Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n33tfQW4HeZsc1u4VH52BIycP1o.cer
File:                     n33tfQW4HeZsc1u4VH52BIycP1o.cer (raw, json)
Hash identifier:          yp+wjnT9APkZ6DYZJTtkd4KTDLW9/sjSgWkzNXyoo5g=
Subject key identifier:   9F:7D:ED:7D:05:B8:1D:E6:6C:73:5B:B8:54:7E:76:04:8C:9C:3F:5A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       020030
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9148F9A/C0EA5798BE4511EBB0C5D084C4F9AE02/n33tfQW4HeZsc1u4VH52BIycP1o.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9148F9A/C0EA5798BE4511EBB0C5D084C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 15 Jul 2024 14:23:19 +0000
Certificate not after:    Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources:    AS: 140875
                          IP: 103.152.194.0/23
                          IP: 2001:df4:1a80::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Dec 2024 01:13:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131120 (0x20030)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 15 14:23:19 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=A9148F9A/serialNumber=9F7DED7D05B81DE66C735BB8547E76048C9C3F5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:29:c5:d8:d5:53:1b:03:e0:80:0e:39:c8:96:
                    f9:08:1d:7e:b9:a6:b3:0b:86:04:9d:63:11:32:bb:
                    0e:e1:8a:77:e9:03:9c:4c:2f:f7:36:f9:2b:68:77:
                    1e:6a:e7:55:ec:94:41:99:e8:d2:3b:d6:de:45:62:
                    ac:a9:a2:0c:f3:d0:21:b4:d9:29:05:40:42:01:21:
                    54:f5:2b:d3:73:3a:59:56:78:de:d2:68:b7:45:af:
                    62:60:57:14:a6:df:40:60:5a:c7:c3:21:8f:49:6a:
                    49:9f:3e:e9:ed:ac:e9:74:2e:08:3c:31:b8:7e:7b:
                    3f:dd:43:6e:fa:81:31:d4:77:73:35:8b:c2:4b:02:
                    44:9c:6b:48:d9:5e:82:e2:4d:e4:fe:4d:36:14:5e:
                    81:da:cf:a3:5b:dc:d3:19:70:b8:5e:34:57:fc:3b:
                    6b:18:70:ba:98:01:0f:31:00:b9:30:e7:07:cb:0c:
                    85:66:5f:06:8c:ac:ad:49:47:06:48:7b:27:e7:fd:
                    1e:ed:5a:17:17:7f:2e:28:c4:5a:99:46:eb:f3:f2:
                    d9:6e:b9:dd:34:6a:1d:7b:36:db:2d:d5:17:9b:79:
                    95:27:d3:c1:49:e3:da:aa:a6:52:54:6f:5e:21:01:
                    0c:ee:03:6a:4a:59:21:65:c9:f0:c2:d7:46:76:ca:
                    b7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:7D:ED:7D:05:B8:1D:E6:6C:73:5B:B8:54:7E:76:04:8C:9C:3F:5A
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9148F9A/C0EA5798BE4511EBB0C5D084C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9148F9A/C0EA5798BE4511EBB0C5D084C4F9AE02/n33tfQW4HeZsc1u4VH52BIycP1o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  140875

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.194.0/23
                IPv6:
                  2001:df4:1a80::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:6b:a0:25:39:1b:5b:8d:99:dd:0f:46:a8:4d:fd:80:86:96:
         fb:51:06:11:0d:5f:a5:cd:38:d4:98:c5:66:bb:fc:f1:29:c7:
         27:00:1c:e4:fd:2e:4d:9c:0f:1f:66:a8:34:b9:20:ad:fc:d2:
         08:27:d1:48:a7:ac:bb:4a:96:90:9f:8c:94:3e:33:2e:d8:68:
         de:09:6a:98:cf:71:5c:b8:c2:f4:e2:b1:59:9f:94:50:22:3a:
         64:78:01:9f:b9:9e:1a:3f:7c:f6:7f:b4:92:95:ee:9e:4d:bb:
         13:10:4d:78:cc:15:e1:c6:c2:b2:be:2e:03:0b:64:4e:37:c8:
         bc:40:61:a0:88:2c:f1:0a:4c:a9:77:c4:c5:2d:34:05:f9:b8:
         54:2e:7a:99:e4:4c:4c:dc:65:89:33:09:e3:12:c6:a4:01:d1:
         5a:3b:ab:90:7b:db:07:31:df:74:9d:fb:f8:ec:1e:f0:22:74:
         06:8a:64:09:59:57:2b:dc:65:ff:d4:0a:44:7d:71:01:ec:26:
         b2:cc:3e:61:c7:1a:e7:e3:4c:16:23:85:10:cc:08:1e:a1:7f:
         90:74:4d:94:8c:06:f9:b3:1b:87:84:b1:99:60:ec:c9:a3:35:
         c1:3b:8f:02:ba:81:7a:39:a7:85:ed:4b:7f:d2:63:d7:00:66:
         4f:66:e1:58
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAgAwMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDcxNTE0MjMxOVoXDTI1MDkzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNDhGOUExMTAvBgNVBAUTKDlGN0RFRDdEMDVCODFERTY2QzczNUJC
ODU0N0U3NjA0OEM5QzNGNUEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCmKcXY1VMbA+CADjnIlvkIHX65prMLhgSdYxEyuw7hinfpA5xML/c2+Stodx5q
51XslEGZ6NI71t5FYqypogzz0CG02SkFQEIBIVT1K9NzOllWeN7SaLdFr2JgVxSm
30BgWsfDIY9JakmfPuntrOl0Lgg8Mbh+ez/dQ276gTHUd3M1i8JLAkSca0jZXoLi
TeT+TTYUXoHaz6Nb3NMZcLheNFf8O2sYcLqYAQ8xALkw5wfLDIVmXwaMrK1JRwZI
eyfn/R7tWhcXfy4oxFqZRuvz8tluud00ah17Ntst1RebeZUn08FJ49qqplJUb14h
AQzuA2pKWSFlyfDC10Z2yrdRAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUn33tfQW4
HeZsc1u4VH52BIycP1owHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTQ4RjlBL0MwRUE1Nzk4QkU0NTExRUJCMEM1RDA4NEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE0OEY5QS9DMEVBNTc5OEJFNDUxMUVCQjBDNUQwODRDNEY5QUUwMi9uMzN0ZlFX
NEhlWnNjMXU0Vkg1MkJJeWNQMW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAiZLMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ5jCMA8EAgAC
MAkDBwAgAQ30GoAwDQYJKoZIhvcNAQELBQADggEBAHproCU5G1uNmd0PRqhN/YCG
lvtRBhENX6XNONSYxWa7/PEpxycAHOT9Lk2cDx9mqDS5IK380ggn0UinrLtKlpCf
jJQ+My7YaN4JapjPcVy4wvTisVmflFAiOmR4AZ+5nho/fPZ/tJKV7p5NuxMQTXjM
FeHGwrK+LgMLZE43yLxAYaCILPEKTKl3xMUtNAX5uFQuepnkTEzcZYkzCeMSxqQB
0Vo7q5B72wcx33Sd+/jsHvAidAaKZAlZVyvcZf/UCkR9cQHsJrLMPmHHGufjTBYj
hRDMCB6hf5B0TZSMBvmzG4eEsZlg7MmjNcE7jwK6gXo5p4XtS3/SY9cAZk9m4Vg=
-----END CERTIFICATE-----