Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfsx1NUSX3yarlADNaSA_HeQjxU.cer
File:                     pfsx1NUSX3yarlADNaSA_HeQjxU.cer (raw, json)
Hash identifier:          Sbpsgjfc62083TTKq4aY61H/RSkhMvISzCP9aHCoA8E=
Subject key identifier:   A5:FB:31:D4:D5:12:5F:7C:9A:AE:50:03:35:A4:80:FC:77:90:8F:15
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01C663
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 27 Oct 2023 04:43:38 +0000
Certificate not after:    Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 136000
                          IP: 103.79.104.0/22
                          IP: 103.156.156.0/23
                          IP: 202.91.44.0/22
                          IP: 2400:3740::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 00:57:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116323 (0x1c663)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct 27 04:43:38 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=A91A4A13/serialNumber=A5FB31D4D5125F7C9AAE500335A480FC77908F15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ab:e8:73:52:64:16:76:87:d4:51:cd:84:f4:
                    51:25:a6:71:47:16:af:65:f5:4d:63:d0:d6:3b:b6:
                    7e:63:70:2b:d2:87:4f:09:68:ba:fb:d8:aa:8a:50:
                    ac:f6:68:f4:4d:74:97:c4:c5:5d:86:bd:0d:6e:70:
                    50:e0:26:3c:3e:35:aa:f6:70:23:19:61:4e:19:f5:
                    5e:84:5e:d3:a7:17:15:fd:6d:9f:09:f8:a4:0d:e7:
                    c1:e9:5a:ea:ad:c7:ad:f8:af:15:26:36:db:bf:60:
                    b0:7e:18:93:74:0f:44:a6:38:f9:9d:8f:9a:96:8a:
                    88:d6:16:67:ff:52:5f:ac:86:39:e7:be:d3:f1:98:
                    95:5c:cd:fd:39:ab:95:bd:f5:cb:3e:e2:e8:a6:f5:
                    54:c8:25:10:ee:87:f7:86:32:c8:f8:bb:bd:0e:f0:
                    8f:69:e8:0b:6a:83:df:3b:e9:69:f3:ca:ed:32:54:
                    94:f3:e7:62:c2:e8:80:a4:25:b1:11:8e:f3:5d:85:
                    86:6a:20:1a:68:f4:5c:89:a9:d3:07:59:6e:40:53:
                    1a:00:41:b9:fe:2e:77:42:13:97:84:d6:f5:ab:50:
                    ed:09:a8:cd:73:fc:01:de:15:21:19:c2:e4:8a:b2:
                    ba:b3:47:42:f0:04:e4:ff:26:87:96:af:e9:28:1c:
                    de:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:FB:31:D4:D5:12:5F:7C:9A:AE:50:03:35:A4:80:FC:77:90:8F:15
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  136000

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.79.104.0/22
                  103.156.156.0/23
                  202.91.44.0/22
                IPv6:
                  2400:3740::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:27:31:1b:77:2b:42:3d:a7:52:b9:1b:c5:f6:97:9e:f3:94:
         ee:8f:4f:d1:3a:ee:f1:96:78:01:d0:32:c2:7e:73:8e:c4:19:
         bd:41:71:ec:e9:c5:9d:b8:78:9f:84:fb:96:d9:fa:9e:c5:dc:
         af:f5:c3:91:54:79:fa:42:71:6f:f9:32:ae:6c:07:42:30:9b:
         b1:fe:00:a3:3d:bb:89:2c:46:0f:6e:c6:33:65:8e:7c:53:d8:
         b5:e2:c2:8c:70:73:cb:1a:3f:9b:01:8f:1e:4f:d0:8e:cc:76:
         55:94:57:1b:03:6f:c7:19:7f:6e:d9:93:32:b8:09:0a:1f:a4:
         a3:61:32:21:59:18:5a:68:52:df:0a:09:b9:e5:28:a4:73:60:
         04:f3:0b:83:dc:e8:73:a7:d8:b6:b6:91:fe:6c:36:05:3e:06:
         14:ed:2c:bb:5a:c6:64:89:8d:61:95:1f:34:a6:65:46:c1:7c:
         e4:eb:13:e0:a9:43:62:e1:fd:1b:fe:49:56:ad:14:ec:70:8f:
         9a:3a:21:e8:90:93:2c:ec:bd:a1:d9:2a:24:3a:42:f0:b7:0d:
         16:1e:76:06:e3:58:e7:f3:bb:89:12:08:90:ca:4d:c1:7c:ef:
         93:a6:53:f4:be:df:38:e4:93:85:32:55:1f:67:f7:5b:12:6e:
         ef:05:0c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 02:02:19 2024 by rpki-client on console-ams.rpki-client.org