Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7CyBZyzB2t17aMkt2UH08KVUoM.cer
File:                     o7CyBZyzB2t17aMkt2UH08KVUoM.cer (raw, json)
Hash identifier:          1fcGK6mkxSNi97tiLGppFglILm6v8k0hgM5r3zC8+m4=
Subject key identifier:   A3:B0:B2:05:9C:B3:07:6B:75:ED:A3:24:B7:65:07:D3:C2:95:52:83
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01EDCC
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sun 28 Apr 2024 18:54:32 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 140380
                          IP: 103.149.104.0/23
                          IP: 2405:fb40::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Dec 2024 01:13:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126412 (0x1edcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Apr 28 18:54:32 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=A91C2AAE/serialNumber=A3B0B2059CB3076B75EDA324B76507D3C2955283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8d:f4:95:44:e7:9c:1c:97:26:cb:b2:63:39:
                    f7:ff:09:28:97:a5:b2:7e:53:7b:48:ea:ed:17:16:
                    1b:82:c8:f8:61:72:a1:4d:87:c6:3f:d7:98:c2:0c:
                    cb:e5:ad:82:0f:66:e0:f8:d2:95:1f:b2:4a:a7:67:
                    c1:b3:53:65:70:08:74:b8:33:8b:05:ba:a5:4b:93:
                    15:e9:f0:7c:ee:c7:c4:c0:95:00:a3:90:2c:47:1a:
                    83:b8:bf:c0:f2:10:f7:8e:83:91:ab:41:8f:6c:7c:
                    1c:7a:c4:51:ed:24:8b:e7:d6:7a:cf:b6:ea:88:6b:
                    dc:2c:d4:5e:c1:b6:bf:00:32:3c:f2:99:d4:2c:7d:
                    f1:ef:f5:7c:dc:7a:2a:37:ea:ae:0e:b8:b4:c2:70:
                    46:eb:55:55:27:84:5c:db:4c:e7:51:57:b9:d7:f7:
                    3d:4d:05:4a:7f:d9:8b:ed:13:4e:d1:4e:4e:9b:c3:
                    3a:41:ee:b6:5f:7c:5b:5f:77:d9:7e:5f:f7:9c:30:
                    da:70:7a:3d:a7:65:a9:b7:80:47:fd:15:69:3e:ba:
                    30:cb:e1:41:32:c3:4e:3e:cc:b1:29:f0:d5:c1:3d:
                    73:58:07:60:15:75:83:c8:c1:ba:4a:62:ca:54:c0:
                    10:51:d3:d2:1d:3f:46:a0:6e:a2:09:62:cf:29:5f:
                    3b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:B0:B2:05:9C:B3:07:6B:75:ED:A3:24:B7:65:07:D3:C2:95:52:83
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  140380

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.104.0/23
                IPv6:
                  2405:fb40::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:30:f1:54:ca:53:5b:1f:f1:37:62:06:39:ae:ee:f7:48:41:
         28:ee:a4:fd:a9:6a:57:f9:be:7d:9a:3b:e9:e2:17:0c:d2:c5:
         85:57:76:ab:10:ab:94:90:c3:cf:21:f4:9b:9a:cd:c8:c8:38:
         23:1f:03:43:48:b6:f5:51:56:8c:ea:e4:c4:87:d2:13:ee:82:
         f1:da:0f:42:05:46:75:fc:2e:43:3a:8e:b0:48:cc:65:7f:b9:
         48:e7:ee:19:95:01:a2:5f:7d:e1:a3:dd:58:2c:29:55:45:6c:
         78:27:98:91:a0:d4:fd:7f:b4:98:76:ae:6e:ac:09:2a:c4:13:
         7d:45:d3:ff:0b:74:37:79:cf:9c:12:89:63:e6:53:43:59:2a:
         be:ec:62:e7:ca:87:78:d0:8a:6f:ef:88:ba:0e:bf:38:0d:c4:
         d7:0c:e6:b2:a8:d8:26:16:a7:55:f6:fc:e0:3d:8d:3d:ef:e3:
         ac:07:37:2d:12:da:12:00:73:15:e6:66:63:ae:dc:a8:f9:79:
         5a:e8:16:15:e8:e1:b4:18:fc:00:bf:43:82:1d:90:91:06:11:
         94:69:20:86:51:35:70:6d:a5:72:5a:8e:46:c4:ac:41:58:72:
         ce:fb:49:c4:8a:37:4d:61:c2:85:b5:19:88:4c:0a:dd:76:2b:
         2c:2e:e1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----