Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4kC9PDYJLQPSW1d_D6fBjO3Epk.cer
File:                     p4kC9PDYJLQPSW1d_D6fBjO3Epk.cer (raw, json)
Hash identifier:          v8zkybzftvM9hfHiH7923UI6EcThCWANOTGt2xNb44M=
Subject key identifier:   A7:89:02:F4:F0:D8:24:B4:0F:49:6D:5D:FC:3E:9F:06:33:B7:12:99
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01B703
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/p4kC9PDYJLQPSW1d_D6fBjO3Epk.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 15 Aug 2023 16:20:35 +0000
Certificate not after:    Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources:    AS: 139215
                          IP: 103.139.234.0/23
                          IP: 2404:f140::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 06:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112387 (0x1b703)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 15 16:20:35 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=A915FDCF/serialNumber=A78902F4F0D824B40F496D5DFC3E9F0633B71299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:98:76:73:d5:48:1c:15:7b:71:55:55:a9:f0:
                    92:58:74:5a:1b:a9:5d:fe:6a:1a:2e:a4:f6:24:f3:
                    26:c5:8a:05:84:c5:4a:08:9d:a7:ab:df:11:33:a5:
                    32:d7:7b:87:03:ec:68:f9:bc:91:58:1a:d8:74:46:
                    c0:d9:50:ae:a4:89:0e:0d:74:e0:b1:fa:e3:e4:4d:
                    6c:72:53:8a:63:3f:e0:de:25:5f:e5:d1:a0:80:13:
                    5e:c1:d5:8f:6f:9f:04:10:b6:72:5d:66:40:80:ac:
                    4f:84:16:1f:09:76:23:2c:89:33:a8:eb:22:1c:a8:
                    fe:15:8a:8d:3e:67:20:8e:0b:1c:a2:60:e6:bd:fc:
                    88:7e:10:6c:ef:b0:d7:3d:eb:30:71:fc:17:9b:42:
                    b1:cd:6e:a8:93:a1:94:4b:2f:81:3a:ed:a3:e5:f3:
                    e9:b2:74:3b:56:e8:1f:bb:ba:fb:df:15:7d:dc:ff:
                    51:1d:d8:08:02:14:36:8c:04:c5:3e:b7:20:23:0d:
                    27:92:28:60:74:44:27:09:c0:fa:7b:e3:1f:93:98:
                    ee:a0:47:8a:18:83:45:a4:a9:54:c4:11:47:c0:8a:
                    e7:a6:cf:ad:ea:3c:c7:b0:9d:ea:9c:03:80:2b:bb:
                    c7:91:c4:b4:b2:ae:35:10:19:98:5a:6b:5a:b8:f7:
                    44:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:89:02:F4:F0:D8:24:B4:0F:49:6D:5D:FC:3E:9F:06:33:B7:12:99
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/p4kC9PDYJLQPSW1d_D6fBjO3Epk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  139215

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.234.0/23
                IPv6:
                  2404:f140::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:b6:eb:e5:11:6b:90:09:88:32:23:a3:a4:72:2c:cb:89:22:
         70:13:53:7f:41:30:5b:ce:e0:c5:49:e4:9c:9a:44:f9:41:04:
         82:a7:07:ac:04:0f:96:46:5f:0d:86:77:65:b6:c9:97:cd:ce:
         ad:8f:04:cc:51:e5:ca:d5:b0:35:de:c1:09:98:90:65:c1:b7:
         01:ce:21:40:fd:ba:6b:16:5e:d3:d3:1d:db:16:73:07:78:5b:
         a7:29:e2:58:7b:6f:ee:49:a1:1b:07:80:2d:8e:14:30:00:75:
         26:03:b5:b3:7a:9e:f4:7f:74:e8:5c:95:a1:e1:ee:da:d5:38:
         41:00:62:3f:be:9d:9b:91:f1:06:1f:e3:39:01:41:fb:34:a2:
         87:b8:a2:60:00:a9:de:d7:74:94:48:c9:14:c0:d2:dc:65:8b:
         b4:75:e0:38:f0:9a:6e:2e:b9:58:7f:7e:3f:47:a0:7b:be:52:
         34:cb:fb:95:87:0c:59:59:d8:3c:a2:8a:90:51:b2:ed:c4:e9:
         80:dd:d6:6f:f4:54:05:6a:6b:e0:bf:c3:cb:d2:d6:62:ac:8f:
         d0:fc:cd:ab:dd:4a:c7:04:02:7b:05:78:82:be:b3:d7:1d:39:
         35:bd:81:2a:e9:8d:57:c5:9e:97:d7:c8:0e:fe:60:84:af:50:
         be:94:15:b1
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAbcDMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMDgxNTE2MjAzNVoXDTI0MDkzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNUZEQ0YxMTAvBgNVBAUTKEE3ODkwMkY0RjBEODI0QjQwRjQ5NkQ1
REZDM0U5RjA2MzNCNzEyOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC4mHZz1UgcFXtxVVWp8JJYdFobqV3+ahoupPYk8ybFigWExUoInaer3xEzpTLX
e4cD7Gj5vJFYGth0RsDZUK6kiQ4NdOCx+uPkTWxyU4pjP+DeJV/l0aCAE17B1Y9v
nwQQtnJdZkCArE+EFh8JdiMsiTOo6yIcqP4Vio0+ZyCOCxyiYOa9/Ih+EGzvsNc9
6zBx/BebQrHNbqiToZRLL4E67aPl8+mydDtW6B+7uvvfFX3c/1Ed2AgCFDaMBMU+
tyAjDSeSKGB0RCcJwPp74x+TmO6gR4oYg0WkqVTEEUfAiuemz63qPMewneqcA4Ar
u8eRxLSyrjUQGZhaa1q490QbAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUp4kC9PDY
JLQPSW1d/D6fBjO3EpkwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTVGRENGL0Y0RkRGNUVFOEQ0MTExRTk4MTUxNkEzMkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE1RkRDRi9GNEZERjVFRThENDExMUU5ODE1MTZBMzJDNEY5QUUwMi9wNGtDOVBE
WUpMUVBTVzFkX0Q2ZkJqTzNFcGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAh/PMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZ4vqMA0EAgAC
MAcDBQAkBPFAMA0GCSqGSIb3DQEBCwUAA4IBAQCntuvlEWuQCYgyI6OkcizLiSJw
E1N/QTBbzuDFSeScmkT5QQSCpwesBA+WRl8NhndltsmXzc6tjwTMUeXK1bA13sEJ
mJBlwbcBziFA/bprFl7T0x3bFnMHeFunKeJYe2/uSaEbB4AtjhQwAHUmA7Wzep70
f3ToXJWh4e7a1ThBAGI/vp2bkfEGH+M5AUH7NKKHuKJgAKne13SUSMkUwNLcZYu0
deA48JpuLrlYf34/R6B7vlI0y/uVhwxZWdg8ooqQUbLtxOmA3dZv9FQFamvgv8PL
0tZirI/Q/M2r3UrHBAJ7BXiCvrPXHTk1vYEq6Y1XxZ6X18gO/mCEr1C+lBWx
-----END CERTIFICATE-----
Generated at Thu Apr 25 07:19:05 2024 by rpki-client on console-fra.rpki-client.org