Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer
File:                     rHyecYIsBWGFGGRT-WCywejKlOM.cer (raw, json)
Hash identifier:          vh5Wycve8v2CaNTXynQOO+iPqx3HDybzmUQL8SyYemA=
Subject key identifier:   AC:7C:9E:71:82:2C:05:61:85:18:64:53:F9:60:B2:C1:E8:CA:94:E3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01A5B2
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sun 28 May 2023 21:25:11 +0000
Certificate not after:    Tue 30 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 45947
                          IP: 202.43.84.0/22
                          IP: 203.22.215.0/24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 21:10:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107954 (0x1a5b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May 28 21:25:11 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=A91F4BB3/serialNumber=AC7C9E71822C056185186453F960B2C1E8CA94E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:cb:67:fb:a5:ed:50:cd:bb:78:e9:a5:31:be:
                    df:5f:a0:07:d9:65:1f:21:45:fd:1a:98:45:c1:7b:
                    73:10:d0:98:d1:be:a9:07:c4:12:29:af:83:d6:85:
                    fd:33:f9:49:e1:55:6f:de:d1:5a:01:8e:96:fc:50:
                    af:be:d4:5e:db:e0:4f:c4:14:20:80:13:0e:fd:15:
                    05:e5:c2:40:38:88:ef:94:c7:11:b9:6d:eb:57:23:
                    c3:a9:42:1e:57:3a:55:bb:9e:1b:c7:74:a9:8e:cc:
                    49:c7:30:55:69:99:5e:2c:6a:ba:00:dd:41:98:bc:
                    99:6a:81:de:b7:9a:00:f3:0c:b1:db:e9:f1:40:b3:
                    3b:d0:ae:e2:77:ee:31:0c:3c:ef:ab:07:6c:1a:44:
                    1d:56:6c:be:21:2e:b7:62:63:c1:31:37:8a:32:a0:
                    fd:e2:11:ae:81:55:4e:e1:21:99:cb:74:56:0d:f5:
                    f2:a1:b6:c5:b3:fd:75:76:b2:c8:5f:15:b6:38:18:
                    03:3b:bc:31:8a:42:82:68:04:22:ac:0c:19:e0:a8:
                    93:cd:11:c9:1b:59:09:e5:49:a9:3f:a1:86:53:02:
                    34:74:aa:3f:77:3d:81:fb:42:2c:ad:96:b5:98:8a:
                    6a:69:8d:69:e7:02:18:cd:d6:88:67:8c:e2:8b:85:
                    7f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:7C:9E:71:82:2C:05:61:85:18:64:53:F9:60:B2:C1:E8:CA:94:E3
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  45947

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.43.84.0/22
                  203.22.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:99:61:b5:71:d8:6b:ad:33:87:7f:af:c2:ec:92:03:87:1e:
         42:23:d7:4b:16:79:99:ba:84:fc:ca:51:51:80:4a:6f:91:8e:
         a9:70:a3:85:29:78:ee:ac:34:ab:d3:a1:7b:04:76:c3:ff:68:
         92:4c:3f:0c:a8:ce:36:49:5f:cc:2a:e6:e4:92:f9:c5:65:00:
         0a:b0:ec:2d:04:57:d9:97:46:ed:03:02:16:26:8f:4e:11:fa:
         cf:ba:df:66:af:08:b9:de:19:21:94:a0:23:bc:d1:dd:e6:09:
         cc:07:d3:f5:ce:44:fe:1b:a9:4f:c2:78:8e:95:bf:df:d9:c4:
         22:ce:eb:67:de:e4:57:19:36:84:2f:f3:4d:ce:a0:28:a6:33:
         49:c9:5c:c0:36:62:c7:0b:7b:5c:bc:e7:ac:7d:f4:49:65:27:
         78:71:09:e2:38:79:7b:ab:98:90:a9:c1:ce:aa:f7:d7:d9:f4:
         e4:60:ea:5d:de:fd:12:40:f2:b4:9c:b7:5b:8e:3d:f8:68:76:
         b7:4a:d2:06:42:a5:af:6c:a4:b3:e2:6b:ad:1e:7a:ed:02:93:
         83:d2:2c:56:f4:57:d4:87:95:24:14:c6:95:08:84:bc:0d:e3:
         7f:64:fb:6c:2f:dd:73:fd:75:43:2d:67:c5:1e:39:1b:f5:07:
         53:72:fd:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:34:36 2024 by rpki-client on console-fra.rpki-client.org