Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-cZUtz7OVxCy9i8b1LwMpzHa2U.cer
File:                     p-cZUtz7OVxCy9i8b1LwMpzHa2U.cer (raw, json)
Hash identifier:          A+bTe0DaE/ngLlBKVU59LJccTiDv9dkUmCbvhkA7m5o=
Subject key identifier:   A7:E7:19:52:DC:FB:39:5C:42:CB:D8:BC:6F:52:F0:32:9C:C7:6B:65
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01B78D
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 18 Aug 2023 12:52:51 +0000
Certificate not after:    Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources:    AS: 135587
                          IP: 103.7.122.0/23
                          IP: 2001:df1:49c0::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 23:35:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112525 (0x1b78d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 18 12:52:51 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=A9127142/serialNumber=A7E71952DCFB395C42CBD8BC6F52F0329CC76B65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d7:cf:ab:32:88:91:3a:52:05:64:0b:86:bc:
                    0e:a0:1d:eb:e9:f7:b7:fc:83:61:07:10:a3:89:36:
                    9d:4e:a9:ac:9b:a0:b1:e3:92:38:1e:ba:5b:2a:79:
                    9a:fd:9c:5a:fe:20:98:6f:28:b7:72:b8:5b:a6:85:
                    43:9a:a9:db:be:53:a1:7a:84:2e:10:b3:ae:c7:93:
                    78:15:7d:b4:ad:fe:78:ee:90:9f:a7:be:b4:52:b9:
                    51:c8:7c:d3:8d:cc:69:b7:2f:b1:bf:b5:fe:0f:97:
                    4a:f9:8f:fb:6e:44:ea:68:59:41:b0:bb:a2:dc:b3:
                    f8:85:f8:b9:56:36:79:fd:04:25:86:32:c4:d8:62:
                    36:d9:5f:be:fa:9d:6c:e1:55:b8:cf:b1:8c:91:43:
                    0b:2e:8d:ab:ff:e6:66:c2:7a:6e:0b:ce:90:71:65:
                    d7:db:a0:a6:60:16:2e:02:92:38:ea:9e:d9:98:51:
                    f2:b5:b5:f4:b5:7b:9c:2b:57:61:88:a1:ab:57:bb:
                    aa:d1:ea:71:f1:dc:bc:3f:89:ba:95:bc:65:f7:3e:
                    3c:6b:05:c2:6d:a3:23:85:be:4e:f9:96:c6:7f:0e:
                    08:1a:4d:6c:1b:ae:ee:1c:a3:fc:6f:94:1a:dc:b9:
                    1b:47:94:7a:56:a3:fc:dc:09:8b:de:7a:60:6d:42:
                    ac:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E7:19:52:DC:FB:39:5C:42:CB:D8:BC:6F:52:F0:32:9C:C7:6B:65
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  135587

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.7.122.0/23
                IPv6:
                  2001:df1:49c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         98:f2:14:13:25:8c:a6:fb:22:78:f4:95:7c:24:89:5b:0a:15:
         36:2e:26:87:2c:c8:5a:54:a9:7b:44:1a:47:6c:83:54:5d:c9:
         7b:28:3a:86:36:a1:23:22:38:6b:2d:e8:79:54:48:2e:a2:bc:
         51:66:03:d4:1b:c6:7a:76:72:d1:93:ba:c1:d7:b1:ab:4a:a7:
         26:04:b2:60:98:71:84:42:86:23:90:a9:6d:44:ca:78:32:54:
         cb:bf:a0:fa:71:93:0e:32:8c:3a:f3:13:34:b5:7a:c8:b4:8d:
         08:f3:1a:51:cf:9a:47:b2:bf:45:c0:07:94:59:8b:77:08:71:
         6d:9a:ad:75:7e:11:d9:ed:df:ae:4b:8b:43:4b:61:10:49:66:
         9f:6d:96:72:76:89:2f:ee:18:9b:27:e1:87:e1:3a:8f:61:9f:
         51:04:10:ad:b9:95:89:05:f7:e7:99:b5:96:bc:c5:df:03:31:
         23:3e:87:62:0c:ae:8c:21:15:10:28:69:22:23:2c:72:4f:88:
         d1:95:69:e1:dc:6b:8f:5a:ab:22:8f:52:9c:6b:b0:71:2f:31:
         1a:3f:2d:76:01:be:21:d9:69:3d:57:e2:fc:c9:17:88:ad:d6:
         9a:f3:f8:23:b3:25:20:d3:d3:f9:ff:1c:48:a3:3a:06:3b:5b:
         1d:45:28:b3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 20 01:10:35 2024 by rpki-client on console-ams.rpki-client.org