Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer
File:                     i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer (raw, json)
Hash identifier:          GJedG6yac+EnSmljWICVdV+3ElmWvBMnMIbVi020QHk=
Subject key identifier:   8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01CAED
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 14 Nov 2023 19:29:58 +0000
Certificate not after:    Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 138336
                          IP: 103.130.112.0/22
                          IP: 2403:b840::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 07:49:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117485 (0x1caed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov 14 19:29:58 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=A911C21E/serialNumber=8BE3874546E90BA83237179EE8932013B2D9F840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4d:13:d7:9a:62:1c:30:7e:3b:70:2c:bc:af:
                    e4:5f:a5:87:d1:48:e1:42:a0:43:24:6c:ef:a6:a7:
                    51:a7:18:bb:12:03:b6:39:83:24:f0:37:c1:73:a1:
                    46:5a:7e:1f:b3:55:a2:47:6c:6e:71:56:2c:9a:3b:
                    21:60:72:29:12:92:55:5b:a5:9e:bc:87:1b:94:1e:
                    5a:36:e4:a8:ef:51:a1:d4:3c:78:cb:ab:3d:f9:e4:
                    6d:bc:a1:74:1b:1c:48:0e:ae:25:6e:cc:ab:92:6c:
                    f4:4d:e7:99:0c:fc:89:c7:3d:91:a9:e1:cc:07:ce:
                    98:bd:f3:e8:4c:03:79:d5:33:6f:b1:5c:42:05:1a:
                    d4:1c:4f:30:c5:77:5f:a3:f5:c2:dd:bc:e1:b0:9b:
                    82:52:c8:ee:dc:6c:16:91:65:c1:98:74:cc:4e:69:
                    55:23:c3:5e:4b:a6:c8:00:c8:2b:79:bf:54:6a:79:
                    ab:3c:6f:9a:dc:43:8c:b3:e4:c4:df:ca:82:6e:bc:
                    d4:40:df:f2:9d:8b:2d:2d:4c:03:69:63:45:7a:23:
                    07:ec:45:17:8f:5a:11:8b:0d:e8:52:e2:64:aa:2a:
                    f4:10:71:81:12:fb:4e:db:b1:c2:ba:fc:fc:c2:8f:
                    64:14:19:36:64:2f:83:35:d9:00:24:ae:ab:32:ee:
                    32:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  138336

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.112.0/22
                IPv6:
                  2403:b840::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:55:03:ec:8d:1f:25:d6:9a:e0:f6:67:1c:4e:3b:f1:7a:11:
         f7:d6:a7:14:b8:31:15:62:9a:fa:35:0d:65:8a:4b:50:c4:99:
         f2:ea:19:79:ad:e1:b2:33:c1:e5:09:03:92:18:fe:35:b0:78:
         ee:10:76:96:36:53:ed:f8:47:3b:7a:11:bc:db:fa:7c:1d:5f:
         a5:80:56:0d:22:34:bb:62:29:c7:39:40:b6:81:79:78:1d:8e:
         4f:61:ca:58:f7:8d:90:0b:95:81:f4:5d:2d:9e:13:f4:8c:be:
         75:fc:ba:e6:9a:61:1e:97:8e:0d:2f:52:84:ac:70:96:09:ba:
         b7:c6:6f:4d:c1:ab:f4:da:6c:f9:c2:4f:82:95:dc:31:78:5d:
         74:3e:a2:9f:20:59:5f:62:c3:6f:c7:c0:20:7c:e2:3e:72:cd:
         19:12:37:20:13:16:9e:c4:fa:7f:29:53:39:13:ed:f7:42:7c:
         07:8e:c4:e2:b6:c8:86:85:fb:fd:03:16:68:97:69:e4:ad:a0:
         cf:ec:d4:41:88:f7:50:80:bc:cb:ff:49:5e:47:83:d9:fc:0b:
         2f:ba:34:e2:e7:37:59:13:9a:25:b2:31:0e:92:f8:2a:12:08:
         13:89:11:b3:70:ac:c7:2e:6a:02:ff:53:51:64:c6:93:49:b1:
         59:f1:5f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----