Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZ9mmGknIBFUlstFlwLEOtxI1q0.cer
File:                     qZ9mmGknIBFUlstFlwLEOtxI1q0.cer (raw, json)
Hash identifier:          voHdhMK2KALuHiV3db2yyWWdmMcJOIt5Rzz+fFwEOhg=
Subject key identifier:   A9:9F:66:98:69:27:20:11:54:96:CB:45:97:02:C4:3A:DC:48:D6:AD
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01E68B
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 26 Mar 2024 05:56:35 +0000
Certificate not after:    Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 152659
                          IP: 103.7.98.0/24
                          IP: 103.41.108.0/24
                          IP: 103.246.235.0/24
                          IP: 2001:df0:256::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 May 2024 09:10:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124555 (0x1e68b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Mar 26 05:56:35 2024 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=A91CACCA/serialNumber=A99F6698692720115496CB459702C43ADC48D6AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:91:cc:06:c3:9a:80:26:b4:31:f8:b8:d4:0b:
                    2e:35:ca:f2:fc:f3:f5:f4:15:f7:28:c4:a0:dc:18:
                    11:91:8c:c6:d2:02:1c:c7:31:13:6e:62:36:a4:ee:
                    9a:40:7d:14:03:cc:e7:b7:cc:9f:53:34:34:10:98:
                    16:26:e6:1e:64:72:1a:70:bc:54:17:52:f7:d4:81:
                    b3:43:c9:24:d9:9a:cc:08:8b:0a:03:99:f8:65:c0:
                    3e:64:2d:1c:36:48:37:83:d2:f5:d0:36:42:65:bc:
                    09:da:83:a9:d6:ab:9c:f5:d0:24:ef:bd:26:39:17:
                    bc:4f:dd:4c:e9:cc:23:87:48:61:fc:07:c6:03:45:
                    55:43:d2:ed:4b:0e:95:4b:17:84:83:f8:0b:ef:59:
                    49:ed:20:c0:82:3c:91:59:0d:c1:40:30:41:3d:6c:
                    8e:38:9a:c0:96:d4:bd:13:d7:64:da:a0:9d:05:a2:
                    c9:35:71:a3:67:db:f2:2f:b1:0f:48:8d:aa:79:c9:
                    75:1d:82:9b:b8:1b:86:c8:23:6a:bc:50:91:c8:95:
                    20:1b:0b:88:b7:67:b4:d7:fd:70:f0:36:5f:01:dc:
                    a3:26:cf:eb:6e:be:c3:31:7f:10:26:1c:ee:33:ca:
                    38:82:34:a1:b4:cd:f1:0e:cc:b2:eb:a1:cd:10:7c:
                    ab:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:9F:66:98:69:27:20:11:54:96:CB:45:97:02:C4:3A:DC:48:D6:AD
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  152659

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.7.98.0/24
                  103.41.108.0/24
                  103.246.235.0/24
                IPv6:
                  2001:df0:256::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:3d:bd:fa:93:4c:1b:24:1b:b4:11:ee:da:6c:46:f6:75:2a:
         1f:7e:4e:ba:92:11:27:5a:5c:a6:fa:c9:09:b9:ec:6f:2c:a5:
         8a:f3:ca:22:8c:9a:f8:17:a4:2c:41:ee:71:62:a7:00:67:ac:
         b9:5b:10:bd:e0:82:af:9c:66:bd:50:56:fd:76:5e:0e:9a:53:
         de:97:3d:5f:5e:16:a4:a0:de:df:2b:f4:93:35:5e:07:47:8a:
         53:de:d8:7a:ba:90:c7:29:d3:8c:89:8a:c6:10:fc:02:f9:90:
         fe:cd:5b:66:ed:98:48:d6:8c:f3:dd:98:bb:d3:2a:3e:5e:95:
         5f:d0:b5:94:43:d7:4d:34:ab:71:df:a7:db:7d:26:f3:9f:e9:
         ba:b6:c0:0e:15:b6:bd:f9:ca:55:7f:cd:e5:71:02:af:d5:c8:
         e0:88:16:75:5a:b1:a6:7e:9d:90:1e:8b:44:63:46:8b:93:76:
         12:a3:50:00:4e:e3:3f:62:ee:cb:a0:7c:7e:64:41:08:62:b5:
         02:54:b7:74:20:0a:cc:07:20:b9:d8:ad:ec:cb:42:9d:9d:50:
         30:8f:78:24:e2:4b:bc:d3:46:f4:b9:fd:04:e1:cb:0f:7d:93:
         f3:74:4a:e3:83:2b:4f:f6:32:10:45:b7:1e:2a:1c:24:35:6f:
         6d:d0:18:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 10:32:01 2024 by rpki-client on console-fra.rpki-client.org