Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyYWhr2S4s9r9UjNNVlt6pX_WDM.cer
File:                     iyYWhr2S4s9r9UjNNVlt6pX_WDM.cer (raw, json)
Hash identifier:          37f7IwphBjR20UV4nnGlp0HgbU0ELMa2CDOPqQWY9Os=
Subject key identifier:   8B:26:16:86:BD:92:E2:CF:6B:F5:48:CD:35:59:6D:EA:95:FF:58:33
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01A79E
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 02 Jun 2023 04:34:41 +0000
Certificate not after:    Sat 31 Aug 2024 00:00:00 +0000
Subordinate resources:    AS: 63992
                          IP: 103.58.220.0/22
                          IP: 103.254.4.0 -- 103.254.6.255
                          IP: 2402:6b80::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Apr 2024 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108446 (0x1a79e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun  2 04:34:41 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=A91D3078/serialNumber=8B261686BD92E2CF6BF548CD35596DEA95FF5833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0b:dd:27:bf:85:b2:74:29:0d:9e:5b:8b:6f:
                    1d:39:71:42:56:0b:a3:a9:bd:c9:c4:7e:8c:3d:19:
                    87:81:6a:de:29:01:55:6f:eb:bc:da:d7:ad:5f:98:
                    a2:73:66:ef:e1:76:fc:8c:92:87:68:22:2d:a9:03:
                    c7:a8:1e:0b:62:52:97:93:f6:3e:a6:59:94:1b:ff:
                    db:a7:c4:0c:08:ef:c2:bb:fd:f4:e5:f4:2b:6c:6f:
                    11:6c:09:0c:89:d3:68:02:24:0d:44:75:c9:38:41:
                    82:fd:81:1e:ae:08:cd:c9:36:10:8b:42:65:c1:7b:
                    92:c6:81:b8:83:69:77:6f:d2:87:65:92:96:e8:28:
                    b4:e3:40:a9:05:f5:98:68:ec:b4:ba:b1:c6:c7:ef:
                    32:90:f1:3f:80:26:e9:73:c0:1f:5f:a8:6f:68:36:
                    9b:10:7f:74:9d:2b:6a:69:7e:41:99:fe:46:3b:03:
                    a0:6e:b7:12:61:32:0f:cc:a5:a7:41:fd:de:d6:d7:
                    50:50:9b:4a:a8:ff:7f:c2:a4:5a:7f:b2:e3:25:19:
                    7b:d3:3d:35:71:d0:12:11:16:62:47:9e:2a:09:66:
                    7c:93:17:7d:d9:84:db:7c:cf:1d:59:1e:c3:e3:62:
                    a6:2f:50:7f:c5:a3:b9:84:bf:fa:42:04:80:fb:96:
                    0f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:26:16:86:BD:92:E2:CF:6B:F5:48:CD:35:59:6D:EA:95:FF:58:33
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  63992

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.58.220.0/22
                  103.254.4.0-103.254.6.255
                IPv6:
                  2402:6b80::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:00:0e:14:ac:7a:27:39:3c:75:4d:96:37:5c:8f:ee:c6:96:
         cc:89:4c:ca:80:ab:2d:39:53:85:96:6b:0b:5b:88:89:97:4e:
         30:df:91:22:71:68:db:e8:6d:75:1a:dd:d7:4d:11:e5:f4:a8:
         1e:63:e8:7d:97:d9:a3:ba:11:60:1d:25:c3:07:98:8c:9c:30:
         bb:1a:1f:a4:b8:17:58:7e:3a:f7:85:e9:c6:2a:d0:64:bf:df:
         26:c3:79:74:01:4d:cd:2e:b4:73:6b:83:d0:0b:39:ec:e7:9b:
         d1:8f:4c:1a:ec:9e:c6:f0:71:0c:08:7b:a7:fa:76:94:0a:6c:
         d6:42:e7:09:38:30:e4:25:c8:67:bd:24:9e:f7:ae:4e:5c:ef:
         f1:c7:e4:7c:1c:96:d5:ef:b1:6e:63:e1:a3:78:d3:fc:6a:f7:
         f2:cc:87:fb:20:99:ac:da:e5:cc:c3:0a:5e:59:6f:7a:9a:c3:
         65:9c:cf:30:28:36:74:2e:2a:bd:3f:07:bd:d4:8b:a3:fd:e2:
         35:78:73:96:54:ec:3e:10:e9:6e:80:aa:f3:b2:2b:7d:c1:a2:
         50:a6:c3:68:9d:22:90:08:89:22:00:e0:7e:49:4a:fc:69:b6:
         d9:da:35:8b:ef:95:22:07:f2:0e:72:03:ba:43:b4:8e:6a:c2:
         e6:4c:1b:93
-----BEGIN CERTIFICATE-----
MIIGNzCCBR+gAwIBAgIDAaeeMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMDYwMjA0MzQ0MVoXDTI0MDgzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRDMwNzgxMTAvBgNVBAUTKDhCMjYxNjg2QkQ5MkUyQ0Y2QkY1NDhD
RDM1NTk2REVBOTVGRjU4MzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC9C90nv4WydCkNnluLbx05cUJWC6OpvcnEfow9GYeBat4pAVVv67za161fmKJz
Zu/hdvyMkodoIi2pA8eoHgtiUpeT9j6mWZQb/9unxAwI78K7/fTl9CtsbxFsCQyJ
02gCJA1Edck4QYL9gR6uCM3JNhCLQmXBe5LGgbiDaXdv0odlkpboKLTjQKkF9Zho
7LS6scbH7zKQ8T+AJulzwB9fqG9oNpsQf3SdK2ppfkGZ/kY7A6ButxJhMg/MpadB
/d7W11BQm0qo/3/CpFp/suMlGXvTPTVx0BIRFmJHnioJZnyTF33ZhNt8zx1ZHsPj
YqYvUH/Fo7mEv/pCBID7lg9NAgMBAAGjggMsMIIDKDAdBgNVHQ4EFgQUiyYWhr2S
4s9r9UjNNVlt6pX/WDMwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUQzMDc4LzY2QzgzMDJDMTNCQzExRTk5ODdDNDY0NkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFEMzA3OC82NkM4MzAyQzEzQkMxMUU5OTg3QzQ2NDZDNEY5QUUwMi9peVlXaHIy
UzRzOXI5VWpOTlZsdDZwWF9XRE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAPn4MDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUAwQCZzrcMAwDBAJn
/gQDBABn/gYwDQQCAAIwBwMFACQCa4AwDQYJKoZIhvcNAQELBQADggEBACoADhSs
eic5PHVNljdcj+7GlsyJTMqAqy05U4WWawtbiImXTjDfkSJxaNvobXUa3ddNEeX0
qB5j6H2X2aO6EWAdJcMHmIycMLsaH6S4F1h+OveF6cYq0GS/3ybDeXQBTc0utHNr
g9ALOeznm9GPTBrsnsbwcQwIe6f6dpQKbNZC5wk4MOQlyGe9JJ73rk5c7/HH5Hwc
ltXvsW5j4aN40/xq9/LMh/sgmaza5czDCl5Zb3qaw2WczzAoNnQuKr0/B73Ui6P9
4jV4c5ZU7D4Q6W6AqvOyK33BolCmw2idIpAIiSIA4H5JSvxpttnaNYvvlSIH8g5y
A7pDtI5qwuZMG5M=
-----END CERTIFICATE-----
Generated at Fri Mar 29 00:00:53 2024 by rpki-client on console-fra.rpki-client.org