Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwig5Q7SdrauEaNIK8K70EDlnxo.cer
File:                     gwig5Q7SdrauEaNIK8K70EDlnxo.cer (raw, json)
Hash identifier:          bzNv18GBZgehaCOXLbigjGhuZAWT3fFZP00Qd+LNS9U=
Subject key identifier:   83:08:A0:E5:0E:D2:76:B6:AE:11:A3:48:2B:C2:BB:D0:40:E5:9F:1A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01FD52
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91A45A0/BF31471256F011EAA6E98D42C4F9AE02/gwig5Q7SdrauEaNIK8K70EDlnxo.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91A45A0/BF31471256F011EAA6E98D42C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 02 Jul 2024 20:25:15 +0000
Certificate not after:    Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources:    AS: 139081
                          IP: 103.139.113.0/24
                          IP: 103.142.230.0/24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 18:36:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130386 (0x1fd52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul  2 20:25:15 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=A91A45A0/serialNumber=8308A0E50ED276B6AE11A3482BC2BBD040E59F1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:dc:be:90:88:20:5d:34:50:ab:b7:2b:85:ca:
                    3b:f7:d7:5e:48:5e:26:a7:24:0d:12:87:a4:6b:61:
                    70:8c:41:93:ea:55:64:36:bb:38:d4:b2:a5:64:39:
                    fa:bf:4c:da:77:1a:50:03:b6:d0:fc:72:f4:0f:89:
                    bf:38:dc:a7:d6:78:8e:80:b6:5b:59:84:5f:91:72:
                    89:de:8e:95:a9:a6:b3:1a:fa:16:4a:0c:7c:ae:6f:
                    11:fe:3f:98:e2:dd:1f:5c:3e:f5:6e:13:39:08:18:
                    bd:5d:5b:73:6c:c2:03:22:fe:c8:96:12:75:db:21:
                    29:f2:f3:a0:ca:91:4b:8c:95:e6:d6:17:1b:99:66:
                    06:9f:76:e9:88:41:d0:fe:30:52:b0:78:75:54:28:
                    04:de:5c:5b:91:31:12:7b:21:63:65:06:c6:35:81:
                    d4:c4:6f:7d:42:de:7b:07:c4:a8:74:44:4d:1f:5c:
                    e0:16:6f:36:8e:38:46:e3:56:ec:8d:d8:37:af:a1:
                    96:8a:75:38:37:8c:4d:f9:03:06:34:f6:72:3f:1e:
                    5c:e2:27:c4:7b:15:9e:47:20:62:18:3b:87:2b:20:
                    ca:a1:0c:ed:87:7b:e5:cc:84:08:98:13:84:c1:25:
                    bd:a9:57:dc:80:65:03:5b:aa:ab:34:71:d1:ed:6c:
                    4e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:08:A0:E5:0E:D2:76:B6:AE:11:A3:48:2B:C2:BB:D0:40:E5:9F:1A
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A45A0/BF31471256F011EAA6E98D42C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A45A0/BF31471256F011EAA6E98D42C4F9AE02/gwig5Q7SdrauEaNIK8K70EDlnxo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  139081

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.113.0/24
                  103.142.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:aa:9b:d8:1e:9a:3b:1a:d4:09:6c:ec:26:90:18:3b:88:51:
         c0:86:31:74:94:0b:10:5a:8a:14:c0:41:39:1d:3d:0d:a0:f9:
         d0:03:f5:c9:d2:b2:c4:d6:96:5f:16:3d:89:e7:e3:1d:9e:f5:
         95:66:09:f0:ce:af:75:42:84:10:7b:4c:b4:fd:26:56:d6:88:
         b6:52:a4:c7:a7:ae:4a:19:70:26:8c:04:20:fe:b3:10:7f:94:
         88:63:a9:02:c5:69:32:e9:38:1c:f2:60:e5:0d:cd:a6:7c:33:
         38:e1:ed:8a:b0:c5:b2:7b:75:11:6a:73:aa:db:20:40:ab:1e:
         35:f5:4e:bb:d2:a8:e7:20:4a:bc:bf:40:1e:3a:47:14:f9:38:
         35:33:77:11:fa:ca:1c:9e:81:06:fd:fb:58:4b:23:ef:a8:af:
         46:c9:f4:01:71:e4:7b:61:08:bf:4b:e6:5b:93:c8:22:3c:f0:
         19:a9:8d:65:6d:42:76:12:fc:17:b2:bb:6b:be:dd:57:21:f0:
         13:b1:d2:e5:4c:06:36:71:44:83:d8:ed:30:41:bc:ef:20:d0:
         0c:24:86:06:69:e0:11:c7:0a:39:80:78:23:d0:7f:42:9b:1c:
         86:d5:96:ed:34:1e:aa:b4:b4:4c:01:43:61:a6:b8:3e:f4:31:
         31:13:35:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:49:59 2024 by rpki-client on console-fra.rpki-client.org