Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n60jAjoVW9JbIkKAY6wZeHznwr4.cer
File:                     n60jAjoVW9JbIkKAY6wZeHznwr4.cer (raw, json)
Hash identifier:          w2Vt81ZS/Z7NfpPjc8dlunIp370F1GybY9eERlHtsHE=
Subject key identifier:   9F:AD:23:02:3A:15:5B:D2:5B:22:42:80:63:AC:19:78:7C:E7:C2:BE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01E4CB
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 15 Mar 2024 19:07:00 +0000
Certificate not after:    Wed 28 May 2025 00:00:00 +0000
Subordinate resources:    AS: 140223
                          IP: 103.148.184.0/23
                          IP: 2405:d540::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124107 (0x1e4cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Mar 15 19:07:00 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=A91B53AF/serialNumber=9FAD23023A155BD25B22428063AC19787CE7C2BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:aa:e9:21:cb:92:91:68:6c:e9:72:14:66:ed:
                    cb:8c:7f:d9:c8:d7:85:7d:4a:bc:41:af:2b:ff:da:
                    2d:c4:43:4d:b1:2c:0c:dd:83:20:0f:54:a0:14:f4:
                    83:53:c3:92:60:ef:9a:88:6b:84:c2:d0:74:a8:b9:
                    d9:e6:db:7e:4d:b5:1e:b8:a2:b4:9c:4d:45:36:f3:
                    d6:0e:e6:50:0a:1e:dd:ae:9a:cf:0a:6d:fc:e3:35:
                    97:90:fb:2f:be:c9:9c:b6:36:cf:87:e5:bd:cb:9e:
                    3f:d1:b5:84:94:3f:28:37:be:a2:9c:a3:00:d2:ed:
                    74:78:33:5e:a8:31:3e:5b:bf:20:3a:c0:fd:13:53:
                    96:2e:3f:fe:8c:82:8f:0a:35:41:9c:0b:9c:07:bb:
                    8a:d1:60:12:73:dc:2d:9e:42:3c:be:4b:59:fe:86:
                    71:13:d0:6e:0e:aa:3b:35:c9:38:bf:45:47:a9:f5:
                    ea:ec:ad:77:c6:72:eb:b6:ab:0c:e6:91:cb:6e:c8:
                    a0:73:6b:5f:b5:12:da:68:87:27:b3:17:3f:bd:85:
                    04:34:e9:c1:ff:6e:74:c5:cf:2a:37:9c:36:57:d9:
                    d0:7f:03:84:d6:ec:fa:f6:32:49:d7:ba:52:62:86:
                    7e:e3:5d:de:38:23:cc:2c:b6:40:de:d5:a6:b0:a4:
                    92:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:AD:23:02:3A:15:5B:D2:5B:22:42:80:63:AC:19:78:7C:E7:C2:BE
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  140223

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.184.0/23
                IPv6:
                  2405:d540::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:83:4d:b5:c8:4b:e2:14:76:56:c6:4f:16:97:f3:fa:4e:55:
         90:85:44:39:f3:d1:8a:57:98:52:31:f6:9b:96:89:59:49:b3:
         82:84:64:b0:14:54:5b:6b:a5:df:ba:2b:57:3a:06:71:84:60:
         83:d8:d8:d9:af:42:3f:41:de:55:e9:b9:cc:9f:df:a2:b1:01:
         7c:92:ab:1a:a5:99:4a:a1:07:f2:71:42:3a:d3:ac:1f:39:51:
         73:5d:70:6e:e3:92:ef:fd:44:ce:f6:b0:3b:bb:6f:11:59:92:
         73:32:f7:07:5f:28:88:e4:bd:b1:a3:3c:e4:1e:f1:77:82:86:
         93:e7:0c:75:92:e6:c5:53:81:7b:40:bd:59:6c:17:62:5b:ec:
         52:0a:d3:a8:96:59:e4:95:58:81:35:4e:b1:30:c0:57:21:7e:
         82:31:18:f3:65:92:aa:6f:71:06:67:dd:72:b1:f7:d6:19:cc:
         db:2c:3b:4f:0f:16:80:ac:54:21:6f:c8:18:7e:4a:b2:1d:80:
         11:57:40:e0:aa:56:c2:9c:42:5b:6e:1c:f8:74:e3:42:e2:d4:
         84:91:d6:4e:05:e5:0d:d4:57:ba:27:43:5c:af:72:69:20:87:
         cb:d0:70:70:8b:05:d8:80:dc:08:97:82:50:0e:b3:aa:76:ce:
         6a:8e:27:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----