Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lo0qqmFoy0lpRKcnAYr7QqJuMeE.cer
File:                     lo0qqmFoy0lpRKcnAYr7QqJuMeE.cer (raw, json)
Hash identifier:          1S84PqHvhAfDEf3CDU4p0/zpKJW4qFCzwYR2kOLxAus=
Subject key identifier:   96:8D:2A:AA:61:68:CB:49:69:44:A7:27:01:8A:FB:42:A2:6E:31:E1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       018FFD
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 08 Mar 2023 00:47:28 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 142006
                          IP: 103.164.86.0/23
                          IP: 2001:df6:4280::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Apr 2024 09:37:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102397 (0x18ffd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Mar  8 00:47:28 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=A91211D4/serialNumber=968D2AAA6168CB496944A727018AFB42A26E31E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:67:a5:83:f8:c0:f1:36:93:19:61:e9:0f:7e:
                    b2:4c:ce:e9:43:47:c7:53:36:b0:8d:7d:c8:64:df:
                    9d:f7:b4:fe:95:17:54:7f:54:1d:3d:9a:26:f1:c7:
                    27:63:c5:f5:ef:c0:ee:66:23:44:a5:9f:93:f0:5e:
                    62:b9:47:12:b7:72:3d:39:ef:1a:a1:d4:c2:ba:3a:
                    71:90:f1:7f:34:b3:bb:b8:39:13:1c:41:a2:ae:d7:
                    e8:b6:dd:d5:24:af:77:f7:1c:58:82:e8:86:d5:a6:
                    ab:2f:1f:b7:14:d2:52:2e:ce:d7:3f:f0:18:1f:bf:
                    a6:3d:e0:7b:6e:b8:f1:44:c6:b6:d8:1f:c4:b8:44:
                    2a:15:e8:a6:73:d0:f2:4a:df:47:d1:58:9c:4f:67:
                    73:97:23:e3:9d:bc:bf:e9:3d:d8:6d:bf:c5:31:e1:
                    1a:b7:02:2b:b9:a6:ed:b5:87:b0:ab:dd:61:0a:7f:
                    83:79:73:73:9f:fc:f9:e9:a8:14:d7:83:70:3c:d8:
                    ab:d7:f6:52:12:d8:8b:a2:33:c8:44:a2:be:dd:c5:
                    fa:f1:a6:32:76:e6:75:04:ac:38:f9:61:35:b9:ca:
                    fa:3d:75:1e:8c:07:52:d2:e1:27:6a:75:d8:5b:2b:
                    3c:a4:0e:d3:5b:da:6c:09:46:76:33:60:c3:f9:e2:
                    1c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:8D:2A:AA:61:68:CB:49:69:44:A7:27:01:8A:FB:42:A2:6E:31:E1
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  142006

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.86.0/23
                IPv6:
                  2001:df6:4280::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:0e:d0:2f:2b:af:de:0f:3c:15:2c:0f:c7:6a:8c:7f:43:37:
         4d:a6:ae:9b:55:4d:8f:56:4d:ad:b9:88:3d:97:c7:6b:22:56:
         e4:68:6a:5a:ad:f1:22:d9:fc:e3:d7:dc:78:fd:aa:eb:cc:f5:
         de:ef:8a:46:f0:e6:e4:f6:12:c8:3e:8d:54:dc:68:fe:c8:dc:
         8b:ad:28:b5:29:2e:9e:4b:7d:55:e3:2d:77:49:44:ea:94:c9:
         f2:fa:fc:bd:84:c9:8c:46:6d:15:d7:0d:a0:88:10:22:7e:8f:
         46:2c:a1:b1:19:80:89:aa:54:af:db:07:6c:5b:32:93:18:d7:
         cd:fc:be:f7:07:99:7e:39:f5:20:49:8a:9f:10:a2:33:26:56:
         94:f4:98:4d:27:fb:5a:f8:0b:2b:48:f8:39:c5:86:fd:c4:62:
         1f:31:bc:61:0e:70:53:2b:c6:3e:a7:74:9b:e9:7b:ff:dd:93:
         98:85:bc:00:52:dc:c4:68:97:2b:1d:68:6d:94:ba:a7:5a:bc:
         f4:b4:f2:87:54:e7:1a:c5:77:6c:64:33:5a:77:dd:00:79:ce:
         f8:3c:28:bf:e0:5e:10:ce:69:cb:20:86:09:ce:32:8c:68:98:
         49:6c:36:2f:de:92:8c:19:fb:da:3c:f6:20:73:d0:72:53:6d:
         8b:1d:1e:39
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 28 11:22:48 2024 by rpki-client on console-fra.rpki-client.org