Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer
File:                     kl2pi04IXWgNFte6GD8OpUJqGgM.cer (raw, json)
Hash identifier:          FH/XTsv4/OdkUvBoepbYZV6RFo0EmCPIL70tAtvue6A=
Subject key identifier:   92:5D:A9:8B:4E:08:5D:68:0D:16:D7:BA:18:3F:0E:A5:42:6A:1A:03
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01C22C
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 05 Oct 2023 02:40:16 +0000
Certificate not after:    Sat 31 Aug 2024 00:00:00 +0000
Subordinate resources:    AS: 140344
                          IP: 103.230.56.0/22
                          IP: 2401:41a0::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Apr 2024 19:33:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115244 (0x1c22c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct  5 02:40:16 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=A9112320/serialNumber=925DA98B4E085D680D16D7BA183F0EA5426A1A03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:97:7e:28:d0:a6:b5:dc:d7:51:7d:d0:a3:57:
                    ba:82:54:d2:f1:15:4f:1f:18:01:84:01:63:d5:f4:
                    fb:a9:ca:06:a8:6b:2c:b9:0f:cb:ac:cf:a1:59:78:
                    7e:f1:97:c2:47:ce:f7:2c:2c:2e:2f:8f:6e:e0:50:
                    cf:d5:fc:29:bc:66:56:a1:a2:f5:fd:c2:33:83:11:
                    6a:d9:0f:a2:51:9e:04:bb:5f:50:61:0a:f8:e3:3b:
                    16:2d:62:f0:15:b2:d9:41:46:f6:64:54:1a:31:30:
                    50:da:68:ea:4b:25:17:9e:8c:3f:0e:7a:cc:6e:b1:
                    ba:9f:ae:d5:b6:7c:37:20:82:39:58:cd:d1:94:59:
                    a7:dd:44:d1:b6:e9:af:eb:a3:85:4f:b2:8e:dc:18:
                    ab:29:d4:80:9b:78:9d:ea:c8:d4:00:9c:21:bc:98:
                    df:6f:6c:e6:8a:e1:16:55:59:5e:24:43:93:c7:4a:
                    83:6f:61:33:f2:02:39:ac:0e:b3:e2:6e:81:70:6b:
                    e1:6d:09:3f:f8:57:dd:e6:74:01:66:70:e8:3e:99:
                    5d:3d:bf:bd:75:0e:f1:b4:14:fd:3c:f1:15:46:89:
                    07:02:07:66:86:72:9c:15:6d:44:bb:f5:b2:0a:8b:
                    94:73:7b:68:12:d3:ff:bd:11:7b:2b:2f:1c:3c:4e:
                    bc:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:5D:A9:8B:4E:08:5D:68:0D:16:D7:BA:18:3F:0E:A5:42:6A:1A:03
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  140344

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.230.56.0/22
                IPv6:
                  2401:41a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:82:ab:95:15:5b:a7:b5:73:15:ae:00:28:be:ff:3d:18:82:
         49:2e:ae:5b:73:69:0d:a6:9b:02:2a:9b:c8:b1:6e:52:44:cf:
         d9:29:fd:8a:c0:16:90:ae:34:a5:a5:bf:9c:32:1a:f0:ea:f1:
         54:6b:ae:b3:83:9b:61:ec:1e:ae:d1:30:17:bb:39:3e:03:b5:
         e1:a9:21:ce:7e:54:ed:46:38:2f:77:ae:72:fa:48:c4:e1:b1:
         af:c0:5f:b6:dd:9d:2a:d4:ed:a0:d1:7a:ff:3d:96:fe:3c:38:
         ec:9c:20:9e:ee:4d:f2:3c:a3:99:1f:1e:16:59:87:cd:c2:d8:
         45:ac:9d:25:93:7c:30:25:72:da:a9:a7:df:ba:98:a2:7c:fa:
         ac:81:e8:90:7f:0d:77:ff:8c:da:02:6c:af:bb:23:04:db:6f:
         6e:77:70:91:b9:e3:0c:de:40:73:ea:f6:cf:fe:c3:0f:fd:b2:
         a5:58:1b:09:6e:bf:c4:e9:81:34:57:d4:24:e7:59:45:4e:a0:
         94:64:1a:69:7d:14:86:c2:cd:c5:fe:ed:ad:78:af:7a:3b:3f:
         7d:6e:e7:2c:56:e7:c0:31:e7:b7:18:a3:0f:5c:92:60:db:2c:
         89:df:0a:a5:2a:2a:9c:56:93:dd:db:9f:d0:44:de:e9:86:d2:
         3b:d2:e8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 20:35:26 2024 by rpki-client on console-ams.rpki-client.org