Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNZvEXVTOiOoUulRUGXIWjOec4Y.cer
File:                     oNZvEXVTOiOoUulRUGXIWjOec4Y.cer (raw, json)
Hash identifier:          TBxSWXTIbllxAVAQbyaUJ7s5r+PhnG4oJuAYMGVRuik=
Subject key identifier:   A0:D6:6F:11:75:53:3A:23:A8:52:E9:51:50:65:C8:5A:33:9E:73:86
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       020C10
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 05 Sep 2024 06:09:44 +0000
Certificate not after:    Fri 31 Oct 2025 00:00:00 +0000
Subordinate resources:    AS: 7611
                          IP: 203.114.64.0/22
                          IP: 2401:9500::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Dec 2024 01:13:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134160 (0x20c10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep  5 06:09:44 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=A9158547/serialNumber=A0D66F1175533A23A852E9515065C85A339E7386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f4:cb:06:2c:c9:e1:f0:34:a3:87:79:3f:06:
                    0c:60:91:7c:e5:ee:6d:66:2f:ce:08:3a:e9:84:bf:
                    7e:5f:7c:73:57:b3:9b:98:d3:b4:77:36:85:88:e6:
                    46:50:06:9f:15:22:34:e9:99:cc:5a:27:17:37:27:
                    57:e6:f9:6a:7e:d5:5b:31:6e:61:04:20:46:e6:f7:
                    1e:a6:bc:20:4c:b5:87:ba:69:8b:6a:0d:b0:1f:19:
                    85:71:e8:72:80:83:0f:3c:a1:17:0b:d3:68:51:5e:
                    20:60:52:f7:89:7c:af:9d:73:c0:db:c9:f7:97:b6:
                    d1:aa:b8:e7:5f:20:68:20:b6:e4:47:a5:23:a8:f5:
                    74:3c:c8:4b:98:c9:93:9c:f1:5f:19:26:f1:32:0e:
                    8a:cc:f6:2b:0c:e0:be:a3:5a:26:f9:85:14:df:27:
                    d2:7b:5a:66:8b:90:31:59:e2:dc:db:f4:62:08:e5:
                    c6:38:fc:c0:f5:5e:e7:63:98:6a:7e:70:51:9a:02:
                    02:a9:55:73:00:2d:cb:f4:99:19:79:19:4a:ad:66:
                    7e:d7:df:39:e5:4f:c0:3e:ac:0e:a3:2b:40:a9:67:
                    fc:b0:ce:cb:7b:35:1e:46:34:f1:58:b5:e7:84:4d:
                    ce:1e:93:50:58:b8:77:f5:ae:55:1a:d0:bf:ae:75:
                    7e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:D6:6F:11:75:53:3A:23:A8:52:E9:51:50:65:C8:5A:33:9E:73:86
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  7611

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.114.64.0/22
                IPv6:
                  2401:9500::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:5b:09:f4:a1:ce:aa:1c:24:df:4a:d2:31:62:35:73:d6:36:
         0e:12:9b:ab:27:dd:72:18:1c:dc:73:33:f0:20:27:b1:2f:b4:
         55:cb:5f:cf:ad:08:71:79:99:fd:96:28:90:d9:61:4d:03:2e:
         89:80:8b:08:e2:cb:70:bc:76:c8:69:5d:26:ee:e7:6f:f0:72:
         dc:4a:18:19:65:9e:6f:59:12:8a:e4:4f:24:22:cd:2a:b5:ab:
         26:9b:d7:89:2c:93:05:11:80:43:ab:86:d9:6d:4a:30:6c:70:
         62:5b:7a:ee:fe:b4:11:1b:48:26:9d:12:58:7b:1d:b5:94:9c:
         a9:f5:90:61:e2:cf:2d:f6:d0:e5:32:fe:7d:61:b2:ae:da:49:
         46:ae:82:30:b0:e7:2f:ae:23:95:46:3b:10:e1:7e:04:41:7b:
         4e:af:bc:3f:c1:f5:ee:ec:9c:f5:1b:b2:47:2a:f0:9c:6b:fe:
         56:84:16:4c:54:04:16:2a:87:fe:b5:d6:9d:3d:73:27:81:bd:
         5f:bb:d9:79:ae:01:e0:d3:48:3a:39:95:8c:22:90:5b:3f:e4:
         e5:89:f9:d2:2d:42:10:c7:6b:bc:d9:9f:da:ef:78:84:0a:35:
         35:9b:e5:72:06:96:9b:f5:3c:ad:d3:f0:ba:97:30:20:b3:da:
         64:76:8b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----