Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/paap6sGs925VLHi914unT-3dP_k.cer
File:                     paap6sGs925VLHi914unT-3dP_k.cer (raw, json)
Hash identifier:          kBJvxOME3ieBlxYRmdZTnCLKgNGI7Ry+fNHn5C18v9A=
Subject key identifier:   A5:A6:A9:EA:C1:AC:F7:6E:55:2C:78:BD:D7:8B:A7:4F:ED:DD:3F:F9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01A4EB
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 24 May 2023 13:03:54 +0000
Certificate not after:    Tue 30 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 59365
                          IP: 103.231.228.0/22
                          IP: 157.119.48.0/22
                          IP: 2404:4b80::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 May 2024 21:46:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107755 (0x1a4eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May 24 13:03:54 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=A9129AD6/serialNumber=A5A6A9EAC1ACF76E552C78BDD78BA74FEDDD3FF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:25:b4:93:24:c9:f7:1a:98:75:76:22:ea:66:
                    f6:a5:3a:a7:01:bc:25:65:a7:a6:75:4a:4b:ad:fc:
                    87:bd:5c:07:9e:cf:47:5e:af:b4:7a:ba:d6:9e:66:
                    19:bc:ae:f9:a2:7c:cf:56:a8:dc:73:6f:46:ce:68:
                    69:7e:74:b8:db:94:90:ab:a2:b0:b1:3f:34:c7:d2:
                    b9:8c:44:1b:8e:45:91:95:45:09:22:c7:2f:bf:86:
                    9d:52:c8:64:d8:45:32:d3:92:d0:42:7a:c0:11:cb:
                    c0:d0:36:fa:87:43:28:55:a0:68:42:c9:2d:39:6b:
                    13:c7:0a:8f:d7:f5:c8:ba:11:2e:c0:d6:4c:d5:eb:
                    67:ed:7a:4e:a8:00:ba:da:33:e0:73:48:27:38:59:
                    90:64:b7:bc:61:02:25:6f:1a:c2:ac:09:c7:dd:29:
                    fa:28:7d:d9:54:40:e9:e7:f0:bb:2e:6b:b1:12:36:
                    32:d2:11:3e:fd:60:ae:ae:73:d2:b1:7c:67:3b:30:
                    e3:ae:14:e2:b9:2d:1f:c3:9e:c0:c2:62:2e:74:03:
                    54:b8:55:0d:8a:e0:9c:82:39:20:44:7f:5e:7a:51:
                    18:81:e3:af:0c:a7:0b:b0:ec:ae:79:92:40:3a:87:
                    47:d3:fc:76:66:12:96:ed:4a:5f:d8:92:da:0b:ef:
                    af:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:A6:A9:EA:C1:AC:F7:6E:55:2C:78:BD:D7:8B:A7:4F:ED:DD:3F:F9
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59365

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.231.228.0/22
                  157.119.48.0/22
                IPv6:
                  2404:4b80::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:8e:bd:6f:00:48:3f:98:eb:65:35:7d:dc:a3:c3:e0:8c:d2:
         ed:33:ba:4b:6d:28:26:27:68:bb:17:a7:15:c7:6f:2a:5a:1d:
         6c:fc:d4:8f:86:a2:d9:18:0f:dc:e0:5a:8e:00:ba:3a:b0:e2:
         64:f2:f7:49:f5:78:bf:6c:d3:71:73:4e:e8:4e:bb:f1:ef:8b:
         c4:ec:ac:0f:76:1e:43:de:02:65:b1:9e:93:76:ef:d1:35:c5:
         24:27:cc:cd:3e:62:2c:a6:41:0a:9f:2b:be:24:2f:3f:3b:02:
         0a:fb:a4:77:12:14:78:75:d7:15:1d:fe:b0:35:9d:2c:ca:2e:
         9d:50:bb:9e:25:0a:bf:52:aa:a0:50:4d:da:9a:e9:6c:c5:3a:
         23:c0:19:02:44:53:17:bc:15:cc:e1:03:a9:9d:ca:f5:7e:0a:
         75:ec:e5:f0:6b:c4:b9:f5:12:be:a6:01:43:9a:79:25:00:dd:
         bf:cd:c7:64:9c:8c:cb:52:40:28:e4:c6:02:b0:06:59:84:9c:
         00:91:f8:6e:26:be:c8:05:21:e0:27:d2:16:7d:5b:98:a8:ae:
         c2:86:1a:76:f9:b9:02:c4:fe:20:84:03:90:f2:54:14:02:4f:
         a5:6a:06:fd:51:9f:df:9b:fe:c1:78:7b:56:ce:84:fe:06:de:
         ec:e1:43:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 23:35:22 2024 by rpki-client on console-ams.rpki-client.org