Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hhe5_iqn_uIl8uDS3IdkCYE33m0.cer
File:                     hhe5_iqn_uIl8uDS3IdkCYE33m0.cer (raw, json)
Hash identifier:          LKoTrJORC6KzOpfcdI5rLbS2SVQ3nbDUAMuoqZ0+fLs=
Subject key identifier:   86:17:B9:FE:2A:A7:FE:E2:25:F2:E0:D2:DC:87:64:09:81:37:DE:6D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01C912
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 06 Nov 2023 12:33:15 +0000
Certificate not after:    Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources:    AS: 139701
                          IP: 103.143.211.0/24
                          IP: 103.144.195.0/24
                          IP: 2001:df1:9880::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Apr 2024 04:49:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117010 (0x1c912)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov  6 12:33:15 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=A9117715/serialNumber=8617B9FE2AA7FEE225F2E0D2DC8764098137DE6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d3:b0:81:5d:32:1c:6b:64:bf:ce:72:e5:44:
                    85:b3:32:6f:84:a9:e9:b7:fb:06:37:35:e5:dd:ad:
                    60:e9:47:c6:2a:f3:7c:08:41:70:8f:a9:3b:ed:53:
                    c2:da:96:73:c3:53:1a:89:f1:bb:3d:97:2c:b7:9a:
                    de:7b:0c:75:f3:da:d3:a3:2f:63:2f:34:17:f6:f2:
                    3a:fb:e7:19:d8:4f:8a:ae:7a:ce:8b:ff:97:96:b9:
                    c7:43:a5:4c:e1:7c:6b:01:ef:37:6c:c6:89:84:3b:
                    86:c6:53:e0:3d:88:ad:ed:0c:ea:0c:ab:f2:b2:93:
                    58:08:3a:56:76:7a:51:68:5a:49:54:ef:ab:8a:b4:
                    d5:4d:67:e8:fd:54:1f:62:85:71:6a:1a:39:6f:f5:
                    3f:cd:53:cf:63:10:e4:4e:fd:b6:d9:93:fd:db:08:
                    fc:82:dc:bc:52:3b:5c:8e:0f:1a:0a:15:9d:9e:ef:
                    c8:9f:ff:48:b5:ab:5b:b4:38:f3:b0:8d:9d:a6:fe:
                    9e:98:25:af:95:04:67:ce:88:90:d0:36:43:51:07:
                    de:17:c7:9f:29:d2:3c:a3:cb:d4:66:d2:90:60:9a:
                    06:6d:49:36:ae:f3:a3:51:1f:dd:46:a4:f6:e1:4e:
                    6f:be:12:6d:32:4e:7b:7d:13:49:cc:08:2d:17:04:
                    b9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:17:B9:FE:2A:A7:FE:E2:25:F2:E0:D2:DC:87:64:09:81:37:DE:6D
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  139701

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.211.0/24
                  103.144.195.0/24
                IPv6:
                  2001:df1:9880::/48

    Signature Algorithm: sha256WithRSAEncryption
         a7:53:12:17:f9:67:6c:75:56:7b:14:28:29:75:c8:e7:6a:83:
         2e:fd:72:83:37:be:60:a3:a4:5a:93:96:77:0d:f8:e9:10:da:
         d7:eb:73:d4:97:ad:f1:93:4f:16:23:36:fe:51:03:4f:bb:17:
         3b:6b:56:6b:b3:1c:dc:a1:f7:c2:9e:e0:67:14:50:33:ba:60:
         c6:1f:55:d6:53:06:8c:55:15:2a:90:f8:cd:04:8c:a3:3c:b3:
         09:ae:7d:8d:14:0e:2e:22:4f:f0:3a:9c:2d:0e:b7:3a:08:61:
         05:e7:52:5a:45:8f:65:7e:c9:23:26:2e:e7:a0:05:8f:92:1d:
         2f:f0:ea:8f:ca:46:66:aa:be:65:11:5e:e0:39:e6:41:38:a1:
         75:63:2b:c8:21:d8:a1:73:b1:89:4d:d7:ef:78:cc:b2:ec:d5:
         7a:0a:cc:90:33:3c:17:a4:0f:fe:e8:41:a8:8f:26:56:b1:db:
         a1:ff:c9:a8:5a:9c:dd:fc:dd:2c:e2:54:d2:d4:c7:d6:fe:c2:
         d8:2f:a0:43:b8:5c:ff:04:79:74:f3:14:fd:cb:2d:41:52:a3:
         e0:bd:04:6e:33:8e:ed:34:f2:ea:bc:84:d6:04:7b:3f:a0:97:
         56:71:ea:e8:36:1b:54:a1:1d:35:48:de:6a:d0:fb:24:07:d2:
         ab:5a:9e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 05:47:20 2024 by rpki-client on console-ams.rpki-client.org