Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer
File:                     rBnGa8SzHOuTC6auDW63R7EKtgY.cer (raw, json)
Hash identifier:          M8DxBvxVr0WwN/04A2fb1ucML9wVFe10iehzT/poznU=
Subject key identifier:   AC:19:C6:6B:C4:B3:1C:EB:93:0B:A6:AE:0D:6E:B7:47:B1:0A:B6:06
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01A592
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sun 28 May 2023 14:06:09 +0000
Certificate not after:    Tue 30 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 38172
                          AS: 45603
                          IP: 58.84.208.0/20
                          IP: 103.153.242.0/23
                          IP: 103.246.180.0/22
                          IP: 110.50.16.0/21
                          IP: 119.12.208.0/20
                          IP: 122.129.128.0/19
                          IP: 123.255.208.0/20
                          IP: 203.169.16.0/21
                          IP: 203.175.112.0/21
                          IP: 2404:da00::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 13:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107922 (0x1a592)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May 28 14:06:09 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=A9141E28/serialNumber=AC19C66BC4B31CEB930BA6AE0D6EB747B10AB606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b4:93:82:d3:1f:9c:e2:de:c1:24:eb:4d:6b:
                    69:aa:37:1a:2f:31:43:c0:00:8c:8f:f6:ff:c3:ca:
                    ab:fa:c9:4e:80:42:86:23:89:bc:a8:45:30:78:cd:
                    96:48:b8:77:18:87:cc:25:15:73:7e:28:d0:ac:b8:
                    69:3b:8f:c0:63:8f:7d:d6:23:8d:31:e2:fe:25:85:
                    7b:93:7b:2b:ae:75:1d:1f:d5:09:82:cf:e7:c0:89:
                    93:6d:a0:1a:5e:e9:b4:83:d8:b2:fd:8b:c6:fe:85:
                    ef:e5:89:bb:a8:23:d5:ab:d2:65:e6:19:32:d5:a8:
                    2d:f7:01:09:73:1e:fe:30:f2:f6:77:cc:2f:fb:4c:
                    cf:16:4b:8c:9e:f8:aa:6b:98:c4:44:b6:24:5b:fd:
                    68:d9:45:f2:c0:4e:06:c4:df:41:88:fe:cc:b4:dc:
                    03:a5:7c:9f:28:38:5f:10:03:04:1e:b7:43:ac:09:
                    6d:c9:fa:b9:b1:22:68:18:9c:29:fc:3c:76:c5:1a:
                    ef:d1:3c:8b:18:f8:1e:98:73:7c:4e:de:9d:08:11:
                    a7:b9:4f:0c:9e:b3:f9:ec:ca:39:46:58:b9:1f:3f:
                    4e:a7:69:0e:52:4f:18:2d:18:63:ea:a0:9f:78:49:
                    f5:ea:7b:1b:a9:f6:a7:7c:f3:5a:9f:2c:35:cc:56:
                    bc:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:19:C6:6B:C4:B3:1C:EB:93:0B:A6:AE:0D:6E:B7:47:B1:0A:B6:06
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  38172
                  45603

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.84.208.0/20
                  103.153.242.0/23
                  103.246.180.0/22
                  110.50.16.0/21
                  119.12.208.0/20
                  122.129.128.0/19
                  123.255.208.0/20
                  203.169.16.0/21
                  203.175.112.0/21
                IPv6:
                  2404:da00::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:5d:f5:6c:1f:26:cd:e6:94:52:77:c3:50:cb:a5:c7:79:04:
         26:8e:d4:86:a0:cf:27:91:e5:a5:7e:e6:37:a8:b2:03:14:55:
         8c:95:60:7d:5c:4f:fa:ec:d2:f5:99:f4:bd:86:a6:c7:a9:26:
         22:40:86:7a:4c:07:bf:80:52:d7:72:49:63:8b:4a:f7:aa:a1:
         11:e4:7e:e1:3f:37:35:54:5b:cb:11:d1:00:9d:c4:93:d2:d9:
         67:62:0b:18:b1:00:27:a3:10:0e:72:75:3c:fc:6a:f2:fa:d6:
         6d:e2:45:2a:76:06:0b:62:d4:be:19:6f:54:5f:1c:20:5d:9c:
         2c:88:76:2c:63:f7:4c:d7:72:03:94:19:8e:49:8a:47:01:85:
         61:07:21:0f:d9:01:58:8b:38:f3:b9:be:d5:b6:ff:cd:fa:a8:
         cd:9f:d5:ac:66:c5:80:14:72:2e:4e:40:aa:54:e6:2b:7f:90:
         a3:cd:d5:f1:5a:9c:97:a3:5a:36:29:63:3c:d7:0d:1f:e5:13:
         c6:46:18:13:5e:0b:90:0f:90:99:97:0b:56:16:0d:94:64:51:
         69:c2:29:75:95:ff:83:6c:44:8c:ac:7c:0e:66:47:ad:cf:f1:
         20:54:de:d9:9b:eb:af:a5:10:7a:79:fb:98:03:af:fd:86:7b:
         a3:cc:f2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 14:08:53 2024 by rpki-client on console-ams.rpki-client.org