Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iOe1QfQimNbptRZdllJGzBzB9aI.cer
File:                     iOe1QfQimNbptRZdllJGzBzB9aI.cer (raw, json)
Hash identifier:          cqFzBcb7x5i6Q5CDXEGClKb5fVXIscb0nq0lg4bvRIM=
Subject key identifier:   88:E7:B5:41:F4:22:98:D6:E9:B5:16:5D:96:52:46:CC:1C:C1:F5:A2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01E086
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sat 24 Feb 2024 17:25:50 +0000
Certificate not after:    Thu 01 May 2025 00:00:00 +0000
Subordinate resources:    AS: 138575
                          IP: 103.133.140.0/22
                          IP: 2404:4d40::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Apr 2024 12:49:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123014 (0x1e086)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb 24 17:25:50 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=A91A9D0F/serialNumber=88E7B541F42298D6E9B5165D965246CC1CC1F5A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ee:33:ed:59:7b:50:8a:19:f5:73:77:ec:2d:
                    29:d1:bd:ad:6c:e7:e5:55:e8:d0:86:f9:eb:17:47:
                    70:3e:17:6e:b3:97:13:8e:40:f0:e4:2e:bc:83:37:
                    24:a1:2b:90:f7:e7:e0:2d:07:31:a5:f0:f6:d1:dc:
                    dd:46:58:38:ce:44:69:6a:39:ab:01:9f:9e:91:aa:
                    0d:bb:01:8e:10:77:7d:0a:97:0a:09:b0:48:c8:e3:
                    89:d3:5c:1a:01:dc:79:74:f5:9d:a2:ef:f5:cd:74:
                    85:91:c0:76:62:c6:92:53:81:ef:d1:f1:7d:27:cc:
                    82:c1:76:8a:0b:36:10:dd:8c:e4:81:f6:e3:68:da:
                    cf:65:82:79:d6:30:35:53:5d:e7:97:30:eb:17:22:
                    1c:4a:cb:f1:8b:0d:2b:30:37:81:d4:67:cd:78:4a:
                    fb:f2:08:ec:5d:fb:e4:30:a6:ae:aa:b1:59:4b:ec:
                    ea:6c:85:c3:62:13:c7:6c:0e:28:69:9d:a9:98:99:
                    aa:2a:73:e3:c9:83:92:6d:da:d7:d3:ef:14:f4:38:
                    b2:eb:8a:ba:70:a6:6a:2b:65:ed:a6:ed:92:a7:23:
                    46:ce:05:7a:fd:70:16:f4:ae:09:1e:97:17:44:04:
                    cd:ca:2c:98:22:9d:44:a2:54:c0:33:68:e7:0a:85:
                    16:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:E7:B5:41:F4:22:98:D6:E9:B5:16:5D:96:52:46:CC:1C:C1:F5:A2
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  138575

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.133.140.0/22
                IPv6:
                  2404:4d40::/32

    Signature Algorithm: sha256WithRSAEncryption
         c6:10:51:0a:0e:0e:c8:e6:50:22:5b:a8:26:9b:58:a1:82:c9:
         8d:da:f0:8e:9a:9a:ca:79:fa:16:bf:d9:85:11:78:c9:09:80:
         22:cb:9b:12:ef:3b:a0:9e:b0:e5:89:ac:c6:fa:57:01:a4:7a:
         96:26:01:bc:56:ab:22:0c:e6:68:1c:92:8f:ac:07:6e:64:f3:
         e1:3b:15:34:cc:49:9e:f0:34:11:76:a0:8c:cd:34:71:25:2c:
         4b:8b:c8:ea:68:70:1c:6a:16:93:a0:67:d3:42:13:53:18:bb:
         95:44:5c:f3:c4:20:2b:da:19:e7:a8:b0:ca:d9:7c:b4:17:95:
         05:11:9e:35:dc:f0:47:65:79:63:77:e1:29:39:6b:2c:e3:5b:
         d6:a1:f3:71:6a:18:fc:95:9c:47:37:27:60:fa:1a:c9:04:94:
         32:01:b9:09:3e:d5:b1:06:ae:f3:0f:40:8c:d2:6c:c5:21:f7:
         e6:1f:53:ef:fc:d9:72:90:e2:9f:1f:6a:9e:50:37:6d:ef:1a:
         9d:e4:d2:ec:ed:55:47:10:3c:85:b4:2a:92:95:93:17:69:ba:
         7b:27:d4:f4:96:7f:ae:be:03:19:dd:bc:5d:17:e1:22:29:10:
         65:23:2a:6a:47:88:d3:52:52:b8:47:6c:08:26:84:00:25:24:
         bb:46:70:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 13:45:20 2024 by rpki-client on console-ams.rpki-client.org