Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5m0raB1Aagp1W8h2o613DIDSlY.cer
File:                     s5m0raB1Aagp1W8h2o613DIDSlY.cer (raw, json)
Hash identifier:          HGv8pkFW1Q9TYGnIEvXAmZsaYcIhBbW6nx2A9iJ6F0c=
Subject key identifier:   B3:99:B4:AD:A0:75:01:A8:29:D5:6F:21:DA:8E:B5:DC:32:03:4A:56
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01CCC7
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91D98FC/1C899E26F4EC11E98FBE9B0FC4F9AE02/s5m0raB1Aagp1W8h2o613DIDSlY.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91D98FC/1C899E26F4EC11E98FBE9B0FC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 24 Nov 2023 18:56:39 +0000
Certificate not after:    Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 137045
                          IP: 103.102.246.0/23
                          IP: 2001:df1:4d80::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 07:49:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117959 (0x1ccc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov 24 18:56:39 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=A91D98FC/serialNumber=B399B4ADA07501A829D56F21DA8EB5DC32034A56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c0:96:96:9f:3e:d8:8c:6d:67:15:d0:a9:da:
                    8c:aa:de:30:12:02:e8:ac:00:ab:6c:5c:c8:47:43:
                    0e:d5:35:a1:fc:ea:f5:fa:f2:01:38:5d:f9:92:43:
                    ab:8f:d2:40:20:e7:61:49:32:fe:b7:32:e1:bb:d0:
                    3c:25:99:1f:15:77:74:9c:0b:3a:32:4f:69:43:c3:
                    54:f1:35:ac:cb:6f:57:23:52:cd:df:36:f0:1b:3f:
                    75:75:91:e8:fb:77:21:12:0e:59:88:f7:cf:43:25:
                    4c:a6:73:e5:4a:54:2e:34:19:3a:e3:ff:0b:f4:b7:
                    31:92:78:25:e6:12:1d:e7:f8:05:1c:54:5c:b4:ed:
                    4e:57:fc:d6:36:e9:2e:d8:84:ce:d7:6e:3c:75:31:
                    53:a4:05:d5:6b:b1:e3:a0:a7:ce:2d:a0:00:04:6b:
                    20:f5:73:95:97:f9:04:9c:92:93:63:cb:74:7b:81:
                    51:b0:0a:63:5e:3b:a2:ba:4e:b7:6f:2b:95:40:86:
                    ef:af:8b:e2:76:c4:27:c5:6b:e9:e6:dd:a0:1f:76:
                    cb:fa:4a:43:69:84:ab:d1:b1:82:ad:ac:5b:c5:1f:
                    c4:8e:fd:82:b1:09:d3:99:80:c3:73:70:2b:11:f8:
                    cf:18:65:0c:86:36:b9:49:a0:fa:e9:76:b4:a2:5e:
                    7c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:99:B4:AD:A0:75:01:A8:29:D5:6F:21:DA:8E:B5:DC:32:03:4A:56
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D98FC/1C899E26F4EC11E98FBE9B0FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D98FC/1C899E26F4EC11E98FBE9B0FC4F9AE02/s5m0raB1Aagp1W8h2o613DIDSlY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137045

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.102.246.0/23
                IPv6:
                  2001:df1:4d80::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:30:27:bf:8e:38:5d:c7:66:68:8b:3e:5d:8a:77:e9:db:1b:
         dd:bf:7f:16:6d:e1:d0:0d:58:d7:5c:3d:bf:c1:e1:0e:dd:9a:
         4a:58:fd:87:88:79:8d:36:cc:2f:ca:5b:c8:6e:e6:10:e5:18:
         2d:6e:90:17:47:7a:c3:06:ae:12:1c:57:f7:bc:fe:a8:f6:8c:
         ae:52:50:c8:10:09:6b:4c:b1:6f:48:c5:0f:80:d1:65:06:cf:
         68:0a:61:06:25:69:15:3d:4b:b8:d4:4c:2c:ae:b8:a9:f1:ab:
         db:ba:d6:a0:33:b4:9e:b9:2f:cf:16:a3:0a:0b:33:d4:bf:7d:
         87:bd:d0:40:c0:0e:43:dd:4d:46:7e:da:ef:f7:b8:6b:d0:24:
         d0:1c:5e:24:7f:1b:d6:8b:57:09:ea:f9:dd:f6:9e:10:5b:83:
         56:92:dc:7e:10:f1:81:a0:91:72:a3:16:f5:ac:3a:3a:98:e7:
         a7:90:ec:5b:39:60:97:bb:bd:62:34:a0:ac:d1:59:c9:38:d9:
         3e:69:21:23:55:e4:2f:52:73:2e:8f:bc:34:31:78:59:f5:6c:
         85:c2:af:87:4a:a5:e4:2c:65:48:dd:98:aa:f2:39:23:1c:80:
         df:14:be:64:9c:fc:37:c5:b8:2b:1a:e1:df:14:20:78:aa:cb:
         2d:ee:36:12
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----