Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer
File:                     fsx3osytqtpjQvwPRGkYdeo_koc.cer (raw, json)
Hash identifier:          dvI8QFt0ZKlE3XDcehKha5K8PZhdCQYrGFqf+N7HJrg=
Subject key identifier:   7E:CC:77:A2:CC:AD:AA:DA:63:42:FC:0F:44:69:18:75:EA:3F:92:87
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01DBB0
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 30 Jan 2024 23:28:22 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 139238
                          IP: 103.66.142.0/23
                          IP: 2400:d1e0::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Dec 2024 22:11:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121776 (0x1dbb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan 30 23:28:22 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=A91B2BC9/serialNumber=7ECC77A2CCADAADA6342FC0F44691875EA3F9287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:62:f5:16:ae:c5:3d:90:ab:81:ba:89:18:f4:
                    00:89:82:c1:ef:0e:9c:f0:e8:e6:2b:7d:d7:e9:6f:
                    46:2c:4d:3d:78:46:9e:9c:ec:76:ce:c0:05:7b:89:
                    b6:61:66:53:cb:cf:b3:63:16:03:5f:65:41:7e:15:
                    1d:44:34:23:2d:2c:78:5b:a0:96:e8:52:ab:09:de:
                    d7:36:2d:9d:02:b4:e2:05:9d:25:ec:87:43:a4:03:
                    26:a6:04:fa:99:e1:6a:61:dd:3e:b3:5a:5b:0a:ed:
                    1f:3c:3c:96:9f:f9:85:2d:19:cb:72:6c:58:fa:7f:
                    2b:4d:cb:fd:91:07:54:65:c8:02:b5:11:9f:4b:39:
                    0f:da:f2:28:1e:c5:e9:fe:65:bd:b7:63:3e:75:b1:
                    8f:48:e4:3b:b8:52:81:dc:8e:43:c2:4c:8d:73:18:
                    ed:7b:7d:2c:5e:c7:75:fb:f2:cd:9c:82:81:50:84:
                    93:58:ed:5b:6f:53:79:8b:c9:e9:de:31:15:2b:bd:
                    73:f6:5c:69:82:34:74:06:f2:dd:35:92:21:8b:9a:
                    ae:b7:b5:bb:8a:5c:ad:16:6f:b3:cc:2a:a8:ae:b5:
                    50:5f:e4:71:b5:6c:7f:fc:d3:9c:e4:6a:8a:3d:3d:
                    fa:d5:1f:f4:01:21:df:40:8f:e4:c0:cd:a9:c8:c0:
                    dc:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:CC:77:A2:CC:AD:AA:DA:63:42:FC:0F:44:69:18:75:EA:3F:92:87
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  139238

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.66.142.0/23
                IPv6:
                  2400:d1e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:cc:de:83:b4:d7:66:37:16:02:11:03:c1:12:36:d6:13:71:
         ba:aa:1d:76:ce:b7:3f:fa:97:dc:ff:f9:6d:4f:15:7a:2e:7f:
         e3:48:f1:7a:9c:01:e2:73:ff:2c:4f:52:85:80:0c:17:0c:e0:
         a4:15:61:6d:62:c4:98:91:16:34:69:a3:b2:cf:3e:26:a8:d0:
         89:ee:5d:f0:b0:32:d4:c8:62:7d:70:b4:92:dd:ed:fe:a0:cf:
         93:63:9e:4b:5f:a5:85:cc:4e:79:cf:1a:88:8a:7b:a9:aa:da:
         35:46:38:d5:61:20:6e:21:57:4a:3b:f0:5d:0f:68:4c:f1:2a:
         30:92:8a:d8:c2:91:10:45:f6:ab:f2:75:f3:28:86:c4:06:29:
         5b:83:12:37:29:3f:83:37:16:ca:d3:8b:73:18:b5:c0:ed:25:
         60:b5:b2:38:22:4e:e3:ca:55:32:50:77:e3:8e:ad:ac:bb:33:
         a3:57:0f:dc:64:13:7c:9b:22:8c:ef:fe:e5:54:61:5a:c9:da:
         2b:c3:bb:42:3c:82:51:3c:7c:07:5d:b5:41:f6:12:1d:3e:a3:
         a6:0b:24:97:8a:00:3a:73:39:25:63:6e:07:fd:f3:f6:f3:25:
         e2:9b:72:52:1e:75:ec:8b:4f:6d:c5:6f:ed:3e:6c:20:63:b0:
         f4:d3:0e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----