Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer
File:                     rpODqTtsWhNdJhOpfF3slgliM_E.cer (raw, json)
Hash identifier:          h7B2iutQSsjZwbtXEODqinhNJbcCpNNT7UnomxFKrEk=
Subject key identifier:   AE:93:83:A9:3B:6C:5A:13:5D:26:13:A9:7C:5D:EC:96:09:62:33:F1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01C6A2
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sat 28 Oct 2023 15:50:18 +0000
Certificate not after:    Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 56125
                          IP: 43.225.52.0/22
                          IP: 103.21.58.0/23
                          IP: 103.50.160.0/22
                          IP: 103.195.184.0/22
                          IP: 103.224.22.0/23
                          IP: 137.59.148.0/22
                          IP: 202.155.176.0/22
                          IP: 203.13.40.0/24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 00:38:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116386 (0x1c6a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct 28 15:50:18 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=A917748E/serialNumber=AE9383A93B6C5A135D2613A97C5DEC96096233F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:5b:d8:eb:d6:04:b6:69:43:2e:0e:8c:94:38:
                    c6:cc:e3:60:6b:fb:62:ec:b4:00:d0:90:5f:c7:c7:
                    86:0b:65:59:2d:60:49:a7:06:6e:fc:8d:3b:79:94:
                    64:50:fe:c1:4e:9b:d2:9b:82:73:3b:97:26:39:3f:
                    a8:3b:1d:72:9c:2a:e2:4f:96:58:bd:e8:bd:af:26:
                    57:6c:01:4f:6e:17:5b:e4:60:4d:20:98:ef:2f:aa:
                    22:81:ed:e7:d4:4c:46:77:40:6d:80:a1:9b:70:d2:
                    24:1d:6d:cd:9c:9a:50:81:54:08:7e:05:77:09:72:
                    37:dc:ea:b8:4c:1e:96:9d:89:52:9e:f3:a1:92:13:
                    8f:c9:60:42:6a:fc:2c:a3:3f:87:b8:04:f5:40:33:
                    53:1c:e8:8e:2c:6f:9c:a5:b0:da:a9:ab:9d:20:66:
                    e8:8e:22:76:af:60:b5:9c:86:58:16:48:94:7a:63:
                    2a:89:10:97:88:f1:af:8e:aa:6c:6a:ea:98:1b:af:
                    6d:d0:0c:2c:f3:e4:c5:5c:d0:fc:88:49:9c:6c:42:
                    2e:f7:7a:d4:34:dc:4b:7b:d8:f4:eb:c0:83:38:26:
                    6e:82:e8:d7:68:96:c1:e1:a1:1c:73:49:9b:b7:26:
                    dc:2b:37:39:a0:0d:08:74:69:9b:02:c1:cf:83:c1:
                    7f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:93:83:A9:3B:6C:5A:13:5D:26:13:A9:7C:5D:EC:96:09:62:33:F1
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  56125

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.225.52.0/22
                  103.21.58.0/23
                  103.50.160.0/22
                  103.195.184.0/22
                  103.224.22.0/23
                  137.59.148.0/22
                  202.155.176.0/22
                  203.13.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:0f:54:76:da:70:bd:cd:39:86:5c:90:a3:e9:30:f0:6c:bd:
         29:83:34:fc:02:12:85:d4:ef:92:cb:eb:01:1d:27:ca:fb:e7:
         b3:2f:42:9d:52:a3:9f:77:f1:dc:4a:4a:8f:3c:e8:59:b6:ed:
         6d:f3:02:3a:c1:8a:7c:bc:b7:17:13:fe:c9:03:c6:f4:5d:93:
         55:d5:bd:c1:1a:f5:21:3c:95:a4:26:46:81:d5:cd:da:d0:5b:
         bc:10:2b:26:42:7e:84:a0:e3:e6:be:0f:ad:4d:28:b4:af:be:
         af:9c:9f:b0:a4:77:58:b4:2e:af:78:0a:4e:dc:0a:d4:3c:4e:
         61:bf:35:14:7b:df:f8:ac:e7:d2:c9:66:c6:2e:47:9e:66:10:
         e3:16:5a:6e:f7:33:9d:e8:58:2c:4c:e0:57:65:0b:a8:61:53:
         ee:c3:cf:d3:83:93:c8:28:bb:2c:77:c7:40:76:dd:4a:bf:e4:
         e5:af:29:0b:cd:91:25:28:08:fb:d3:9a:cb:07:5c:76:77:0f:
         45:c2:90:1a:c6:e0:fa:49:8a:d0:4b:78:ec:aa:19:79:ba:c0:
         0b:ab:ca:78:43:a0:8c:00:6a:3b:55:69:fd:40:a7:3f:15:bb:
         74:88:68:14:22:7c:21:01:d1:63:4e:01:6f:8f:b0:f8:3c:e4:
         20:d7:d0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 01:45:55 2024 by rpki-client on console-ams.rpki-client.org