Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHzT0QIaWMJAoSE3QAuXsYt5mNA.cer
File:                     oHzT0QIaWMJAoSE3QAuXsYt5mNA.cer (raw, json)
Hash identifier:          JJJL2gzURgVyb+L4wz9S5eoI93fnkYeavFdNseKtRJA=
Subject key identifier:   A0:7C:D3:D1:02:1A:58:C2:40:A1:21:37:40:0B:97:B1:8B:79:98:D0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01FA13
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9194040/9B04A0F2A34011ECB3FA047BC4F9AE02/oHzT0QIaWMJAoSE3QAuXsYt5mNA.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9194040/9B04A0F2A34011ECB3FA047BC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 19 Jun 2024 17:05:18 +0000
Certificate not after:    Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources:    IP: 103.151.138.0/23
                          IP: 2001:df3:c380::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129555 (0x1fa13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun 19 17:05:18 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=A9194040/serialNumber=A07CD3D1021A58C240A12137400B97B18B7998D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8c:b6:19:f2:07:d4:c1:85:80:57:75:e4:a3:
                    2e:a6:d2:7b:d7:d5:63:8d:6b:f8:50:5a:25:5c:aa:
                    e4:19:1b:d4:9f:08:39:cc:ce:bb:30:1d:3b:35:d7:
                    22:4b:5c:99:1f:af:1a:2e:b6:0d:b1:d8:5d:f5:5d:
                    10:6b:7f:f9:9d:7e:03:da:34:5a:bb:b7:db:c5:aa:
                    92:08:f9:3a:82:db:38:3f:63:15:bb:ee:f9:79:d0:
                    91:0d:b0:a3:ac:ba:b9:22:00:ad:ca:6f:cf:64:ef:
                    06:4d:75:a0:ff:92:60:f4:c4:62:bf:ef:45:e9:b0:
                    e5:5a:cd:51:66:f7:e4:e8:c1:ee:c1:5d:5b:75:5b:
                    20:b4:37:ff:ac:68:46:2e:79:02:9c:3e:2c:d0:2b:
                    2b:9d:a6:f1:7c:b8:8c:8a:5f:85:2d:7a:c8:72:f1:
                    12:65:23:58:be:fb:c3:61:e2:21:8e:1b:5a:2d:15:
                    b9:72:53:3c:3c:44:07:62:e9:a5:92:7d:81:6f:4f:
                    bf:67:90:67:ed:e0:1c:66:a0:9d:34:86:18:9e:6c:
                    1e:a7:bb:84:91:59:67:e6:23:62:ab:f4:77:38:f9:
                    53:93:60:06:46:09:ec:b5:a1:66:50:f7:eb:25:4a:
                    27:d9:36:a7:65:e5:31:52:d1:ef:11:83:3f:36:b8:
                    03:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:7C:D3:D1:02:1A:58:C2:40:A1:21:37:40:0B:97:B1:8B:79:98:D0
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9194040/9B04A0F2A34011ECB3FA047BC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9194040/9B04A0F2A34011ECB3FA047BC4F9AE02/oHzT0QIaWMJAoSE3QAuXsYt5mNA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.138.0/23
                IPv6:
                  2001:df3:c380::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:a5:a0:f3:64:ce:11:22:ef:b1:0a:ca:3b:84:34:54:61:b1:
         08:09:30:3c:57:74:b0:12:2d:96:f9:93:05:bf:9e:8b:bd:17:
         49:51:46:36:6a:e5:29:37:d6:d1:4e:31:fb:57:c6:d2:35:90:
         e3:ec:69:e6:33:b2:7f:d2:30:5c:67:bf:08:ab:b4:20:ae:34:
         7e:06:f2:70:85:7c:ad:07:de:50:95:5b:ff:36:b7:34:57:22:
         be:d7:c6:c9:75:08:92:98:2e:d8:d7:3d:8c:a7:cc:dc:fc:3e:
         45:1b:4a:e9:2b:22:98:e2:96:e8:7e:44:93:d5:3d:72:27:3e:
         69:66:81:9d:e5:e7:b4:39:ad:83:32:4b:c4:5c:11:a2:ed:4f:
         16:6c:1d:8b:ad:a2:00:d6:d4:c3:b6:e5:d7:ca:f7:b5:ad:17:
         c2:21:dd:ae:c2:87:ad:63:60:20:77:3d:e7:88:b5:91:7b:c0:
         b1:e0:39:f6:f0:8a:c3:d0:ba:9c:6e:2b:01:08:85:9b:5e:45:
         a6:e4:c1:f2:5f:44:0c:45:a4:0d:43:45:79:c6:c4:46:e8:6c:
         c8:de:36:a2:1d:34:4e:1d:4b:fb:86:28:00:44:04:26:b0:cd:
         c2:cf:fb:7d:c5:6f:f0:9c:5e:b4:77:75:4e:a5:f1:b3:54:97:
         46:80:2f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----