Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTRQOC5F-KPX1ikQ83nHidFH_7A.cer
File:                     tTRQOC5F-KPX1ikQ83nHidFH_7A.cer (raw, json)
Hash identifier:          qwnxYQ+lEDabvuRLFhQHV9lcmI7cBpfq4Rf5Q2sHJHU=
Subject key identifier:   B5:34:50:38:2E:45:F8:A3:D7:D6:29:10:F3:79:C7:89:D1:47:FF:B0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01DE9C
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 12 Feb 2024 21:44:36 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 132022
                          IP: 103.246.204.0/22
                          IP: 2401:d300::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Apr 2024 21:54:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122524 (0x1de9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb 12 21:44:36 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=A91DFA83/serialNumber=B53450382E45F8A3D7D62910F379C789D147FFB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:81:97:28:75:26:09:7d:39:6c:93:b5:d4:6d:
                    df:81:6a:16:12:63:71:1d:82:36:9e:e6:b3:67:b4:
                    b6:87:d6:1f:68:73:87:fd:d5:ca:b6:f6:70:92:ec:
                    0c:f0:9e:c9:92:c8:3d:29:73:a2:d5:11:6d:77:52:
                    85:1e:bc:cf:91:27:3f:d6:be:73:a6:74:6d:71:4a:
                    89:1d:1e:fe:8b:c6:0b:bb:7c:fc:f1:06:76:a0:11:
                    0f:a1:ef:2f:ad:a0:ac:f3:7a:f4:12:3f:dd:8f:b8:
                    58:9f:93:bf:96:c6:5d:b8:2e:df:90:27:eb:30:3b:
                    01:c3:14:51:f6:49:2a:96:45:a2:a0:62:79:14:37:
                    bf:f4:af:9f:95:0d:b2:95:c4:60:f5:62:0c:72:c6:
                    59:98:63:a4:04:07:d2:f1:b4:1e:13:8f:1a:d6:e5:
                    3d:cd:e7:ae:67:48:08:f6:82:10:a1:96:2e:47:f2:
                    88:5e:f5:9f:22:6d:79:15:15:86:a0:e7:2f:6c:3d:
                    c6:4d:59:f9:95:9e:a7:ea:50:c2:d3:ff:32:d9:a8:
                    4c:35:b8:e2:13:30:90:3c:e9:ce:05:bf:d7:3d:8b:
                    57:02:b5:84:6a:ba:cd:d6:df:2e:0a:68:d7:50:36:
                    77:9e:9c:09:39:6a:5b:af:72:53:c4:4c:20:2a:bd:
                    30:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:34:50:38:2E:45:F8:A3:D7:D6:29:10:F3:79:C7:89:D1:47:FF:B0
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  132022

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.246.204.0/22
                IPv6:
                  2401:d300::/32

    Signature Algorithm: sha256WithRSAEncryption
         c2:0b:14:39:bf:21:4a:75:cb:b5:68:1d:c4:85:48:45:c7:1c:
         1c:a3:ad:26:49:96:2d:4c:a7:0a:e1:b5:a6:d1:68:9c:40:de:
         c6:50:31:9c:d3:b5:1c:cf:39:df:d1:94:25:35:89:3a:ec:57:
         46:54:8a:82:18:7c:c6:78:d0:3b:08:9e:2a:25:a2:90:5f:4a:
         c0:c7:6d:7c:24:22:c1:14:24:e0:3f:b5:36:23:43:96:7d:6c:
         31:e4:58:ed:4e:28:6a:99:9f:a1:38:fd:7f:95:1b:ce:a5:47:
         77:b3:2e:7e:cf:09:84:95:59:d1:b3:13:18:94:f3:be:90:92:
         d9:8e:24:68:5f:ea:d5:8c:33:73:05:61:71:cb:bc:bd:d8:7b:
         d4:9c:34:3c:6b:59:ab:c9:bb:1f:c1:15:13:9d:54:b6:32:bf:
         e0:24:3b:3c:42:5f:79:fd:8a:40:7b:fa:b6:cc:5b:b3:bc:db:
         58:05:5a:68:42:d2:c6:f1:05:50:fb:81:a4:22:f5:b1:36:f6:
         a5:96:d1:0e:6c:95:f7:b2:bb:b7:18:56:e1:f6:5c:1c:42:bd:
         b2:8c:fa:4e:de:d2:6d:49:7b:16:ab:1b:57:95:ae:b0:b7:7f:
         4f:42:7c:cd:7b:a5:af:62:b5:76:e2:45:34:50:45:87:67:1b:
         1f:63:20:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----