Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUKKAcUWkeeoxdhD7Lax09muQk4.cer
File:                     gUKKAcUWkeeoxdhD7Lax09muQk4.cer (raw, json)
Hash identifier:          Dgt76+pmsFlt/oJqmfsun66uAmwKVgOz23rFqyq6YAw=
Subject key identifier:   81:42:8A:01:C5:16:91:E7:A8:C5:D8:43:EC:B6:B1:D3:D9:AE:42:4E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01D080
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9152F52/88EBCFDC1D4911EAAE775B34C4F9AE02/gUKKAcUWkeeoxdhD7Lax09muQk4.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9152F52/88EBCFDC1D4911EAAE775B34C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 07 Dec 2023 15:25:14 +0000
Certificate not after:    Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources:    AS: 9736
                          AS: 23705
                          AS: 24330
                          AS: 24446
                          AS: 24557
                          AS: 38318
                          AS: 38877
                          AS: 45214
                          IP: 27.121.64.0/21
                          IP: 103.7.136.0/22
                          IP: 103.11.76.0/22
                          IP: 103.232.92.0/22
                          IP: 113.20.0.0/20
                          IP: 114.31.72.0/21
                          IP: 114.141.204.0/22
                          IP: 117.55.224.0/20
                          IP: 117.58.248.0/21
                          IP: 163.47.40.0/22
                          IP: 163.47.132.0/22
                          IP: 180.235.128.0/22
                          IP: 182.255.80.0/20
                          IP: 202.46.160.0/20
                          IP: 202.47.0.0/21
                          IP: 202.93.4.0/23
                          IP: 202.124.240.0/21
                          IP: 202.131.95.0/24
                          IP: 202.191.60.0/22
                          IP: 203.2.122.0/24
                          IP: 203.8.188.0/23
                          IP: 203.19.190.0/23
                          IP: 203.24.88.0/23
                          IP: 203.30.252.0/24
                          IP: 203.31.198.0/23
                          IP: 203.55.142.0/23
                          IP: 203.88.112.0/20
                          IP: 203.210.96.0/19
                          IP: 2403:1400::/32
                          IP: 2403:c400::/32
                          IP: 2405:5000::/32
                          IP: 2405:5200::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118912 (0x1d080)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec  7 15:25:14 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=A9152F52/serialNumber=81428A01C51691E7A8C5D843ECB6B1D3D9AE424E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:08:3e:ee:3e:23:88:9f:9e:70:e2:7e:49:72:
                    9f:27:89:58:a2:ea:7f:fd:6a:65:f2:a8:a6:93:6d:
                    86:d2:74:33:2c:a8:3f:10:e4:5b:54:2a:77:a6:31:
                    27:08:f3:dd:19:3d:15:14:58:f8:21:62:ac:91:0f:
                    d3:df:8d:9c:ef:78:10:08:bf:01:9e:a1:fd:e6:79:
                    d5:2f:c4:2b:3d:97:69:0e:b1:52:4c:49:ca:cd:a9:
                    79:e5:49:4c:c3:83:5f:53:60:44:b9:cd:79:cd:e2:
                    eb:88:cf:a4:dd:0c:74:18:5b:6e:e7:7e:4b:9b:e0:
                    56:d3:5d:dd:98:ee:98:1b:36:25:af:fb:bb:d5:03:
                    90:d6:31:e0:b8:b9:dd:0a:b4:1a:cf:d0:2a:fb:28:
                    39:13:10:35:63:d8:ee:cd:b9:54:95:44:99:a3:8f:
                    e4:4e:e3:61:42:a4:ab:15:32:87:7d:dc:78:ee:fc:
                    6e:db:cd:14:66:73:34:fb:32:a3:8f:b5:23:19:ec:
                    dd:7c:83:8a:9a:ba:c6:31:95:ec:63:23:4c:9e:41:
                    2d:8e:74:4d:78:0c:43:dc:69:cd:e6:ce:a0:ab:5d:
                    06:72:56:7c:8e:e8:0f:aa:d2:0d:70:ca:88:a0:f5:
                    44:81:6c:52:9a:dc:6b:c7:14:91:3c:04:fd:55:cf:
                    a6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:42:8A:01:C5:16:91:E7:A8:C5:D8:43:EC:B6:B1:D3:D9:AE:42:4E
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9152F52/88EBCFDC1D4911EAAE775B34C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9152F52/88EBCFDC1D4911EAAE775B34C4F9AE02/gUKKAcUWkeeoxdhD7Lax09muQk4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  9736
                  23705
                  24330
                  24446
                  24557
                  38318
                  38877
                  45214

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.121.64.0/21
                  103.7.136.0/22
                  103.11.76.0/22
                  103.232.92.0/22
                  113.20.0.0/20
                  114.31.72.0/21
                  114.141.204.0/22
                  117.55.224.0/20
                  117.58.248.0/21
                  163.47.40.0/22
                  163.47.132.0/22
                  180.235.128.0/22
                  182.255.80.0/20
                  202.46.160.0/20
                  202.47.0.0/21
                  202.93.4.0/23
                  202.124.240.0/21
                  202.131.95.0/24
                  202.191.60.0/22
                  203.2.122.0/24
                  203.8.188.0/23
                  203.19.190.0/23
                  203.24.88.0/23
                  203.30.252.0/24
                  203.31.198.0/23
                  203.55.142.0/23
                  203.88.112.0/20
                  203.210.96.0/19
                IPv6:
                  2403:1400::/32
                  2403:c400::/32
                  2405:5000::/32
                  2405:5200::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:12:a8:6f:11:cc:ea:27:23:c5:c2:36:6f:cd:19:62:9f:84:
         fe:a2:10:63:36:ec:5a:8f:6d:07:da:db:29:ff:b3:9e:7a:a9:
         ea:56:63:0d:68:99:e8:30:72:ba:0b:97:17:24:9d:ce:9c:a9:
         cb:6b:5b:6b:4c:2e:de:47:30:7c:eb:3e:11:0f:83:22:d2:65:
         45:8f:07:18:ea:c4:74:b4:50:92:38:c5:22:ac:05:df:fc:1d:
         1e:ac:5a:95:1c:ef:f5:24:a6:ee:fc:b0:b3:fc:06:f4:e1:34:
         1b:13:c1:05:13:1b:12:bc:15:f3:f6:5a:42:24:66:d7:3d:f2:
         61:31:59:70:c6:eb:74:ae:63:1d:e3:68:e9:a9:d6:14:19:4d:
         df:40:ed:52:6a:b5:11:c1:5e:f2:5d:d3:2c:ac:43:10:86:b9:
         95:89:42:ab:2c:a4:b8:7d:d0:da:25:9f:c1:8b:af:c5:49:d3:
         66:e9:fb:16:2a:3b:e8:df:a3:f1:e8:e2:91:bf:96:d7:27:7d:
         5d:07:d9:a4:50:2d:27:c8:10:bc:5e:77:77:0d:73:4a:a3:1c:
         c5:65:08:ab:3f:94:5e:69:0e:84:45:09:98:32:78:d0:60:69:
         70:05:78:94:0d:65:6a:08:26:21:98:4e:1b:0e:c5:3c:95:44:
         e1:bd:6d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 11:32:27 2024 by rpki-client on console-fra.rpki-client.org