Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qqYttH8BKybdhpjizDXejylDd2E.cer
File:                     qqYttH8BKybdhpjizDXejylDd2E.cer (raw, json)
Hash identifier:          mHwEdjbFzGhnQPqbvHVswQhY8KFTMwnzqPijRI4FAVs=
Subject key identifier:   AA:A6:2D:B4:7F:01:2B:26:DD:86:98:E2:CC:35:DE:8F:29:43:77:61
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01C932
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 06 Nov 2023 17:02:27 +0000
Certificate not after:    Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources:    AS: 45753
                          IP: 103.1.224.0/22
                          IP: 103.199.104.0/22
                          IP: 112.121.160.0/19
                          IP: 137.59.20.0/22
                          IP: 180.178.32.0/19
                          IP: 182.16.0.0/17
                          IP: 2406:8680::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 21:10:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117042 (0x1c932)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov  6 17:02:27 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=A9178EB0/serialNumber=AAA62DB47F012B26DD8698E2CC35DE8F29437761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ff:05:6d:43:aa:6c:de:ea:12:73:27:80:85:
                    f9:cb:39:8b:5f:f0:1a:7a:55:30:2e:a0:90:1e:c1:
                    68:57:01:ad:3a:fe:9e:9f:c0:b2:50:95:e0:4c:5e:
                    9b:06:26:10:13:13:c6:5d:53:3e:f4:6e:dd:ff:cc:
                    82:87:26:73:9f:75:09:be:7e:c8:7f:86:51:64:dd:
                    36:49:48:4b:d4:b5:7b:fb:e6:99:3b:e4:b7:68:5e:
                    e9:67:9c:67:33:a1:27:c2:fa:51:ee:26:ed:98:d3:
                    5d:ae:e6:70:17:64:ea:93:bc:63:57:ff:13:a2:f0:
                    06:ff:26:99:a4:8b:f3:40:60:9d:eb:95:68:a1:f7:
                    82:6a:af:7f:f3:29:41:a0:ea:bf:1a:45:02:db:71:
                    c1:49:4b:c0:ea:1d:cf:13:41:5f:fa:aa:c7:c4:b3:
                    10:2d:f7:ff:9f:96:3d:cd:c9:f4:cc:ba:ee:97:63:
                    f0:dc:78:bc:02:7c:dc:f3:48:a6:50:b3:4f:36:fb:
                    ec:6a:93:8b:61:43:32:f3:50:34:99:0d:0a:47:ff:
                    05:14:4d:a8:41:1d:e8:a6:4c:89:3e:31:40:61:71:
                    f4:bb:85:41:f3:e2:aa:64:d7:91:2c:fc:71:15:f9:
                    62:15:af:17:2e:67:63:8d:f1:22:b1:2e:a1:50:40:
                    4f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A6:2D:B4:7F:01:2B:26:DD:86:98:E2:CC:35:DE:8F:29:43:77:61
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  45753

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.1.224.0/22
                  103.199.104.0/22
                  112.121.160.0/19
                  137.59.20.0/22
                  180.178.32.0/19
                  182.16.0.0/17
                IPv6:
                  2406:8680::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:25:a6:41:46:e9:d2:62:4a:e8:e1:c4:44:32:53:42:bc:92:
         41:ca:5a:73:8b:d6:d6:54:b6:8d:d2:6b:6a:0e:ec:4b:39:b2:
         1e:dd:23:5d:2f:ec:f4:4f:e8:3a:45:2b:2c:94:67:51:f8:85:
         e1:39:42:f8:f6:55:8f:e8:8c:5d:1c:9d:0c:82:d0:c9:21:16:
         ab:9b:9c:09:13:68:54:05:5e:e1:72:ea:fd:48:72:96:ef:fe:
         2e:5a:31:7c:08:99:b8:6a:9c:67:88:25:95:73:77:87:96:5b:
         12:b6:58:79:c9:eb:3b:bc:b9:57:c2:65:93:92:3d:ae:78:fe:
         cf:a2:8d:b5:ee:21:04:8e:bc:ce:ac:09:b6:60:c8:71:7e:83:
         92:3a:41:83:9e:11:e6:d7:f2:a0:6b:d8:60:5e:8f:07:ef:dd:
         fc:04:c1:19:fb:94:fc:f2:84:89:d2:34:b2:24:2a:88:34:a5:
         13:00:ab:aa:2c:0e:ea:ea:f2:9f:dc:a2:7f:9c:68:41:1b:38:
         28:60:96:35:f8:b1:14:44:d3:ca:9b:9f:c5:c7:b9:0a:3a:75:
         7c:60:ce:1d:02:a5:b6:f1:b3:e6:f7:54:26:e3:0b:15:e0:e1:
         43:27:0f:62:1d:a8:a5:f3:cd:64:a8:58:c7:bb:97:1c:77:81:
         93:92:93:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:34:36 2024 by rpki-client on console-fra.rpki-client.org