Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwig5Q7SdrauEaNIK8K70EDlnxo.cer
File:                     gwig5Q7SdrauEaNIK8K70EDlnxo.cer (raw, json)
Hash identifier:          0ueMepVvPptVXT7bvcQ2i+wHcyg3Liw/8UAqsEWNn/w=
Subject key identifier:   83:08:A0:E5:0E:D2:76:B6:AE:11:A3:48:2B:C2:BB:D0:40:E5:9F:1A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01ACE0
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91A45A0/BF31471256F011EAA6E98D42C4F9AE02/gwig5Q7SdrauEaNIK8K70EDlnxo.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91A45A0/BF31471256F011EAA6E98D42C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 29 Jun 2023 17:03:52 +0000
Certificate not after:    Sat 31 Aug 2024 00:00:00 +0000
Subordinate resources:    AS: 139081
                          IP: 103.139.113.0/24
                          IP: 103.142.230.0/24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 07:49:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109792 (0x1ace0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun 29 17:03:52 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=A91A45A0/serialNumber=8308A0E50ED276B6AE11A3482BC2BBD040E59F1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:dc:be:90:88:20:5d:34:50:ab:b7:2b:85:ca:
                    3b:f7:d7:5e:48:5e:26:a7:24:0d:12:87:a4:6b:61:
                    70:8c:41:93:ea:55:64:36:bb:38:d4:b2:a5:64:39:
                    fa:bf:4c:da:77:1a:50:03:b6:d0:fc:72:f4:0f:89:
                    bf:38:dc:a7:d6:78:8e:80:b6:5b:59:84:5f:91:72:
                    89:de:8e:95:a9:a6:b3:1a:fa:16:4a:0c:7c:ae:6f:
                    11:fe:3f:98:e2:dd:1f:5c:3e:f5:6e:13:39:08:18:
                    bd:5d:5b:73:6c:c2:03:22:fe:c8:96:12:75:db:21:
                    29:f2:f3:a0:ca:91:4b:8c:95:e6:d6:17:1b:99:66:
                    06:9f:76:e9:88:41:d0:fe:30:52:b0:78:75:54:28:
                    04:de:5c:5b:91:31:12:7b:21:63:65:06:c6:35:81:
                    d4:c4:6f:7d:42:de:7b:07:c4:a8:74:44:4d:1f:5c:
                    e0:16:6f:36:8e:38:46:e3:56:ec:8d:d8:37:af:a1:
                    96:8a:75:38:37:8c:4d:f9:03:06:34:f6:72:3f:1e:
                    5c:e2:27:c4:7b:15:9e:47:20:62:18:3b:87:2b:20:
                    ca:a1:0c:ed:87:7b:e5:cc:84:08:98:13:84:c1:25:
                    bd:a9:57:dc:80:65:03:5b:aa:ab:34:71:d1:ed:6c:
                    4e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:08:A0:E5:0E:D2:76:B6:AE:11:A3:48:2B:C2:BB:D0:40:E5:9F:1A
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A45A0/BF31471256F011EAA6E98D42C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A45A0/BF31471256F011EAA6E98D42C4F9AE02/gwig5Q7SdrauEaNIK8K70EDlnxo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  139081

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.113.0/24
                  103.142.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:81:34:55:2d:ed:32:4e:9a:2d:40:d9:11:fb:5c:5b:5d:e4:
         58:b2:82:eb:9f:84:38:f6:a3:6e:40:27:f6:c8:b8:1b:4e:d7:
         e6:39:8b:24:c7:2c:83:d4:92:55:1b:5f:07:2b:d9:cb:39:81:
         68:c9:41:af:fe:1d:15:d5:45:88:73:53:00:bd:11:06:fc:0d:
         2f:10:27:3e:50:1f:31:8d:c2:f9:be:8d:88:b0:a7:6c:52:0f:
         b3:f0:d3:21:76:29:42:ca:e5:52:bd:6b:43:f5:fa:e5:b9:ab:
         da:ed:b4:e5:dc:7a:2b:6a:04:32:76:c1:e0:ef:8c:bd:29:e7:
         ba:6e:06:09:57:06:39:b5:0f:c9:15:59:e9:95:82:45:14:1c:
         b9:13:7e:25:0e:b3:11:da:ce:90:62:fb:15:83:01:6c:07:aa:
         45:aa:ba:76:b6:34:ee:76:6a:8b:cf:dd:93:de:f5:c8:32:b9:
         22:b5:58:cc:59:fe:f5:34:6b:1a:c3:68:21:e8:82:8b:38:2a:
         87:5e:94:68:eb:53:d6:69:f6:24:eb:d6:b7:34:21:e5:3d:fe:
         82:e8:36:27:16:ee:22:32:94:6e:c1:1e:df:04:c1:0e:cd:53:
         99:cc:af:c4:92:62:15:95:21:6a:98:78:46:55:a5:37:28:a0:
         87:ef:62:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:03:05 2024 by rpki-client on console-ams.rpki-client.org