Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer
File:                     ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer (raw, json)
Hash identifier:          SzJZcb1H4V4FdOnb5qyeumpHVyV6oS4tXhGXGz7nJVI=
Subject key identifier:   A2:5E:D8:A1:42:7A:E9:3B:24:D3:0D:CC:DF:A8:32:53:8B:50:08:AD
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01DA1F
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 24 Jan 2024 03:53:35 +0000
Certificate not after:    Thu 31 Oct 2024 00:00:00 +0000
Subordinate resources:    AS: 139325
                          AS: 141037
                          IP: 103.141.64.0/23
                          IP: 2001:df0:f280::/48
                          IP: 2401:79e0::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 05:04:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121375 (0x1da1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan 24 03:53:35 2024 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=A914A139/serialNumber=A25ED8A1427AE93B24D30DCCDFA832538B5008AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a5:3e:0e:06:ab:5a:4e:42:ff:50:7c:59:12:
                    bb:bf:f3:ca:be:88:a0:7f:f4:1a:09:8e:03:5a:56:
                    cf:ba:1e:40:28:81:b4:09:3c:e6:10:50:e3:4d:b9:
                    90:38:f4:e2:93:34:ba:47:85:bc:f4:8d:96:4b:60:
                    4b:7b:ea:6f:c6:40:35:b8:d7:6e:34:2a:3a:61:24:
                    46:be:75:d7:ec:7c:1d:ae:0d:66:89:65:8d:a7:61:
                    cf:cf:aa:bd:39:35:a9:86:46:da:6a:d6:7c:0f:14:
                    3a:8b:ba:46:c9:3e:3b:ff:c1:83:be:bd:eb:bb:0a:
                    e3:66:59:bb:d2:e5:d8:13:8f:60:51:95:5e:4b:0e:
                    bc:b3:07:dc:02:07:ab:70:bb:85:7b:e3:17:77:77:
                    dd:75:3b:95:b2:33:f2:7b:50:e3:45:a7:ae:76:08:
                    4b:a2:3a:e9:72:f9:14:43:3c:fc:1b:3a:6b:ad:3b:
                    2c:5a:d8:e0:95:9b:46:d9:ea:5f:b0:a5:72:64:dd:
                    94:91:81:95:6c:69:9a:e9:20:ba:ea:f0:15:fa:a9:
                    8e:3b:f6:00:f1:d8:5c:e9:84:53:5c:77:7c:41:fa:
                    c3:a3:43:86:35:42:83:3c:2b:e5:3a:66:d3:ff:79:
                    9a:36:c2:9d:da:f1:5b:44:6a:88:3f:93:ba:fa:eb:
                    ab:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:5E:D8:A1:42:7A:E9:3B:24:D3:0D:CC:DF:A8:32:53:8B:50:08:AD
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  139325
                  141037

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.64.0/23
                IPv6:
                  2001:df0:f280::/48
                  2401:79e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:19:0b:89:d5:43:b6:ed:46:cc:b0:18:a7:b2:0a:21:b6:97:
         8d:13:97:f1:04:6b:26:bb:48:ed:0e:80:8d:61:90:6c:9c:ab:
         a1:f0:c4:71:37:a6:2c:f2:48:4b:a3:b6:c2:38:3d:0b:f0:2b:
         3d:de:58:45:dc:db:95:e3:bc:e5:69:16:52:48:2e:cc:8c:8d:
         b6:91:47:51:63:d0:c2:65:ba:38:4c:5e:e1:ca:f8:27:a0:a7:
         18:30:7b:cd:d1:1f:7a:2e:22:03:7e:32:41:cc:e2:4c:b3:3a:
         14:49:b2:2e:c8:51:0b:f6:83:d0:85:8c:3c:2d:97:53:2c:9c:
         16:6c:01:b5:2f:c0:c9:fb:24:5d:a6:4b:ee:ec:6d:bf:2f:bb:
         dd:9d:24:1a:8f:92:e6:0d:bf:e3:4a:c5:72:c4:b1:20:68:cd:
         8a:4d:8d:a7:42:03:42:02:ac:5e:96:fe:20:86:e1:4b:e5:97:
         b7:24:57:9c:6f:25:5f:7a:74:3c:39:f4:90:a7:a9:ac:9a:29:
         53:5b:92:f2:13:42:10:60:f8:24:92:55:c9:14:d3:30:74:ab:
         ce:b3:29:d6:3b:63:fe:86:06:c4:af:d7:ba:ab:f3:e7:f7:7e:
         79:0d:9c:09:c4:6f:d7:88:d2:a1:88:c1:3f:13:0e:c9:bf:d2:
         96:67:23:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 06:18:29 2024 by rpki-client on console-ams.rpki-client.org