Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tADiGrPTJXQtuHeDDrxEB233CUg.cer
File:                     tADiGrPTJXQtuHeDDrxEB233CUg.cer (raw, json)
Hash identifier:          TkqJ2+n+aQ8hiR+t7DTOMnESH84jBiRM+K2qBxgkBzo=
Subject key identifier:   B4:00:E2:1A:B3:D3:25:74:2D:B8:77:83:0E:BC:44:07:6D:F7:09:48
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01E506
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 18 Mar 2024 15:59:25 +0000
Certificate not after:    Thu 01 May 2025 00:00:00 +0000
Subordinate resources:    AS: 136215
                          IP: 103.83.232.0/22
                          IP: 203.89.124.0/22
                          IP: 2400:9740::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Apr 2024 15:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124166 (0x1e506)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Mar 18 15:59:25 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=A91658EF/serialNumber=B400E21AB3D325742DB877830EBC44076DF70948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e3:42:ab:99:df:64:17:4c:7b:94:c3:b2:cd:
                    be:61:9b:ce:7f:0e:4f:f1:0f:bd:72:1d:d3:65:c8:
                    40:0a:6a:02:60:46:95:50:44:f4:49:6e:78:93:be:
                    69:09:6d:62:dd:ee:f3:89:11:5f:d7:45:ae:48:94:
                    09:3a:2d:33:ba:ed:35:ff:36:42:0b:06:cb:5b:b8:
                    e4:a5:4e:9f:3d:61:79:f7:70:aa:d7:6e:90:1d:20:
                    00:f7:be:8c:61:b7:fb:54:da:c7:7b:f9:f5:05:d9:
                    05:ed:66:27:c7:49:c6:09:e5:2e:f6:4e:99:53:d8:
                    5f:9e:17:02:2e:8b:a7:77:1e:da:66:84:74:2d:0f:
                    d8:b1:ea:b0:25:d2:b6:bd:96:4a:71:a6:f9:ff:ab:
                    23:43:c9:98:f0:c8:c0:11:bb:cc:73:af:30:6d:8b:
                    e3:46:27:6c:34:b8:87:80:b5:fe:ba:1d:5a:4a:ae:
                    b1:5c:b7:1a:0c:ce:56:6e:d2:bb:16:dd:8c:a5:d5:
                    45:f2:03:24:cc:7b:f9:ad:90:b0:f8:e2:82:44:62:
                    e8:dc:05:33:b1:e0:71:7c:7e:fe:47:f6:49:ac:42:
                    0e:39:2c:24:a7:61:d3:e1:2c:d6:df:46:96:70:3d:
                    9f:1f:c9:9d:bb:97:a7:5a:33:54:f1:d7:37:0f:ec:
                    2d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:00:E2:1A:B3:D3:25:74:2D:B8:77:83:0E:BC:44:07:6D:F7:09:48
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  136215

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.232.0/22
                  203.89.124.0/22
                IPv6:
                  2400:9740::/32

    Signature Algorithm: sha256WithRSAEncryption
         cd:3a:f2:b3:a5:50:29:e2:34:5a:14:ae:44:6a:5c:7d:7a:7f:
         cc:f5:42:66:a0:13:8c:af:fb:29:06:7d:80:a1:4a:e0:84:fc:
         41:c7:4c:f6:77:8a:a3:4e:76:7e:17:a6:af:2d:26:fc:ae:6e:
         8d:e2:13:a8:28:6c:dc:af:b1:24:57:6d:30:f7:b6:c9:b0:8e:
         1e:ce:1a:4d:99:ec:9e:0d:f8:b4:93:1c:f5:12:21:06:57:c8:
         46:5c:44:a1:c0:7a:49:de:3c:47:6e:93:bf:d6:5d:13:5d:70:
         f5:87:83:ea:5c:00:04:68:cb:3e:09:23:23:a4:76:df:de:54:
         91:a3:f0:90:bb:d7:f8:46:f4:01:b0:6f:95:1a:f0:3d:ce:11:
         a0:5b:ec:4d:47:92:3b:07:89:b2:ea:5a:44:00:7f:ae:11:f3:
         d7:58:8e:b6:5c:72:b5:a1:5f:72:bc:5e:9c:8c:16:bb:21:72:
         16:f7:c9:2f:c5:2e:5e:b9:d7:af:fa:6e:81:8f:5e:fc:c4:fc:
         fa:82:44:1a:1c:44:8b:b9:11:f5:fd:1c:a8:c3:51:c1:c3:ff:
         7e:24:ed:ad:19:00:d5:54:71:95:c5:53:9d:50:47:63:fd:d1:
         ee:a0:a8:c3:a5:2d:07:22:fc:69:6c:47:75:46:f6:89:bf:e7:
         96:e2:d5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 16:48:55 2024 by rpki-client on console-fra.rpki-client.org