Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-dhjM_iZIDXknoYcbrYP--d9IQ.cer
File:                     k-dhjM_iZIDXknoYcbrYP--d9IQ.cer (raw, json)
Hash identifier:          Vda/CzsjvQstNS+UD/uQBfruiVNIsu8nHaF5ld85OPo=
Subject key identifier:   93:E7:61:8C:CF:E2:64:80:D7:92:7A:18:71:BA:D8:3F:EF:9D:F4:84
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01BFC9
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 26 Sep 2023 15:58:27 +0000
Certificate not after:    Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 38800
                          IP: 103.154.194.0/23
                          IP: 182.50.168.0/22
                          IP: 202.87.208.0/22
                          IP: 203.99.156.0/22
                          IP: 2402:ae80::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 07:49:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114633 (0x1bfc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep 26 15:58:27 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=A915F438/serialNumber=93E7618CCFE26480D7927A1871BAD83FEF9DF484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:52:94:a9:4d:fd:4a:40:fc:a8:0a:9d:38:bd:
                    d4:00:d2:07:10:f2:c6:7f:61:4c:34:c5:d3:36:f4:
                    cf:39:a7:4a:fa:34:7c:54:7c:da:4f:95:68:11:a8:
                    5a:d2:65:28:09:ad:56:c6:9a:18:0f:24:e7:06:e6:
                    32:22:27:77:e8:c2:e8:65:74:a7:68:e2:69:42:b4:
                    89:56:73:91:8c:b8:8a:d2:96:1c:77:1c:c3:57:c3:
                    88:dc:8d:6e:62:5a:85:7e:ca:62:ba:93:18:59:42:
                    b0:e4:ff:3c:4d:3e:f5:76:8f:c5:d3:d2:e5:0d:3c:
                    41:78:6d:a5:1a:0e:ef:48:19:f9:6c:52:cd:a0:e7:
                    05:ac:67:91:6a:0a:00:3f:94:62:e4:52:6f:8c:d8:
                    1c:10:d8:76:c6:d1:df:33:6c:02:92:dd:38:e8:0c:
                    b9:58:24:0d:61:af:e4:53:e0:88:94:a2:51:39:a6:
                    ff:1a:ce:fb:92:f8:82:d6:1e:49:ef:f2:ea:26:9a:
                    2d:75:29:84:15:19:83:02:06:a3:90:02:e9:d4:d9:
                    72:6e:bf:c9:92:9c:4b:b2:f9:e1:29:b9:53:ce:3e:
                    ac:dc:27:ae:bf:4a:03:6b:3c:04:e9:9c:84:09:a8:
                    42:9d:73:79:7e:07:e9:1b:36:14:52:c6:33:43:82:
                    82:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E7:61:8C:CF:E2:64:80:D7:92:7A:18:71:BA:D8:3F:EF:9D:F4:84
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  38800

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.194.0/23
                  182.50.168.0/22
                  202.87.208.0/22
                  203.99.156.0/22
                IPv6:
                  2402:ae80::/32

    Signature Algorithm: sha256WithRSAEncryption
         bc:7c:3f:0e:ab:3b:dc:fe:a7:e2:61:8c:61:10:a6:a5:77:f8:
         63:9b:a2:4c:fe:32:bb:c2:0d:2c:18:85:32:03:57:aa:98:c4:
         1d:f5:b7:74:cf:ad:92:54:ff:cd:87:e2:41:e1:2c:3e:0e:85:
         e2:f8:cb:cb:77:65:74:d6:36:dd:67:f0:f3:99:67:3a:ac:b7:
         7b:39:66:44:18:dd:b7:0d:c1:83:e7:4c:75:5d:8a:6d:8c:72:
         90:75:cb:c4:58:77:b3:1d:03:fb:cc:06:b8:a1:9f:5f:20:68:
         2e:0f:b2:64:41:00:80:0a:06:0a:4f:68:99:45:03:06:60:18:
         ff:e2:ea:9a:75:9c:92:80:08:16:a2:be:13:01:70:41:9b:a1:
         27:4f:db:54:27:fc:2a:b0:ce:7a:09:dd:a9:96:95:a5:6a:ab:
         f5:2f:97:a0:71:db:99:11:b0:a7:4c:b4:43:3a:22:9e:0d:11:
         22:d4:91:04:0f:20:43:99:c9:92:c5:ab:5a:a1:9d:86:e5:c8:
         86:e4:2a:0c:20:c4:ae:9f:63:50:08:df:65:cd:0a:e3:7a:52:
         8b:36:64:29:42:8f:03:64:f5:fd:af:33:31:d7:3d:9e:ce:f4:
         a9:de:c1:e0:a8:c5:4a:f0:0f:c1:0f:ba:f2:ce:c6:c0:20:e3:
         0b:07:c0:21
-----BEGIN CERTIFICATE-----
MIIGOzCCBSOgAwIBAgIDAb/JMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMDkyNjE1NTgyN1oXDTI0MTIwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNUY0MzgxMTAvBgNVBAUTKDkzRTc2MThDQ0ZFMjY0ODBENzkyN0Ex
ODcxQkFEODNGRUY5REY0ODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDaUpSpTf1KQPyoCp04vdQA0gcQ8sZ/YUw0xdM29M85p0r6NHxUfNpPlWgRqFrS
ZSgJrVbGmhgPJOcG5jIiJ3fowuhldKdo4mlCtIlWc5GMuIrSlhx3HMNXw4jcjW5i
WoV+ymK6kxhZQrDk/zxNPvV2j8XT0uUNPEF4baUaDu9IGflsUs2g5wWsZ5FqCgA/
lGLkUm+M2BwQ2HbG0d8zbAKS3TjoDLlYJA1hr+RT4IiUolE5pv8azvuS+ILWHknv
8uommi11KYQVGYMCBqOQAunU2XJuv8mSnEuy+eEpuVPOPqzcJ66/SgNrPATpnIQJ
qEKdc3l+B+kbNhRSxjNDgoKxAgMBAAGjggMwMIIDLDAdBgNVHQ4EFgQUk+dhjM/i
ZIDXknoYcbrYP++d9IQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTVGNDM4L0I3RUY1M0ZFMkI0RTExRTVBQ0JCREYzQUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE1RjQzOC9CN0VGNTNGRTJCNEUxMUU1QUNCQkRGM0FDNEY5QUUwMi9rLWRoak1f
aVpJRFhrbm9ZY2JyWVAtLWQ5SVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAJeQMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQBZ5rCAwQCtjKo
AwQCylfQAwQCy2OcMA0EAgACMAcDBQAkAq6AMA0GCSqGSIb3DQEBCwUAA4IBAQC8
fD8Oqzvc/qfiYYxhEKald/hjm6JM/jK7wg0sGIUyA1eqmMQd9bd0z62SVP/Nh+JB
4Sw+DoXi+MvLd2V01jbdZ/DzmWc6rLd7OWZEGN23DcGD50x1XYptjHKQdcvEWHez
HQP7zAa4oZ9fIGguD7JkQQCACgYKT2iZRQMGYBj/4uqadZySgAgWor4TAXBBm6En
T9tUJ/wqsM56Cd2plpWlaqv1L5egcduZEbCnTLRDOiKeDREi1JEEDyBDmcmSxata
oZ2G5ciG5CoMIMSun2NQCN9lzQrjelKLNmQpQo8DZPX9rzMx1z2ezvSp3sHgqMVK
8A/BD7ryzsbAIOMLB8Ah
-----END CERTIFICATE-----
Generated at Fri Apr 26 11:03:07 2024 by rpki-client on console-ams.rpki-client.org