Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ld96gQDZeVNoc6wP-Z9uRyhSupk.cer
File:                     ld96gQDZeVNoc6wP-Z9uRyhSupk.cer (raw, json)
Hash identifier:          7i/5u8zSI1k52NFx0jmY1mH+FOEuWbG0nSScNlSK+W8=
Subject key identifier:   95:DF:7A:81:00:D9:79:53:68:73:AC:0F:F9:9F:6E:47:28:52:BA:99
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01E0AD
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 26 Feb 2024 17:16:43 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 141473
                          IP: 103.159.188.0/23
                          IP: 2406:d9c0::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Dec 2024 01:13:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123053 (0x1e0ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb 26 17:16:43 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=A91987D0/serialNumber=95DF7A8100D979536873AC0FF99F6E472852BA99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:65:1e:50:a0:04:00:01:7a:db:55:c9:01:54:
                    1c:e5:19:34:5b:28:c2:4d:c1:37:4c:43:d1:1b:75:
                    1d:15:cf:c7:e0:e4:ad:40:64:e2:b8:4f:b2:28:2b:
                    c6:00:38:24:1b:96:bf:1d:f4:9c:70:11:cb:5e:86:
                    93:f5:df:aa:ee:62:01:90:4f:e1:c4:d6:66:c9:02:
                    af:53:1a:64:70:49:99:b7:2f:ec:94:d1:ff:4b:ce:
                    d2:cf:ee:45:8f:b0:4f:c6:22:c6:78:ce:a7:94:3d:
                    1f:c0:8e:ac:6e:df:a6:2d:b2:47:1e:fa:c8:3b:18:
                    a2:ba:c2:e0:8a:93:cd:ea:2e:16:89:ec:d2:73:37:
                    74:12:7a:68:66:28:80:4c:d1:0c:00:6a:e5:ee:b7:
                    11:aa:cc:07:91:4c:e8:d7:ac:28:c9:5d:4b:0e:8d:
                    c4:8d:d2:e9:ba:f8:ff:ed:08:d7:ba:fc:ca:c8:c8:
                    02:4a:d0:fa:75:ee:5b:e0:e7:87:d4:17:5f:73:f5:
                    eb:8b:14:c1:4f:71:01:8b:2f:17:28:93:0f:b0:b4:
                    2a:41:5e:e2:09:97:ce:ac:2a:82:63:fd:cf:97:36:
                    1f:3f:ed:4c:a2:fc:e9:45:da:c5:4d:43:74:b2:a2:
                    9e:92:4c:f7:46:3e:86:45:df:17:43:19:cd:25:b4:
                    2c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:DF:7A:81:00:D9:79:53:68:73:AC:0F:F9:9F:6E:47:28:52:BA:99
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  141473

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.188.0/23
                IPv6:
                  2406:d9c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:39:40:5e:20:80:db:6f:10:5b:a7:8e:b7:30:15:0e:bf:b7:
         75:9e:18:a5:b8:17:42:41:e5:b2:18:22:ff:96:52:32:08:92:
         fb:b1:35:f3:6f:8e:ea:90:c2:33:93:36:60:18:31:8c:78:e6:
         67:5d:c6:f5:d3:b9:67:38:d7:71:a2:c0:36:60:74:42:9a:eb:
         59:62:07:93:24:fa:37:68:d4:aa:3b:7c:7d:68:f0:8b:f5:e5:
         0c:f0:24:1a:09:0a:6a:0c:eb:b6:cf:f0:81:ed:3e:fd:4d:8e:
         e0:d8:c1:10:2f:6b:2f:c0:94:ca:4d:7a:48:63:6d:91:4e:02:
         c6:5c:94:e0:8f:ec:7e:5d:26:5c:c7:b1:b8:59:61:8d:be:0f:
         ae:5c:77:c3:96:f2:35:dd:07:4e:9a:fb:61:22:6a:55:09:7c:
         97:37:5c:e6:3f:bd:51:b3:c2:10:bc:2e:da:f5:a0:63:16:78:
         34:8b:93:d4:f1:fe:6a:c3:87:d3:b0:fd:14:cb:7e:32:7c:9f:
         80:85:f3:29:d7:54:28:8b:06:a0:6d:f8:07:29:ff:6e:d1:e9:
         bf:71:97:87:f4:a9:7b:76:20:92:5b:c1:c6:f3:7a:93:ec:37:
         08:27:2f:3e:6b:95:16:2d:e9:f3:18:6b:a1:e4:d4:11:59:b1:
         93:b8:95:40
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAeCtMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDIyNjE3MTY0M1oXDTI1MDMzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxOTg3RDAxMTAvBgNVBAUTKDk1REY3QTgxMDBEOTc5NTM2ODczQUMw
RkY5OUY2RTQ3Mjg1MkJBOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDZZR5QoAQAAXrbVckBVBzlGTRbKMJNwTdMQ9EbdR0Vz8fg5K1AZOK4T7IoK8YA
OCQblr8d9JxwEctehpP136ruYgGQT+HE1mbJAq9TGmRwSZm3L+yU0f9LztLP7kWP
sE/GIsZ4zqeUPR/Ajqxu36Ytskce+sg7GKK6wuCKk83qLhaJ7NJzN3QSemhmKIBM
0QwAauXutxGqzAeRTOjXrCjJXUsOjcSN0um6+P/tCNe6/MrIyAJK0Pp17lvg54fU
F19z9euLFMFPcQGLLxcokw+wtCpBXuIJl86sKoJj/c+XNh8/7Uyi/OlF2sVNQ3Sy
op6STPdGPoZF3xdDGc0ltCxfAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUld96gQDZ
eVNoc6wP+Z9uRyhSupkwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTk4N0QwLzE4RUIwNzUyNDJCRTExRUJCQzFGRUMxRkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE5ODdEMC8xOEVCMDc1MjQyQkUxMUVCQkMxRkVDMUZDNEY5QUUwMi9sZDk2Z1FE
WmVWTm9jNndQLVo5dVJ5aFN1cGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAiihMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZ5+8MA0EAgAC
MAcDBQAkBtnAMA0GCSqGSIb3DQEBCwUAA4IBAQBwOUBeIIDbbxBbp463MBUOv7d1
nhiluBdCQeWyGCL/llIyCJL7sTXzb47qkMIzkzZgGDGMeOZnXcb107lnONdxosA2
YHRCmutZYgeTJPo3aNSqO3x9aPCL9eUM8CQaCQpqDOu2z/CB7T79TY7g2MEQL2sv
wJTKTXpIY22RTgLGXJTgj+x+XSZcx7G4WWGNvg+uXHfDlvI13QdOmvthImpVCXyX
N1zmP71Rs8IQvC7a9aBjFng0i5PU8f5qw4fTsP0Uy34yfJ+AhfMp11QoiwagbfgH
Kf9u0em/cZeH9Kl7diCSW8HG83qT7DcIJy8+a5UWLenzGGuh5NQRWbGTuJVA
-----END CERTIFICATE-----