Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp2nBxh7qgC6hmJHVioV_n23Vyo.cer
File:                     gp2nBxh7qgC6hmJHVioV_n23Vyo.cer (raw, json)
Hash identifier:          2i2vbC7NQAmZk3Wav/CYbnrebdLGKIt94IHveA6sjlI=
Subject key identifier:   82:9D:A7:07:18:7B:AA:00:BA:86:62:47:56:2A:15:FE:7D:B7:57:2A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       011F59
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 21 Jul 2021 02:48:49 +0000
Certificate not after:    Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources:    AS: 140887
                          IP: 103.152.228.0/23
                          IP: 2406:36c0::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Apr 2024 04:49:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73561 (0x11f59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 21 02:48:49 2021 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=A9183CF9/serialNumber=829DA707187BAA00BA866247562A15FE7DB7572A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:fc:d4:55:35:7d:44:d9:e4:52:ae:2c:0b:02:
                    6a:46:83:63:29:60:b9:ae:61:ff:48:9c:31:19:5b:
                    3c:87:29:75:95:f5:f2:cc:ae:4c:31:65:58:93:83:
                    1b:73:c2:fa:c3:c1:b1:91:49:1c:0e:41:ad:f8:21:
                    bb:7f:f2:b0:8f:7b:5a:bb:a8:e3:fe:6a:ea:46:59:
                    23:dd:82:14:19:7e:d2:4c:ce:01:a7:83:25:42:98:
                    c8:31:9c:e6:76:d0:8f:83:6e:20:c1:33:16:c5:4c:
                    70:4a:b7:65:87:73:95:23:49:82:a8:45:f8:3b:b3:
                    85:6d:61:5b:26:8d:0d:2a:af:a1:85:2a:07:4a:94:
                    93:7f:3c:3c:9a:e3:59:62:56:d9:91:e0:af:d4:7d:
                    9b:16:a5:60:ef:f9:c6:b5:c6:19:2e:f1:60:39:93:
                    98:47:34:5a:9a:50:0a:1c:d0:71:ca:a6:70:fe:55:
                    9c:e2:68:c1:63:46:e9:00:1c:f2:28:7b:fc:9f:da:
                    4d:1c:2b:68:39:24:8d:2d:ed:ea:1a:45:a4:09:22:
                    ea:4e:87:f0:d2:42:ea:40:32:29:1a:73:26:5d:0a:
                    2c:0c:10:49:56:8e:5f:6a:0c:e4:6b:9d:c3:73:0c:
                    c8:74:71:85:5d:d5:61:a8:11:71:77:35:13:1d:99:
                    03:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:9D:A7:07:18:7B:AA:00:BA:86:62:47:56:2A:15:FE:7D:B7:57:2A
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  140887

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.228.0/23
                IPv6:
                  2406:36c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:5a:96:1c:d7:58:45:6e:58:44:6e:2b:78:2d:8c:21:d1:8c:
         85:f0:76:1c:76:1b:e2:66:c7:fc:81:95:ab:4e:80:0f:de:8a:
         90:56:af:23:84:13:6c:f3:94:ce:2a:bd:02:b4:94:18:76:12:
         f5:7b:ea:95:66:79:85:f2:77:63:fc:38:f6:c9:38:37:6e:01:
         1f:d4:31:db:02:cd:6a:cc:c8:4b:7b:d4:e3:db:dc:77:04:6a:
         55:75:ae:59:07:c4:ee:f9:2c:e9:06:74:11:34:9a:94:d7:8b:
         a7:d8:7e:42:b5:d3:06:43:a2:ee:e6:67:9b:89:b4:9c:ce:4c:
         a0:ea:62:51:52:7f:0d:7c:1b:f3:58:b0:ca:4f:b2:56:60:f7:
         2e:34:66:c1:7f:e5:b3:a3:a7:e7:68:41:07:26:a7:b0:a0:58:
         ea:b1:e9:d1:a3:ce:58:66:1e:a2:c8:47:8c:d5:2d:26:8b:42:
         0c:09:41:1d:89:ee:55:ce:dc:6c:25:59:41:2d:c6:3a:48:d9:
         6f:1b:cb:55:d2:83:fd:73:d4:2c:2c:88:1a:ca:4e:2c:bc:a8:
         3e:d4:c2:c3:d4:d3:b6:5e:40:44:c0:2e:d0:77:44:a1:3e:fd:
         31:a2:61:8d:ce:8b:f9:49:05:9b:af:a0:2e:74:9a:9b:84:49:
         39:46:3f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 05:47:20 2024 by rpki-client on console-ams.rpki-client.org