Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer
File:                     qXEsy37uAkrriHZ7di4Qk7FA_24.cer (raw, json)
Hash identifier:          EBpijXImogqZVdHnPN57bZV3uiXARyspPw0Ptdy7oKc=
Subject key identifier:   A9:71:2C:CB:7E:EE:02:4A:EB:88:76:7B:76:2E:10:93:B1:40:FF:6E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01B0E7
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 18 Jul 2023 17:56:06 +0000
Certificate not after:    Sat 31 Aug 2024 00:00:00 +0000
Subordinate resources:    AS: 59382
                          IP: 103.237.36.0/22
                          IP: 160.202.144.0/22
                          IP: 2401:e7c0::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 07:49:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110823 (0x1b0e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 18 17:56:06 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=A9148B6A/serialNumber=A9712CCB7EEE024AEB88767B762E1093B140FF6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:64:0e:71:c8:3e:e6:6a:1e:5a:3e:ad:63:ec:
                    81:2c:b4:52:cf:92:6e:77:17:52:44:40:49:cf:59:
                    d1:51:19:57:3e:9f:92:3f:c5:d0:45:1f:16:cc:f6:
                    47:e8:b7:49:6c:91:c0:a5:1e:20:6a:3b:1a:38:1d:
                    f6:62:7e:01:90:21:87:98:df:c0:c9:ec:b1:e4:68:
                    dc:89:85:1c:f5:cc:6c:c6:ff:21:b0:ad:da:5f:cc:
                    2e:02:f8:1c:b4:5a:a8:f8:12:6c:61:10:4b:1b:56:
                    c6:ba:38:68:a0:6f:00:a0:c8:ac:a9:6c:b4:a4:9d:
                    f5:26:2e:2c:c7:4b:a0:4b:97:74:fe:b7:4c:cc:69:
                    d8:92:d8:9c:f7:1e:a9:0d:b7:a8:5a:30:95:fc:ef:
                    c9:f0:76:69:25:8e:5d:19:0a:a3:e5:ac:59:9e:12:
                    42:f1:b1:eb:d9:bd:d0:e3:3d:92:1a:35:4c:9f:9f:
                    82:64:79:ab:29:90:ed:c7:64:da:96:76:81:ee:e7:
                    c7:cd:50:c3:34:f3:db:36:ea:d0:05:21:75:9c:07:
                    d0:8d:55:c0:72:94:bf:55:ca:68:fa:19:03:56:3a:
                    b0:1f:ec:32:a1:7a:c9:f6:7c:d1:01:8a:4b:b3:06:
                    21:db:21:28:57:9e:7a:08:0e:3b:0b:5a:57:b0:e5:
                    a2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:71:2C:CB:7E:EE:02:4A:EB:88:76:7B:76:2E:10:93:B1:40:FF:6E
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59382

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.237.36.0/22
                  160.202.144.0/22
                IPv6:
                  2401:e7c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:d7:5e:4c:19:db:ca:37:b1:07:90:24:29:41:43:3f:04:e2:
         72:31:f4:a6:a5:a9:bd:66:e7:f0:f3:54:9a:b1:7f:8d:ab:ff:
         2c:fd:cd:c9:b3:dd:8f:d8:38:2d:70:45:c1:fb:c0:b7:7c:f0:
         f2:0f:e6:0f:6f:35:11:de:ce:f3:27:4b:c0:6d:7a:7d:e2:9e:
         5b:8a:10:6b:55:ef:6c:80:08:7f:e5:43:94:a9:c6:20:0e:4c:
         50:3b:88:e7:e0:83:93:ec:dc:e6:31:a7:5f:49:4e:ae:f1:dc:
         9e:e2:de:38:05:87:59:71:e9:50:c3:54:98:e5:23:c7:d1:ae:
         e4:0b:f1:5e:c6:f1:28:36:09:63:8c:7b:78:e4:50:25:74:6f:
         2f:8f:0c:8e:9b:52:b7:46:c7:fb:0b:2e:94:0e:61:89:54:29:
         e2:24:4c:ed:bd:f5:fd:5a:61:8f:3a:e0:61:04:e3:6f:f4:f0:
         e8:4a:33:dc:b0:c6:39:16:0d:dd:bd:45:63:7f:2e:ce:6d:df:
         b1:4e:28:87:8d:d5:c1:d8:69:12:35:ef:39:6c:3d:8a:42:fd:
         b7:e4:ce:bf:ad:b4:f3:7d:0e:81:9c:91:af:77:6b:bb:5c:d7:
         b0:b4:14:71:5a:fc:c5:e8:55:65:ad:85:2a:c0:4a:cd:a2:56:
         67:7f:48:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:03:11 2024 by rpki-client on console-ams.rpki-client.org