Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuTdyziTyc2__3a-xeAwLlIZJQE.cer
File:                     fuTdyziTyc2__3a-xeAwLlIZJQE.cer (raw, json)
Hash identifier:          RC5wV3stqDilJU1lm1rIRJJQUka1F20Uk3tInEmdPW8=
Subject key identifier:   7E:E4:DD:CB:38:93:C9:CD:BF:FF:76:BE:C5:E0:30:2E:52:19:25:01
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01E40D
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9168939/E666E08E852611EB9D198F1DC4F9AE02/fuTdyziTyc2__3a-xeAwLlIZJQE.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9168939/E666E08E852611EB9D198F1DC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 12 Mar 2024 15:28:06 +0000
Certificate not after:    Wed 28 May 2025 00:00:00 +0000
Subordinate resources:    AS: 139583
                          IP: 103.136.255.0/24
                          IP: 2001:df0:1280::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123917 (0x1e40d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Mar 12 15:28:06 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=A9168939/serialNumber=7EE4DDCB3893C9CDBFFF76BEC5E0302E52192501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b3:d6:e8:a2:e3:5e:b6:c9:70:a3:99:bf:9e:
                    bd:02:b9:5e:18:eb:91:33:7a:d0:1d:95:39:31:e5:
                    31:7d:ed:8d:36:e6:30:59:37:6e:71:0d:b4:cb:a7:
                    96:4e:33:18:17:4b:2a:4b:8f:b9:ce:75:99:76:a3:
                    ac:7f:8e:0f:d3:cf:2e:b1:60:1c:b5:51:65:e9:91:
                    fc:ea:c4:fc:86:89:bf:90:ca:6e:68:e1:84:e3:c1:
                    43:3f:dc:4c:04:66:ea:71:c0:d4:17:78:75:03:52:
                    8b:10:fc:74:cd:4a:cd:3c:50:98:9e:c9:7c:b1:4b:
                    88:54:89:97:a2:fa:90:c0:9e:83:01:a4:5b:c7:c2:
                    68:0d:5c:b4:ab:82:2f:10:45:87:ce:9b:fa:c6:62:
                    11:6a:83:0b:0e:98:54:ee:f0:ef:c4:a6:7f:f4:e7:
                    a3:94:5c:8c:05:8a:e7:bf:09:4a:fc:af:0c:0c:d9:
                    9d:f1:5d:ca:73:7a:6d:25:ec:f2:49:66:91:d3:8c:
                    15:1f:88:b8:c2:d7:2c:d0:28:00:8a:f8:19:a1:68:
                    e5:85:a8:61:e2:06:60:68:cf:e2:25:36:d5:a9:59:
                    37:dd:e5:c0:4d:2b:7e:85:09:6c:e9:bc:d6:d6:f3:
                    a0:5c:6e:82:29:42:a9:b0:5b:ca:58:fc:f0:a0:d1:
                    e3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:E4:DD:CB:38:93:C9:CD:BF:FF:76:BE:C5:E0:30:2E:52:19:25:01
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9168939/E666E08E852611EB9D198F1DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9168939/E666E08E852611EB9D198F1DC4F9AE02/fuTdyziTyc2__3a-xeAwLlIZJQE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  139583

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.255.0/24
                IPv6:
                  2001:df0:1280::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:ab:e9:af:d3:c7:e2:9f:86:a5:f8:06:76:ea:9f:b0:88:22:
         88:82:2a:5e:67:1f:a1:a0:67:f9:95:ba:57:7a:c9:2e:58:6d:
         a4:d9:ea:a2:5b:55:b5:3d:f6:ab:ec:c4:ce:96:46:dd:05:78:
         73:63:1c:f0:d8:fc:43:26:66:83:c3:23:bb:3d:13:e3:12:aa:
         95:9c:a7:57:53:18:56:0c:fa:54:f8:99:bb:d2:ca:f5:74:bd:
         9f:3c:51:cf:b8:13:99:08:e8:2c:e9:7c:72:6a:b0:17:48:58:
         ad:a1:ec:e1:5f:95:a7:f2:f0:55:3b:4c:60:b0:1e:11:e9:04:
         b0:1a:d4:bd:04:7d:29:cd:fd:7e:5a:a9:e5:06:aa:d9:01:a7:
         1c:68:9b:31:6d:ae:c8:f0:3b:51:48:6e:9e:2a:e4:58:50:23:
         c4:95:43:d3:2d:08:63:28:b1:4b:33:dd:49:c3:89:31:5d:d9:
         f6:f9:96:e8:22:c8:67:83:1b:1a:55:ca:75:bf:67:f4:3d:83:
         d7:63:30:95:cc:99:6e:ef:51:f2:a9:fc:2c:b9:3c:4e:b3:af:
         11:bf:f6:45:b8:21:bc:02:3b:7a:ec:14:19:16:27:47:1d:8e:
         36:d7:20:60:a9:98:1a:92:51:bb:73:93:fc:35:81:31:d1:ea:
         c3:5a:9e:01
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:03:42 2024 by rpki-client on console-fra.rpki-client.org