Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJt-bd3kLwYnhD21n6Qa-n87fDs.cer
File:                     gJt-bd3kLwYnhD21n6Qa-n87fDs.cer (raw, json)
Hash identifier:          WFaTRejsA6LUOBQ+XuuIqu8GRkfVMJ0eVxkDffMcB9c=
Subject key identifier:   80:9B:7E:6D:DD:E4:2F:06:27:84:3D:B5:9F:A4:1A:FA:7F:3B:7C:3B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01B634
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 10 Aug 2023 15:59:30 +0000
Certificate not after:    Thu 31 Oct 2024 00:00:00 +0000
Subordinate resources:    AS: 140918
                          IP: 103.153.118.0/24
                          IP: 2001:df4:4480::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 00:57:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112180 (0x1b634)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 10 15:59:30 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=A917EF96/serialNumber=809B7E6DDDE42F0627843DB59FA41AFA7F3B7C3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ad:23:dc:1e:e7:ac:64:47:99:53:68:fe:49:
                    e5:30:3e:6d:c4:cc:41:15:e4:ec:52:c0:6a:49:23:
                    8c:af:fb:a4:16:e1:fd:6f:7d:1e:ba:90:95:c6:a6:
                    b1:5c:63:6b:a9:8b:4b:1b:82:6d:07:c6:24:6b:90:
                    96:0e:da:e6:c2:9d:27:6f:3a:04:53:55:d5:f8:74:
                    55:ba:c1:29:23:2c:1d:6f:1a:01:16:6d:2c:dc:45:
                    59:15:17:75:5e:5a:ae:1e:12:38:4a:bd:5f:f5:da:
                    d2:ef:39:cf:44:44:43:20:99:53:d5:22:1a:c1:6c:
                    f8:c9:a5:bc:b4:1b:6d:90:03:46:8b:a7:74:00:5f:
                    7f:69:03:51:4a:4d:6a:4c:c2:8a:38:60:94:15:e4:
                    b7:2e:03:64:46:44:29:5d:24:94:98:02:19:cb:85:
                    dc:78:20:53:07:3e:93:35:65:8b:d8:93:f8:d4:06:
                    24:18:d3:94:b0:55:bb:6d:5a:e9:9d:6e:4e:db:70:
                    d1:d2:40:d3:93:8c:c4:48:96:83:ee:35:da:b9:42:
                    10:1b:3f:9c:20:c1:70:8a:79:f3:94:17:f8:6f:7c:
                    4e:a5:2f:de:fa:f1:d4:15:06:96:a2:63:5c:38:ba:
                    2e:c7:47:0f:07:2c:b4:30:2f:62:dc:a5:fd:4e:fd:
                    a5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:9B:7E:6D:DD:E4:2F:06:27:84:3D:B5:9F:A4:1A:FA:7F:3B:7C:3B
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  140918

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.118.0/24
                IPv6:
                  2001:df4:4480::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:a6:50:32:21:5a:c8:83:02:40:37:ea:96:8b:a3:fe:2c:69:
         22:b7:2b:ea:1f:d1:84:d1:57:a2:8c:e6:4e:4c:60:90:e7:6a:
         f1:4b:bc:58:08:cb:1d:01:49:e4:f7:2f:91:8c:8f:06:2d:39:
         80:61:ce:42:f0:fd:4d:12:36:b5:66:9d:3a:e9:8e:f6:e7:1d:
         3f:8f:2a:52:fc:b0:a3:10:d0:2d:af:d0:09:dc:60:48:92:9a:
         60:ed:f1:72:e6:d2:3c:bc:c9:7a:41:1b:47:91:d1:5b:f9:30:
         5c:65:31:de:0a:c8:43:0a:32:75:66:0e:4a:87:20:c1:32:89:
         6d:3e:76:a8:b7:d6:cc:db:8d:27:7c:15:aa:d8:55:ad:f8:c5:
         88:64:ed:eb:43:ce:c7:ec:d6:b1:50:40:2d:df:c8:58:0e:ba:
         b0:fd:ae:37:94:72:69:b8:d1:ac:49:82:b0:17:67:31:60:fb:
         50:bb:02:b0:0c:6b:3d:a7:24:e6:21:57:60:95:f4:93:03:ef:
         6b:8c:5b:35:bd:5f:86:17:7a:6d:69:b1:84:04:64:c4:02:ee:
         45:53:17:f9:87:89:38:a4:85:8d:12:4f:14:62:eb:27:96:2a:
         02:d1:70:71:bc:cc:97:6b:1c:83:dd:5a:1a:64:8a:13:d2:b5:
         58:81:f7:31
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Apr 25 02:05:54 2024 by rpki-client on console-fra.rpki-client.org