Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnukzb-3xlg9SblHG83AaeSAZk0.cer
File:                     jnukzb-3xlg9SblHG83AaeSAZk0.cer (raw, json)
Hash identifier:          OLNDd3XaCSw/EDzGchRPS5Cfzj3wD32KCZzIW68UmvQ=
Subject key identifier:   8E:7B:A4:CD:BF:B7:C6:58:3D:49:B9:47:1B:CD:C0:69:E4:80:66:4D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01A991
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 12 Jun 2023 21:38:49 +0000
Certificate not after:    Sat 31 Aug 2024 00:00:00 +0000
Subordinate resources:    AS: 137847
                          IP: 103.115.136.0/22
                          IP: 2402:e8c0::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Apr 2024 13:06:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108945 (0x1a991)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun 12 21:38:49 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=A91F1610/serialNumber=8E7BA4CDBFB7C6583D49B9471BCDC069E480664D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:03:ba:d1:74:c9:d8:74:5b:79:04:36:90:21:
                    a8:94:c3:3a:24:f5:c3:74:b8:04:9f:0f:34:9b:d8:
                    fc:2e:b6:2d:af:56:68:56:eb:47:04:a6:21:5e:a4:
                    d8:d7:d2:61:f4:be:ec:1e:d8:05:e8:de:90:9a:f5:
                    7a:7a:03:4c:d4:32:53:5b:f4:16:e1:96:f9:71:74:
                    7f:ff:e1:be:32:65:3f:b2:77:5f:80:59:64:71:b7:
                    ee:00:b6:22:f7:5d:4f:de:ae:2b:cf:82:9a:30:43:
                    9e:9a:66:bf:bd:7c:7d:bc:a8:67:fb:8f:f8:91:42:
                    04:61:dd:37:18:5a:a9:67:fb:c8:c3:1e:a6:dc:53:
                    e9:c8:2c:86:b7:03:40:f7:90:4b:b3:5c:26:fb:6c:
                    3d:43:19:99:d0:99:66:1e:54:71:c5:55:dd:ed:ea:
                    5d:9a:7f:0d:12:37:cb:e3:68:c7:66:f2:3b:92:7e:
                    1e:61:cc:4d:00:9e:d9:78:4d:80:bb:02:9f:40:a3:
                    50:59:54:40:64:97:07:56:5f:2f:3d:1c:be:59:d0:
                    75:01:0d:01:94:79:e0:98:7c:db:d5:24:4c:5a:ad:
                    18:33:5d:16:96:5e:85:96:e4:89:f6:23:f3:56:6b:
                    9a:ac:e3:7b:53:05:98:a7:72:d6:cc:5f:28:bc:34:
                    71:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:7B:A4:CD:BF:B7:C6:58:3D:49:B9:47:1B:CD:C0:69:E4:80:66:4D
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137847

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.136.0/22
                IPv6:
                  2402:e8c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:c1:38:fe:eb:e5:61:f0:11:85:f7:b6:6c:a2:52:46:4a:a4:
         31:ae:97:77:08:d6:18:45:b5:78:d9:9b:c5:cb:30:a8:52:a8:
         2a:87:19:c9:b4:8c:2d:95:9d:77:5c:e7:d9:08:db:4c:c2:9a:
         cb:96:0d:53:b3:f3:de:2a:85:f5:c1:86:5a:49:c0:c9:df:79:
         17:5c:c8:23:64:eb:cd:2c:ad:ab:de:36:00:c5:bc:96:61:ec:
         a4:85:8f:a1:f2:a8:a6:a6:2b:16:80:58:96:b8:8a:3a:22:37:
         f3:33:49:65:24:c9:c5:29:f1:96:f1:3b:9e:b7:ed:e4:7e:49:
         5c:27:0e:94:0b:3c:09:17:08:9e:04:6d:7b:41:df:ea:c9:93:
         7c:bb:3d:6a:e4:31:0a:a8:96:41:e9:ff:a3:45:4d:56:b4:b2:
         56:bb:37:6d:7a:1c:25:48:44:02:0b:80:2c:05:1e:e1:e8:d7:
         d7:ad:9b:0f:3c:2c:63:10:40:d0:bb:a7:45:b4:d5:c0:3b:3e:
         fc:2f:06:d0:d5:b9:40:1a:ca:b6:34:9a:19:c0:c6:25:4b:bb:
         8f:12:ae:20:92:51:70:3b:9b:6b:86:35:7c:a4:9c:be:b5:cd:
         ee:14:da:83:9d:7c:e5:7c:02:bd:88:2a:7c:12:86:85:c6:d3:
         c1:88:d7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 14:08:08 2024 by rpki-client on console-fra.rpki-client.org