Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g6wWjkn7Jet2lFoL0Ubqi1e_Ccw.cer
File:                     g6wWjkn7Jet2lFoL0Ubqi1e_Ccw.cer (raw, json)
Hash identifier:          Cf3oJCS2fN1VLNmUZeWc0hBpnemGZFNPSnrs5KpDX/U=
Subject key identifier:   83:AC:16:8E:49:FB:25:EB:76:94:5A:0B:D1:46:EA:8B:57:BF:09:CC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01A0FB
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91AE954/B1F6BCC2C14A11ED882BE329C4F9AE02/g6wWjkn7Jet2lFoL0Ubqi1e_Ccw.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91AE954/B1F6BCC2C14A11ED882BE329C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 02 May 2023 21:48:43 +0000
Certificate not after:    Tue 30 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 4817
                          IP: 210.10.0.0/20
                          IP: 210.10.64.0/22
                          IP: 210.10.76.0/22
                          IP: 2400:79e0::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 06:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106747 (0x1a0fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May  2 21:48:43 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=A91AE954/serialNumber=83AC168E49FB25EB76945A0BD146EA8B57BF09CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:34:ea:69:e1:16:3e:7d:7b:a3:f4:32:70:aa:
                    fe:e7:86:a3:f1:62:5b:27:ef:a0:88:1d:cd:6e:75:
                    b0:35:e1:16:ae:83:cf:88:2a:79:66:ff:db:b7:e4:
                    4b:0a:26:b8:59:bb:70:5f:5e:e4:69:da:67:c6:76:
                    57:9e:f1:db:b2:05:a7:d9:81:e4:e6:09:53:96:4c:
                    b8:bb:08:5e:15:8c:75:ac:63:66:cc:b4:8c:93:f4:
                    37:06:e0:6a:93:1d:50:d2:7a:67:59:30:fd:f0:8f:
                    ec:ed:47:dc:41:67:09:e1:18:d5:54:45:8a:88:5c:
                    33:7f:ec:8a:20:7c:9a:4d:03:59:41:74:6c:2f:b9:
                    79:0a:0c:82:96:37:42:62:9a:97:e8:87:2d:48:52:
                    40:9a:88:00:66:10:9c:d2:20:3b:43:76:11:74:45:
                    92:37:d4:aa:ab:57:69:b4:66:eb:1a:74:b7:3e:ff:
                    eb:81:ff:f7:f6:b2:db:37:42:79:87:2a:49:97:c9:
                    72:1a:a5:d7:bd:8e:66:c5:d2:28:84:58:7d:86:f8:
                    7e:f5:3c:ba:a8:e0:1a:3c:31:32:a3:c6:d7:19:c1:
                    03:4d:ab:ae:b1:09:06:11:77:ae:15:53:81:a4:b5:
                    e4:b9:52:ad:e7:fa:95:22:7f:2c:fe:ff:ed:98:0f:
                    c7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:AC:16:8E:49:FB:25:EB:76:94:5A:0B:D1:46:EA:8B:57:BF:09:CC
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AE954/B1F6BCC2C14A11ED882BE329C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AE954/B1F6BCC2C14A11ED882BE329C4F9AE02/g6wWjkn7Jet2lFoL0Ubqi1e_Ccw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  4817

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.10.0.0/20
                  210.10.64.0/22
                  210.10.76.0/22
                IPv6:
                  2400:79e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:b0:c5:e9:3a:9d:9b:f8:b2:b8:06:97:46:b2:2b:37:c6:c1:
         d2:86:11:36:b8:13:7a:8f:11:5a:19:50:39:b8:60:f5:8c:6a:
         1d:72:fc:ed:2a:9d:5d:02:64:83:8f:3f:45:07:08:1e:f1:fb:
         fe:bf:61:f3:29:15:66:a4:69:2a:4f:b6:ef:56:1f:77:e9:fb:
         ba:11:e5:7e:b1:a8:9f:e3:15:59:ac:30:83:b0:4a:26:de:d3:
         6d:38:94:ca:b8:a8:b5:14:fc:2a:e7:b4:1e:ea:80:83:c5:36:
         c9:48:7d:84:3d:1d:d7:ce:9f:63:f0:1c:28:9d:27:49:b4:29:
         2a:81:50:57:f2:54:bf:f1:2a:1c:f6:47:8d:87:d6:c8:c9:7c:
         81:67:28:c5:5a:5b:f6:c1:89:93:e8:bf:4b:a1:ee:c7:6b:53:
         cf:44:aa:ba:b9:5f:ec:5f:76:c6:7c:43:84:c0:15:e6:f9:38:
         5a:d6:ea:56:bf:c5:44:a8:ae:cb:22:f2:a0:d4:d5:3d:b1:5a:
         b4:13:7e:77:32:cc:1c:ac:f5:a5:66:1d:7a:14:65:a9:de:a2:
         d4:65:80:8e:8a:92:af:7b:6b:33:f6:e7:29:da:29:5b:50:a1:
         a4:08:10:91:82:fe:7b:ff:c7:cc:6e:71:72:af:9d:dc:da:cb:
         2c:9c:9b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 07:21:32 2024 by rpki-client on console-ams.rpki-client.org