Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gR3hHn7cHBB2BVnus5v9Ztaa6kY.cer
File:                     gR3hHn7cHBB2BVnus5v9Ztaa6kY.cer (raw, json)
Hash identifier:          taN3ZfcYdNI3L/kNWzgtI5/vpZjpEs8eYy0U9WEs56Q=
Subject key identifier:   81:1D:E1:1E:7E:DC:1C:10:76:05:59:EE:B3:9B:FD:66:D6:9A:EA:46
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01BFF3
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 26 Sep 2023 23:02:01 +0000
Certificate not after:    Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 139604
                          IP: 103.142.80.0/23
                          IP: 2001:df1:3680::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 02:50:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114675 (0x1bff3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep 26 23:02:01 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=A91E6BEF/serialNumber=811DE11E7EDC1C10760559EEB39BFD66D69AEA46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c6:43:0f:c3:f0:25:0a:bd:d7:f3:8a:48:20:
                    05:8c:95:4f:73:3a:ff:ff:e0:e7:d7:12:1b:f0:e5:
                    7d:db:e3:55:8a:45:e3:80:b7:f7:44:35:eb:4e:0d:
                    09:1a:0f:b7:c2:10:c6:f1:6e:41:43:dc:f7:5b:65:
                    0d:a7:24:d6:7a:ec:9f:af:12:fa:4c:ed:42:ea:d5:
                    d9:e7:78:f2:cf:b1:fb:92:7e:8d:3a:81:21:58:5b:
                    a7:91:5e:89:63:60:c5:d7:75:06:24:8c:5e:cd:c7:
                    e3:2c:32:34:fe:35:97:80:d9:fd:9b:2f:66:1b:24:
                    15:48:bb:b6:7d:08:75:0d:dd:85:ac:09:12:4a:f2:
                    49:e2:ca:1f:12:b8:6f:54:d4:1a:9b:ad:e0:ee:c3:
                    18:66:8b:12:92:5d:32:41:14:cb:67:e7:d1:1b:5a:
                    7f:f6:d6:1b:ed:62:cd:ca:21:37:00:1e:76:37:92:
                    8b:75:ba:f6:4f:58:d1:90:e0:ac:c4:fc:7c:fa:ba:
                    e7:73:10:b4:8e:d0:60:f7:8d:71:92:4b:31:0b:f5:
                    e5:0b:02:47:87:08:61:30:e1:c3:c4:8f:11:43:60:
                    2f:67:d9:91:41:06:85:30:86:a5:d6:2b:75:18:52:
                    25:77:8c:aa:2f:19:d0:6d:8e:a0:c2:28:fd:f9:85:
                    ec:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:1D:E1:1E:7E:DC:1C:10:76:05:59:EE:B3:9B:FD:66:D6:9A:EA:46
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  139604

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.80.0/23
                IPv6:
                  2001:df1:3680::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:9c:f6:f2:3a:f7:32:c9:75:27:5f:66:93:ef:73:7b:1e:80:
         06:ea:71:8f:6d:e8:30:32:94:66:a2:75:19:2a:bc:03:86:28:
         08:9f:e5:5b:cc:ea:45:1a:da:d6:c1:19:21:dd:50:df:e0:25:
         12:4b:84:e2:5a:93:7b:8e:5e:10:d6:5b:c9:59:3b:f4:36:1b:
         c1:3f:26:90:54:52:26:ec:2b:e1:c1:92:e2:97:2e:40:5d:b4:
         16:49:86:52:b9:1c:12:8a:26:65:3d:8b:46:b7:1b:b1:4d:c2:
         bd:8f:5c:d8:92:e7:7a:df:f5:cb:27:84:0c:00:f3:23:6a:b0:
         9a:65:2c:72:13:22:03:81:c4:e6:90:55:6b:30:8d:70:e8:64:
         18:67:92:d8:d9:4d:ce:52:40:0d:e2:6b:a4:b3:f6:f8:b8:0d:
         5a:a6:b8:bd:01:24:bd:3c:7a:30:00:3e:70:b1:9d:49:42:c0:
         ac:6f:ec:99:5c:da:49:82:c3:44:32:b7:da:ff:51:e3:ba:c4:
         ed:f5:e7:63:da:7f:76:bb:44:a6:57:64:ac:37:54:cc:57:66:
         a7:0d:1d:4c:3c:28:2d:30:20:fa:d4:b2:82:b0:07:a3:29:bd:
         d4:f0:2c:ea:32:82:ab:97:1f:fa:b4:2a:c2:eb:b0:cc:73:ae:
         dd:c2:c5:99
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 20 05:37:14 2024 by rpki-client on console-ams.rpki-client.org