:d6:05:bc:
         b6:77:5f:12:5e:0f:e9:21:9f:0c:6e:33:a4:1c:45:aa:f1:40:
         b3:6c:d0:02:a8:09:2c:81:6b:81:ca:1d:33:47:9b:a8:2c:d6:
         65:f6:1b:c9:be:a8:31:cf:10:72:3f:6f:a5:a1:f2:49:d5:22:
         2c:d5:0b:76:38:28:b8:bf:41:86:97:8e:f8:78:89:1f:b9:c6:
         f0:87:1e:c3:86:9a:80:7d:bc:ef:22:46:87:e8:30:e5:6f:7e:
         bc:f2:91:81:79:f6:cf:cc:cb:f5:d1:1b:36:99:35:a0:03:14:
         1e:8b:e8:a0:6e:e2:6c:7a:3e:ab:fc:61:c5:bd:43:5a:c0:7b:
         35:ca:b7:60:3e:96:45:11:5e:b3:5e:a8:4b:e6:ad:58:da:d4:
         43:24:3d:50:99:b4:3d:fe:2a:4a:79:81:92:92:ef:3f:3a:6e:
         3f:5d:c8:8d:55:d4:1e:8a:b6:ea:0b:1a:d2:96:fd:01:e6:c7:
         5b:59:39:c9:03:5d:82:8b:7a:73:1c:a9:9c:c7:d9:04:41:8e:
         49:52:6e:4e:c8:a9:52:42:18:74:54:c1:20:81:53:e5:f2:07:
         cd:ee:97:7a:ae:4a:35:36:67:df:ee:da:1e:f9:c1:55:2f:86:
         88:0a:74:79
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 20 01:10:28 2024 by rpki-client on console-ams.rpki-client.org