Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer
File:                     t8K-zJe0I3nEStGuteBz4qPaUR4.cer (raw, json)
Hash identifier:          SAKv5QZAi5dXsBdKTSlLTGZpghPa9/KOS8Q8qAmjvt8=
Subject key identifier:   B7:C2:BE:CC:97:B4:23:79:C4:4A:D1:AE:B5:E0:73:E2:A3:DA:51:1E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01BDCF
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 15 Sep 2023 15:59:07 +0000
Certificate not after:    Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources:    AS: 149794
                          IP: 103.174.210.0/24
                          IP: 103.176.189.0/24
                          IP: 2400:7060::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Apr 2024 21:54:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114127 (0x1bdcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep 15 15:59:07 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=A9187E45/serialNumber=B7C2BECC97B42379C44AD1AEB5E073E2A3DA511E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:f3:5e:73:0d:2f:a4:6e:82:29:b1:9f:a5:44:
                    1c:96:3a:ab:d9:57:88:51:46:7d:38:13:37:55:fd:
                    a5:ef:13:a2:15:5a:62:c2:09:58:64:ff:18:83:d5:
                    b8:b4:b4:e0:45:1d:f8:04:88:94:8d:ee:2f:6d:62:
                    d4:37:78:bf:f0:79:17:06:9a:21:59:f7:02:6c:f3:
                    52:26:ca:b5:24:14:1c:ce:05:e9:0e:c3:6d:95:ac:
                    f9:8a:c3:9a:43:3e:9e:07:f4:aa:35:6e:b4:d2:55:
                    d8:71:45:80:c1:4d:65:c3:bc:59:10:2a:f9:a6:09:
                    5d:6c:a8:1f:89:7d:65:ca:ca:d4:1d:65:8d:6e:8d:
                    29:f2:18:f4:90:2a:37:ab:bc:76:44:da:22:44:49:
                    9a:b8:9f:43:06:6f:ec:93:d4:ea:25:20:df:24:8e:
                    b9:ec:a1:a6:01:95:10:50:88:fa:1b:df:ab:83:d2:
                    7f:8e:de:61:2c:cd:49:a8:31:12:6f:9c:89:52:f3:
                    1e:62:56:0f:70:64:6e:18:a5:8e:5e:b2:c9:a9:ec:
                    51:16:8d:2d:c1:79:4b:b1:a5:8a:ee:bf:28:a7:00:
                    ff:38:6a:c3:ad:25:3c:3b:65:76:07:72:05:44:0e:
                    ef:ea:94:ac:ea:8f:02:58:be:68:9a:1d:cb:7a:f4:
                    05:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:C2:BE:CC:97:B4:23:79:C4:4A:D1:AE:B5:E0:73:E2:A3:DA:51:1E
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  149794

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.210.0/24
                  103.176.189.0/24
                IPv6:
                  2400:7060::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:43:6e:da:91:6d:15:27:95:6c:38:aa:4c:94:50:ba:4f:3a:
         4e:39:0c:74:84:4b:62:a9:66:b0:33:a7:7d:31:cf:d0:0a:7b:
         ea:21:9d:92:d4:d1:73:51:53:a3:ec:74:b2:bc:5c:81:ed:ca:
         1e:26:e6:13:b6:af:02:23:3a:ac:bd:10:1b:a9:8b:64:dc:11:
         09:ef:8b:b5:db:55:ea:9c:b1:71:7a:09:b7:bd:55:b1:a5:7a:
         d0:25:77:61:72:be:cb:22:3a:9c:85:b2:f8:f7:04:b4:5a:94:
         a0:6a:24:94:59:fd:5d:0f:b2:db:c8:9f:95:d8:7d:b4:25:70:
         4c:d0:35:04:57:93:6d:81:b4:f1:4d:f9:5f:ab:d9:dd:5f:55:
         a5:38:15:a6:73:09:e6:68:0c:3c:b4:e9:f8:5c:10:b3:2d:cb:
         a7:48:37:81:8a:f0:6f:96:a0:05:92:cb:d2:dc:af:f3:de:bc:
         39:14:96:47:4b:e1:57:c9:af:a0:11:c1:3b:71:4f:89:19:09:
         88:78:26:45:dc:b1:4f:b3:e3:ff:6f:2c:a3:d2:5e:fc:1b:32:
         71:d8:61:33:77:6f:de:f7:9f:57:0f:87:8a:36:a9:11:31:83:
         c7:ae:18:ec:96:95:9e:a6:6e:09:3d:d0:33:4e:3e:84:fa:7f:
         75:49:f7:5d
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIDAb3PMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMDkxNTE1NTkwN1oXDTI1MDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxODdFNDUxMTAvBgNVBAUTKEI3QzJCRUNDOTdCNDIzNzlDNDRBRDFB
RUI1RTA3M0UyQTNEQTUxMUUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDw815zDS+kboIpsZ+lRByWOqvZV4hRRn04EzdV/aXvE6IVWmLCCVhk/xiD1bi0
tOBFHfgEiJSN7i9tYtQ3eL/weRcGmiFZ9wJs81ImyrUkFBzOBekOw22VrPmKw5pD
Pp4H9Ko1brTSVdhxRYDBTWXDvFkQKvmmCV1sqB+JfWXKytQdZY1ujSnyGPSQKjer
vHZE2iJESZq4n0MGb+yT1OolIN8kjrnsoaYBlRBQiPob36uD0n+O3mEszUmoMRJv
nIlS8x5iVg9wZG4YpY5essmp7FEWjS3BeUuxpYruvyinAP84asOtJTw7ZXYHcgVE
Du/qlKzqjwJYvmiaHct69AWrAgMBAAGjggMkMIIDIDAdBgNVHQ4EFgQUt8K+zJe0
I3nEStGuteBz4qPaUR4wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTg3RTQ1LzVGNkFCMTBDNTI5NzExRUNBMzc3RTY3MEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE4N0U0NS81RjZBQjEwQzUyOTcxMUVDQTM3N0U2NzBDNEY5QUUwMi90OEstekpl
MEkzbkVTdEd1dGVCejRxUGFVUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAkkiMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAZ67SAwQAZ7C9
MA0EAgACMAcDBQAkAHBgMA0GCSqGSIb3DQEBCwUAA4IBAQBwQ27akW0VJ5VsOKpM
lFC6TzpOOQx0hEtiqWawM6d9Mc/QCnvqIZ2S1NFzUVOj7HSyvFyB7coeJuYTtq8C
IzqsvRAbqYtk3BEJ74u121XqnLFxegm3vVWxpXrQJXdhcr7LIjqchbL49wS0WpSg
aiSUWf1dD7LbyJ+V2H20JXBM0DUEV5NtgbTxTflfq9ndX1WlOBWmcwnmaAw8tOn4
XBCzLcunSDeBivBvlqAFksvS3K/z3rw5FJZHS+FXya+gEcE7cU+JGQmIeCZF3LFP
s+P/byyj0l78GzJx2GEzd2/e959XD4eKNqkRMYPHrhjslpWepm4JPdAzTj6E+n91
Sfdd
-----END CERTIFICATE-----
Generated at Tue Apr 23 22:56:34 2024 by rpki-client on console-ams.rpki-client.org