Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5WP_-aW2AxXY2UkpG4YI0F2-8E.cer
File:                     l5WP_-aW2AxXY2UkpG4YI0F2-8E.cer (raw, json)
Hash identifier:          WZhfjst9lYDFIyJgJPMpO4bbkrjvFj+xsIw0o2sRYhI=
Subject key identifier:   97:95:8F:FF:E6:96:D8:0C:57:63:65:24:A4:6E:18:23:41:76:FB:C1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01E168
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 29 Feb 2024 13:43:06 +0000
Certificate not after:    Thu 01 May 2025 00:00:00 +0000
Subordinate resources:    AS: 149432
                          IP: 103.179.112.0/24
                          IP: 103.179.201.0/24
                          IP: 2001:df0:4bc0::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Apr 2024 04:49:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123240 (0x1e168)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb 29 13:43:06 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=A91309C9/serialNumber=97958FFFE696D80C57636524A46E18234176FBC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:db:0b:88:4c:ea:46:69:a5:34:64:c9:b0:b5:
                    57:96:73:be:a6:83:08:46:60:82:19:16:ee:db:bd:
                    b7:4c:da:94:51:5e:6a:df:fb:1e:de:d3:da:df:07:
                    a9:bc:d9:b0:42:4a:f1:fa:02:3c:4c:c5:da:29:1e:
                    92:64:74:1a:c0:8d:70:f8:57:14:d0:f7:41:0e:79:
                    0d:16:8a:8b:e7:96:be:18:8c:1d:29:8a:4c:8a:f1:
                    96:5d:10:d0:4a:86:a3:1b:85:bb:f7:ed:d1:e6:d5:
                    d9:f4:07:ab:09:91:e1:b4:51:74:be:b5:91:d6:35:
                    13:aa:e2:14:fd:a5:5b:be:78:1a:81:02:56:38:3d:
                    74:31:16:96:ad:ff:b4:48:e2:46:50:58:41:ef:de:
                    ab:ed:36:75:5c:76:38:e5:1b:ef:c4:eb:c1:e0:19:
                    1e:bc:99:74:e3:3c:ad:2a:2e:09:c8:71:01:53:cc:
                    5a:aa:98:4e:db:8d:a9:01:16:f0:8e:42:c9:fa:d6:
                    85:4c:be:ef:46:64:d0:fa:13:04:65:89:d0:8e:55:
                    7c:41:f3:05:13:a9:c6:0e:d0:c7:9b:25:c2:83:59:
                    a4:3a:4a:6f:e1:fb:e9:4a:38:b3:a1:5d:61:1b:81:
                    0c:a7:58:ba:58:29:d0:2c:d0:ed:50:ea:88:92:e0:
                    45:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:95:8F:FF:E6:96:D8:0C:57:63:65:24:A4:6E:18:23:41:76:FB:C1
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  149432

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.112.0/24
                  103.179.201.0/24
                IPv6:
                  2001:df0:4bc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:5c:a3:84:6b:75:04:92:05:6a:42:6c:4a:e3:ca:fb:d3:58:
         35:f5:30:09:1f:03:60:89:b8:ca:8b:e9:7e:01:0f:3d:58:77:
         2c:4b:71:98:04:ac:d4:99:5d:bd:39:aa:79:5e:52:b4:b7:de:
         00:90:b3:1d:73:e1:3d:55:14:50:f7:59:bd:fd:06:db:a2:52:
         64:19:eb:e9:0d:5f:92:23:fd:7e:7a:07:25:33:b2:37:14:42:
         cf:95:00:57:d4:1a:1e:26:62:65:95:a9:22:43:9c:26:b8:55:
         df:72:09:12:a0:61:0f:fc:27:4d:a9:de:19:77:d7:18:b6:8b:
         df:ca:3f:5b:a9:e8:ef:85:81:67:5a:9d:81:eb:c7:32:8c:55:
         47:2b:14:59:83:d5:bb:52:39:c3:c7:5a:37:b7:08:05:d7:2b:
         58:42:9c:c2:c6:c8:66:be:4d:e2:1b:f1:2e:7f:1d:ff:9f:a8:
         5a:9c:25:a9:f6:c2:20:c0:cb:da:aa:31:27:be:15:64:28:74:
         74:f2:3b:9f:8b:b4:06:06:99:15:bb:a1:5d:8a:00:3f:d3:c5:
         60:22:a8:aa:03:7a:5d:38:01:5f:5c:9c:66:1f:fd:ed:78:2c:
         47:e2:0c:a5:d0:ae:e1:73:ef:cb:61:b3:87:51:57:a8:d9:69:
         42:87:b4:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 06:02:36 2024 by rpki-client on console-fra.rpki-client.org