Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
File:                     jDzLT_uJGJxu9bNN_aq-GAalIYo.cer (raw, json)
Hash identifier:          59CvJgvkqPtr9FfFTte0FtLvZq8z820uIueNec2PaK8=
Subject key identifier:   8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01B415
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 01 Aug 2023 18:35:20 +0000
Certificate not after:    Thu 31 Oct 2024 00:00:00 +0000
Subordinate resources:    AS: 137969
                          AS: 141768
                          AS: 149628
                          IP: 39.109.66.0 -- 39.109.91.255
                          IP: 103.98.14.0/23
                          IP: 103.119.132.0/23
                          IP: 2403:e840::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Apr 2024 14:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111637 (0x1b415)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug  1 18:35:20 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=A9182502/serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:55:cf:17:3a:b0:4f:bd:6c:b2:b7:fb:25:c7:
                    6a:05:4d:db:41:8b:e4:74:ca:f1:94:e1:e3:73:de:
                    28:f2:b4:0c:ed:59:23:3b:21:63:78:74:95:92:35:
                    cc:4f:18:25:2c:cf:7c:4f:1f:35:fe:49:0a:5f:de:
                    b5:39:92:31:f3:35:69:81:1e:8a:8b:7f:03:74:dd:
                    e3:49:27:af:cb:7e:3a:fb:84:9a:65:b3:b7:53:63:
                    cc:c0:28:b9:56:d5:93:47:99:c8:c2:3d:91:e2:e4:
                    7d:db:06:c0:c7:0c:ce:43:e7:89:df:a3:42:59:7a:
                    ad:eb:a8:7f:fe:f3:c6:0b:bc:26:5e:c7:51:57:98:
                    f7:55:0b:0b:31:6b:dd:91:c8:90:9e:38:8c:b5:39:
                    5e:de:cc:c2:b4:de:76:57:83:b6:2c:54:8d:65:9f:
                    b6:6a:28:4e:7a:a8:2a:97:02:bb:c5:4c:b8:59:09:
                    11:69:7b:2c:91:fe:08:bd:45:5f:6a:be:56:7d:32:
                    d3:2e:69:10:5c:bc:e4:46:f1:f3:75:79:54:cf:58:
                    57:65:b1:ca:61:c5:25:60:35:4c:eb:ae:70:43:f4:
                    2f:a9:cd:5b:9c:63:82:8a:88:51:38:ea:23:28:1d:
                    09:33:71:14:22:91:3b:9f:92:3a:99:38:cc:44:5f:
                    5d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137969
                  141768
                  149628

            sbgp-ipAddrBlock: critical
                IPv4:
                  39.109.66.0-39.109.91.255
                  103.98.14.0/23
                  103.119.132.0/23
                IPv6:
                  2403:e840::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:dc:2b:ae:e2:49:ee:7c:4b:42:33:20:81:da:7b:86:4c:f4:
         a3:42:0e:6b:2f:80:e1:4f:bd:d9:a5:37:5b:b8:a4:63:34:df:
         ee:84:4d:1d:53:1a:63:81:8d:16:0d:87:10:9e:be:25:70:f9:
         12:72:8c:17:e9:11:92:23:e9:be:de:51:b4:5c:84:26:c4:f3:
         14:2e:3e:14:43:1b:15:5a:2b:94:86:4c:c5:f9:40:d6:81:db:
         86:a4:86:6f:35:aa:72:12:0c:e1:77:7e:38:1e:37:9c:49:f8:
         bd:4d:3b:d2:66:05:14:4f:7f:21:0d:f4:9d:11:d1:83:ed:e0:
         0b:68:90:b4:73:f2:d3:d0:13:8d:af:e4:3c:87:a7:d4:5d:37:
         96:a5:36:ed:d0:e3:58:05:90:76:a7:cf:e2:52:67:c9:cb:15:
         9e:c6:b1:3a:e7:a4:aa:61:32:83:bb:cf:a4:26:da:30:1c:18:
         14:93:ef:de:3a:93:1f:43:e7:c3:8c:25:d5:f3:35:4d:90:eb:
         ff:b6:10:93:96:b7:1e:50:60:77:57:5f:ba:8e:5c:e0:ea:5e:
         26:f0:8a:85:07:d5:19:04:22:4b:62:29:4e:62:4a:71:b2:46:
         8e:86:1b:55:b9:17:2f:ee:73:36:62:cf:2b:c3:16:79:7b:8f:
         f8:4c:54:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 15:35:58 2024 by rpki-client on console-fra.rpki-client.org