Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer
File:                     i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer (raw, json)
Hash identifier:          AVdBXEp18F7wJ4DIRmWbxoCWFsY4Z2hEnKY3+cnsfms=
Subject key identifier:   8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       021B58
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 14 Nov 2024 12:35:59 +0000
Certificate not after:    Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources:    AS: 138336
                          IP: 103.130.112.0/22
                          IP: 2403:b840::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138072 (0x21b58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov 14 12:35:59 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=A911C21E/serialNumber=8BE3874546E90BA83237179EE8932013B2D9F840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4d:13:d7:9a:62:1c:30:7e:3b:70:2c:bc:af:
                    e4:5f:a5:87:d1:48:e1:42:a0:43:24:6c:ef:a6:a7:
                    51:a7:18:bb:12:03:b6:39:83:24:f0:37:c1:73:a1:
                    46:5a:7e:1f:b3:55:a2:47:6c:6e:71:56:2c:9a:3b:
                    21:60:72:29:12:92:55:5b:a5:9e:bc:87:1b:94:1e:
                    5a:36:e4:a8:ef:51:a1:d4:3c:78:cb:ab:3d:f9:e4:
                    6d:bc:a1:74:1b:1c:48:0e:ae:25:6e:cc:ab:92:6c:
                    f4:4d:e7:99:0c:fc:89:c7:3d:91:a9:e1:cc:07:ce:
                    98:bd:f3:e8:4c:03:79:d5:33:6f:b1:5c:42:05:1a:
                    d4:1c:4f:30:c5:77:5f:a3:f5:c2:dd:bc:e1:b0:9b:
                    82:52:c8:ee:dc:6c:16:91:65:c1:98:74:cc:4e:69:
                    55:23:c3:5e:4b:a6:c8:00:c8:2b:79:bf:54:6a:79:
                    ab:3c:6f:9a:dc:43:8c:b3:e4:c4:df:ca:82:6e:bc:
                    d4:40:df:f2:9d:8b:2d:2d:4c:03:69:63:45:7a:23:
                    07:ec:45:17:8f:5a:11:8b:0d:e8:52:e2:64:aa:2a:
                    f4:10:71:81:12:fb:4e:db:b1:c2:ba:fc:fc:c2:8f:
                    64:14:19:36:64:2f:83:35:d9:00:24:ae:ab:32:ee:
                    32:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  138336

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.112.0/22
                IPv6:
                  2403:b840::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:4d:e1:2a:05:2c:cd:47:81:6a:dc:2d:eb:c3:97:ac:0a:c7:
         a1:07:cd:1a:ae:d6:25:62:d1:32:f7:b3:af:0b:09:fd:c5:d7:
         46:73:88:36:ff:ed:53:ed:51:53:d1:c9:f8:a4:eb:35:39:77:
         a7:53:5d:35:61:4c:cf:72:d0:b2:ca:2d:11:ac:e0:19:46:8d:
         af:0d:d5:b1:0c:3b:b2:57:2a:d9:84:68:3a:5d:90:7f:d1:de:
         55:d6:18:fc:9a:69:75:d8:b1:37:c7:57:3e:24:06:3e:28:9d:
         cd:95:b0:64:9d:35:98:48:10:7c:30:1a:ed:f4:97:cf:ec:b2:
         75:af:05:e6:96:84:56:c3:95:4d:ab:74:6f:f3:2e:c1:3c:48:
         a9:fb:28:d4:5c:d2:8b:51:e3:6a:e8:4e:dc:47:9f:9b:b8:26:
         05:c1:52:d9:ab:a1:6e:bc:bb:32:d8:3a:fa:d3:71:a0:fc:aa:
         c6:ed:ae:b8:13:6c:2e:c5:b0:ae:c7:42:14:07:45:bf:91:44:
         e3:f7:ef:c6:51:9f:d1:86:c1:b2:dd:03:c0:76:a5:19:c0:9c:
         d1:d6:a6:af:80:23:a2:05:05:c8:78:3c:36:8a:4b:70:e0:b0:
         4b:6c:65:5d:12:6e:c6:14:41:a5:1a:92:a1:c7:f8:b1:0e:15:
         fd:02:e7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----