Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMARlDOHfwx0KFe46lIPjaTtCVo.cer
File:                     rMARlDOHfwx0KFe46lIPjaTtCVo.cer (raw, json)
Hash identifier:          7auXocmCBzunTBnASV6iJBmUxfaRblzm7K4pGvO8lNg=
Subject key identifier:   AC:C0:11:94:33:87:7F:0C:74:28:57:B8:EA:52:0F:8D:A4:ED:09:5A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01ABD0
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 23 Jun 2023 14:48:47 +0000
Certificate not after:    Tue 30 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 139213
                          IP: 103.139.248.0/24
                          IP: 103.186.235.0/24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 06:50:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109520 (0x1abd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun 23 14:48:47 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=A915A5E7/serialNumber=ACC0119433877F0C742857B8EA520F8DA4ED095A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:85:1f:3a:ea:7a:59:ff:0a:f1:fa:3c:0e:93:
                    44:ba:27:64:71:73:e2:f2:30:1b:ff:e4:d6:03:21:
                    1f:cc:88:f3:51:23:68:67:27:be:b8:31:81:ec:1b:
                    5b:87:c3:e7:ca:2c:14:97:db:f3:04:c5:4c:1a:58:
                    83:13:b2:08:35:5b:c1:a0:63:18:0a:48:40:44:6f:
                    00:ef:1c:00:d9:de:63:92:a1:b7:13:35:a3:43:7a:
                    94:ec:ce:1b:49:8a:c2:82:45:7f:cc:4b:56:e6:90:
                    f7:c1:68:bc:c3:be:65:cb:1c:11:de:ae:60:8e:4a:
                    4b:06:35:d4:1c:48:55:4e:df:dc:6d:46:b5:0b:31:
                    d3:fb:c4:03:f2:51:12:e2:8b:0b:b8:d8:9d:4e:2d:
                    3d:7d:d9:7e:c9:36:8a:69:a1:4b:0a:26:15:de:8a:
                    a3:77:9b:21:e2:b1:fa:18:39:22:a7:35:44:26:9f:
                    56:33:90:85:68:da:d9:79:c6:18:43:e5:9d:d0:32:
                    89:5b:56:56:78:67:65:73:55:a7:ca:59:c4:e9:b3:
                    92:2e:85:89:cf:8c:57:43:97:0b:e2:bb:9f:a9:da:
                    60:50:ad:1e:b1:18:2a:6c:24:1a:75:b8:db:57:4e:
                    59:1d:83:5d:44:fc:6e:bc:37:48:5e:3f:e3:bf:98:
                    e1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C0:11:94:33:87:7F:0C:74:28:57:B8:EA:52:0F:8D:A4:ED:09:5A
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  139213

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.248.0/24
                  103.186.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:19:af:cd:85:e3:b7:4a:8a:05:59:f9:61:13:46:22:39:9b:
         61:ea:4b:5b:c5:d0:0f:4c:76:d3:c3:4e:6a:a2:f8:50:01:b2:
         3f:75:bc:d3:64:c2:ca:50:af:60:c3:6a:44:15:d4:9a:a9:a2:
         40:ea:1d:00:e7:25:4f:b5:7f:da:0d:48:ef:6b:9d:68:fd:4f:
         62:ad:30:85:da:d3:76:e4:08:f0:65:7b:dc:42:b2:b9:d5:e0:
         92:40:b7:c8:1b:e1:45:37:b6:1c:35:aa:e7:17:f3:17:0c:74:
         1f:44:8c:9e:61:4f:7b:56:6d:e2:6a:e2:7b:a1:6a:da:c8:74:
         3d:29:43:7f:ed:c0:53:6f:49:c8:57:6d:09:91:42:ab:14:59:
         1d:68:7d:cf:91:75:df:c1:0f:63:94:9e:84:3e:c8:20:7e:f0:
         b3:3c:00:a9:19:a1:4e:4a:e3:a9:70:3b:21:77:9b:36:53:df:
         a3:cd:82:2a:d4:b9:57:fb:05:3e:c0:a4:b3:ba:ce:22:8c:f5:
         34:fd:d2:9b:80:10:5b:3d:f0:fd:7e:34:1f:7f:c6:eb:79:6f:
         7f:fd:f4:3f:ca:9e:8f:f0:01:d5:11:55:ea:d4:36:25:ec:7e:
         1b:62:94:68:93:bd:76:d9:c8:16:33:72:77:5d:ae:bf:82:c4:
         7f:68:0c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 07:41:43 2024 by rpki-client on console-ams.rpki-client.org