Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer
File:                     nPqGncMGNX16wwkuT__QTKUCd14.cer (download)
Hash identifier:          M5wGbxaDBHXXEivWIiNCj8PRxowZQZPFFRKKF3t371U=
Subject key identifier:   9C:FA:86:9D:C3:06:35:7D:7A:C3:09:2E:4F:FF:D0:4C:A5:02:77:5E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01837F
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate valid until:  Sun 31 Mar 2024 00:00:00 +0000
Subordinate resources:
    1: IP: 103.177.222.0/23
    2: IP: 2001:df0:2c40::/48

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99199 (0x1837f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan  3 16:16:53 2023 GMT
            Not After : Mar 31 00:00:00 2024 GMT
        Subject: CN=A917FFBF/serialNumber=9CFA869DC306357D7AC3092E4FFFD04CA502775E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e4:b6:49:9e:23:d9:ae:16:97:84:91:ac:a9:
                    3e:b0:18:0d:ee:1f:68:1b:e5:e4:d3:eb:c6:16:ef:
                    dd:87:40:a3:54:1e:65:66:e7:c0:c7:ed:5a:04:1a:
                    a6:55:27:c3:1d:57:ac:59:67:88:59:11:10:4e:79:
                    22:5b:7f:35:da:2b:13:e2:65:81:e3:8f:0a:72:60:
                    3d:05:7c:a2:ec:26:86:be:c1:50:93:ef:73:7b:2e:
                    ec:4b:69:56:63:f6:c7:65:de:2c:8b:d9:12:f8:e7:
                    3b:54:e9:f1:d0:70:93:74:c3:49:50:85:0c:96:86:
                    09:07:e4:11:c0:b5:0f:c5:71:85:56:f5:3f:a0:44:
                    80:b2:3e:6e:4d:07:73:2e:45:58:9a:8e:48:1a:b8:
                    38:7e:af:b4:f2:39:3f:ad:b4:89:1f:44:c1:76:2b:
                    cd:21:f2:42:a0:05:00:78:92:5c:56:b8:6f:eb:ed:
                    ab:7c:3b:32:08:1a:24:09:f8:c2:da:30:b8:43:1b:
                    f1:a0:9b:b7:6d:0b:0a:a2:22:c5:88:75:0f:c1:bb:
                    11:f8:d1:c3:cc:cd:3c:58:a8:c3:5d:ba:c4:5a:4d:
                    37:00:ce:6d:0b:db:d9:dc:b7:71:66:86:69:47:ba:
                    19:fe:a8:70:ea:3f:24:af:5c:39:0c:a8:1d:dc:03:
                    fd:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                9C:FA:86:9D:C3:06:35:7D:7A:C3:09:2E:4F:FF:D0:4C:A5:02:77:5E
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.222.0/23
                IPv6:
                  2001:df0:2c40::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:5c:62:87:7e:4c:ee:5a:c0:72:ce:6a:de:ca:fd:ce:41:f3:
         08:fd:6f:67:cc:35:a9:4b:63:52:28:69:ec:19:f3:ca:29:6c:
         eb:b1:7f:c3:24:d8:cc:5a:a0:a0:26:57:d6:9a:ba:83:61:87:
         ef:94:12:4e:98:4d:f0:0d:97:ca:46:45:56:fd:d2:b2:26:29:
         3c:26:68:68:01:6a:1d:84:24:7a:7f:cf:a9:84:ab:fa:ec:62:
         fb:aa:ae:7e:29:e3:b9:7c:8d:8d:bc:1d:f0:3c:f2:a5:42:f0:
         9d:c0:b7:37:25:37:57:e1:cc:ff:c5:f0:8b:b8:ac:06:c2:c5:
         e1:b0:ea:91:ee:a9:94:df:c3:d8:cd:9a:e2:0b:8f:9e:94:2e:
         81:c8:c4:52:3a:20:e1:be:bc:5d:71:50:04:cb:08:f4:ea:5e:
         44:94:cf:cd:ec:a6:fc:83:7c:7a:b8:bf:60:e3:a9:15:7e:3c:
         67:e8:ca:ba:00:22:3a:46:16:e8:60:00:f9:f2:30:48:ff:f9:
         e5:da:9a:22:86:bf:b0:a6:a7:db:67:b3:94:70:2c:f2:6d:23:
         08:cb:50:7c:c8:52:1d:1a:51:eb:28:57:5c:15:d5:bd:c6:67:
         80:b9:47:c8:30:a6:86:05:56:7a:7d:a6:cc:da:6f:7f:98:cc:
         4e:cc:ad:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 4 02:11:37 2023 by rpki-client.