Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer
File:                     rXHewTibFKASABB2mR9Zq-LKseY.cer (raw, json)
Hash identifier:          wG9JFp40dr+YQAQXiNiztn0SiXrYHeQWPdAKldow+ag=
Subject key identifier:   AD:71:DE:C1:38:9B:14:A0:12:00:10:76:99:1F:59:AB:E2:CA:B1:E6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01F8DA
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 13 Jun 2024 07:02:13 +0000
Certificate not after:    Thu 01 May 2025 00:00:00 +0000
Subordinate resources:    AS: 140077
                          IP: 103.148.50.0/23
                          IP: 2405:cbc0::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Oct 2024 18:15:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129242 (0x1f8da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun 13 07:02:13 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=A91EAF4B/serialNumber=AD71DEC1389B14A012001076991F59ABE2CAB1E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b6:ef:21:4a:f3:d3:fa:8d:47:a9:94:7f:06:
                    b8:ca:06:82:a1:76:f9:2e:6d:03:48:4a:99:05:09:
                    6b:8b:fa:9c:a2:80:d9:1e:b3:e3:09:ff:a6:fc:9b:
                    0b:39:f6:e0:f1:13:26:d7:ba:9e:32:fa:f0:2c:92:
                    af:21:1c:54:a9:ec:27:3d:18:e0:81:12:6f:fe:0d:
                    10:88:42:a7:07:3b:2b:26:66:64:c8:47:37:04:45:
                    06:a9:0a:36:f9:00:a0:97:99:b2:a9:0d:6c:11:c4:
                    3c:8c:a6:41:88:c4:6d:93:67:2a:a1:d8:ee:de:5e:
                    5b:a3:98:6c:b1:3f:98:61:6e:96:3b:98:8d:83:2a:
                    07:8f:84:a7:5d:6f:f2:70:45:9a:96:54:c1:1e:02:
                    de:c2:a0:50:c1:9c:4b:41:c5:c4:4b:1a:82:9c:cc:
                    69:ff:c8:40:b1:89:5b:02:47:4a:e2:f9:1a:4b:5f:
                    da:b0:4c:5b:c4:0a:8b:3d:4a:30:ee:6d:34:9a:ef:
                    dc:20:0d:4b:f8:ac:02:ce:e6:e6:bf:fc:f0:64:9c:
                    2f:ee:6f:3e:b9:a3:94:36:63:39:0a:fc:cc:dc:f9:
                    12:b2:67:54:a1:a8:7d:95:ed:bb:7f:55:71:c2:2b:
                    43:64:66:38:bb:2f:66:38:a0:25:bd:f3:47:fa:f1:
                    70:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:71:DE:C1:38:9B:14:A0:12:00:10:76:99:1F:59:AB:E2:CA:B1:E6
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  140077

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.50.0/23
                IPv6:
                  2405:cbc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:4a:9f:9f:d7:49:c4:ae:71:18:cf:71:d3:e4:68:4a:b1:18:
         22:e3:d6:25:ed:39:b1:ea:55:02:8f:68:e3:fb:d7:3e:00:16:
         fd:03:24:b6:09:d8:29:da:e7:29:01:5d:c4:65:a9:63:d0:83:
         9b:56:77:7a:83:9b:ae:16:c0:7f:82:09:4e:5b:fc:ab:c6:f7:
         a2:0e:6e:2b:f6:19:ce:7c:bb:c0:9a:da:81:df:7e:c1:2e:70:
         02:11:74:55:4d:a5:b8:2d:9c:bf:b4:45:9a:bc:40:84:cd:a5:
         80:7e:ec:53:32:d4:86:e5:6d:02:71:2b:25:af:06:b1:fd:ed:
         3e:85:63:1c:c4:8e:58:97:f1:c2:e8:a8:ee:0d:ec:e3:af:c8:
         f2:04:41:63:68:94:64:22:88:69:ea:d6:43:d0:ff:01:5d:dc:
         a8:55:71:67:b2:93:7c:eb:16:c2:4e:10:9d:a3:90:cc:4a:28:
         28:c4:20:66:c8:fc:73:c7:9d:e4:e1:29:90:8d:56:a2:2c:26:
         b1:58:cb:eb:d6:fc:7c:ce:88:15:c4:15:e2:27:96:ce:b8:27:
         02:f2:c9:5b:7c:dc:ed:80:c9:f5:37:c9:e0:1b:39:e6:da:90:
         00:87:43:80:a2:19:f5:ab:10:99:2f:68:d7:be:5d:0b:88:17:
         b1:d6:ba:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 20:55:48 2024 by rpki-client on console-ams.rpki-client.org