Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer
File:                     nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer (raw, json)
Hash identifier:          LH7qM4f8BsxN96lIIcqA+qVv0GLGGr8CtizXIXt62lw=
Subject key identifier:   9F:0C:15:20:8D:7E:E6:2E:80:CB:97:5C:FE:4C:EC:9C:BF:1D:27:56
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01D077
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 07 Dec 2023 13:39:31 +0000
Certificate not after:    Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 139823
                          IP: 103.145.204.0/23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Apr 2024 04:49:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118903 (0x1d077)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec  7 13:39:31 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=A9131579/serialNumber=9F0C15208D7EE62E80CB975CFE4CEC9CBF1D2756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:99:83:19:77:c2:b8:08:6e:a0:7f:f6:cb:be:
                    6e:2e:aa:a7:83:d4:b9:cc:5d:6e:a8:ed:81:b7:38:
                    d7:44:c7:e0:b5:10:df:88:9d:df:84:9f:b5:27:d6:
                    ec:69:64:d1:3a:bb:62:4a:e1:ae:0c:da:6f:d2:0f:
                    d1:d2:d6:c6:15:50:7a:0f:3b:ed:f6:b6:ea:04:fa:
                    d2:4e:bd:1d:53:3e:56:f2:ed:e4:78:95:42:c2:6d:
                    da:91:ae:62:50:0d:40:c5:f4:5b:27:be:86:6c:a8:
                    35:eb:04:5a:48:c7:3c:cc:f0:60:03:75:92:04:3b:
                    ab:e7:9b:05:d1:dd:4f:37:09:67:02:ad:cf:c3:26:
                    fb:1b:b4:29:b8:63:e6:64:b8:ee:82:39:50:5e:99:
                    d8:47:cd:62:6b:cf:e4:0e:37:63:cc:d2:1b:bd:ad:
                    82:bc:df:b4:af:55:2f:ae:20:10:e1:8a:29:c8:c8:
                    53:ac:50:c7:4b:5c:12:22:6f:6b:b4:79:71:78:3a:
                    77:cd:ef:2b:cb:9e:78:32:af:0a:50:98:1e:41:4f:
                    1e:e7:dc:c8:17:fb:bf:c6:aa:a3:ff:8b:2a:69:db:
                    c4:1b:b4:d7:bb:c6:ca:17:24:da:f4:d6:11:1b:7e:
                    cd:54:d5:3a:34:66:7f:65:d0:6d:6b:8b:46:31:bc:
                    de:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:0C:15:20:8D:7E:E6:2E:80:CB:97:5C:FE:4C:EC:9C:BF:1D:27:56
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  139823

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:71:4b:cc:2c:25:b6:2b:03:b0:c1:2b:38:3d:c6:df:57:68:
         c2:8f:20:d5:34:34:e1:69:e3:52:e9:7e:f3:89:e8:bc:93:d3:
         a0:d5:3b:f8:83:19:f4:6d:47:5a:4f:00:c7:91:21:3f:06:4b:
         bf:54:46:46:77:1c:f6:3a:71:8d:2d:a8:a9:f9:3f:b0:5d:6c:
         ad:88:1d:21:d7:be:df:4d:38:c0:74:5c:33:6c:73:6d:91:3b:
         35:ae:e2:cb:65:19:ff:64:0e:e4:4e:51:0b:79:0e:83:f2:4c:
         3d:26:c6:3f:2c:d4:a1:8b:56:f7:c8:37:0c:19:06:8d:43:cd:
         22:2e:eb:71:e1:83:a9:66:3b:c0:db:70:b2:cc:de:72:7b:f1:
         cb:f2:8b:47:80:92:5e:96:98:cb:9d:e5:34:ee:8e:cf:2b:40:
         2d:10:6b:4c:f5:d1:7b:b8:58:2f:ba:ab:4e:72:41:cc:e4:1c:
         20:00:a3:00:5a:66:e5:5e:f6:08:e3:7b:29:45:83:89:2d:06:
         57:7a:bb:a2:6c:31:2b:fd:0f:14:5b:64:32:4f:74:3d:42:23:
         0c:dd:9f:0d:b8:bd:8a:bd:c7:95:d4:0e:21:78:51:7d:85:91:
         40:ad:c8:2d:d1:d0:b6:6d:95:6e:ed:4e:dc:2d:d9:df:9d:55:
         20:a2:fe:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 06:02:38 2024 by rpki-client on console-fra.rpki-client.org