Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer
File:                     tji5qb9-MI8fus87TDpEVx8p33c.cer (raw, json)
Hash identifier:          4kvl8K34pibgK8qysGcMY5yoAmhw4OZzyZKEH6pW7Gg=
Subject key identifier:   B6:38:B9:A9:BF:7E:30:8F:1F:BA:CF:3B:4C:3A:44:57:1F:29:DF:77
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01B282
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 27 Jul 2023 16:59:18 +0000
Certificate not after:    Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources:    AS: 140847
                          IP: 103.152.106.0/23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Apr 2024 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111234 (0x1b282)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 27 16:59:18 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=A917EDAC/serialNumber=B638B9A9BF7E308F1FBACF3B4C3A44571F29DF77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b1:2e:b1:1e:d5:73:8b:fc:51:6d:2f:b7:48:
                    5c:44:b6:50:f6:49:e8:d1:e4:f4:3b:55:ab:4c:08:
                    cf:5f:69:b9:c1:c5:61:6d:b6:36:72:49:17:b5:09:
                    b1:d6:19:ea:2a:db:e9:86:6c:91:47:79:2e:b0:7d:
                    a4:a3:60:b2:64:76:64:3d:d9:61:cf:e9:88:4a:29:
                    e9:81:3e:24:ab:2d:27:4d:a9:d2:2f:24:ea:1d:4f:
                    38:3f:c6:98:55:c2:b3:28:24:f1:ae:ea:33:5e:36:
                    28:89:16:8e:b2:af:44:2a:0d:08:76:8b:16:c2:67:
                    05:95:42:f3:14:4c:a1:cb:4b:76:ad:50:1f:16:fc:
                    db:9e:75:66:59:e5:c0:58:33:89:42:a3:cb:06:f9:
                    d4:63:fa:0d:4c:9b:bb:9f:bc:e6:54:d4:d3:ae:74:
                    9e:75:89:a5:71:8c:ab:b5:6c:92:71:c8:6f:2a:20:
                    89:0e:87:b5:31:2d:21:c0:2b:52:a3:d1:d7:d9:8b:
                    54:ae:f4:4f:40:1d:ac:af:18:ed:2d:f1:5e:40:c5:
                    fd:5c:b6:f6:b0:87:4a:30:4d:4e:5c:b6:4e:7d:50:
                    57:a8:2e:b6:7c:bc:2d:d7:d6:9d:8e:af:f4:fc:0c:
                    9e:d6:c1:c7:78:38:a6:57:92:3f:63:fe:8b:fa:dd:
                    c9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:38:B9:A9:BF:7E:30:8F:1F:BA:CF:3B:4C:3A:44:57:1F:29:DF:77
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  140847

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:1d:10:c0:25:6d:6f:68:a3:3d:af:8c:38:fc:14:a1:2f:88:
         35:7b:8b:8f:78:67:f9:2f:35:c9:57:f3:ed:c0:e2:9e:ab:79:
         0e:cc:01:b3:43:4c:d8:c1:0f:85:4b:8b:2a:7b:60:d9:aa:21:
         33:f3:51:12:02:76:e8:50:e2:8f:57:62:16:44:29:ce:b3:d4:
         c5:56:6d:21:c8:65:86:6d:14:f6:7c:5e:12:99:bc:a1:53:17:
         a7:5b:2d:16:d7:c8:cf:8e:29:6a:f3:63:e1:96:ec:6d:03:f3:
         14:a9:e1:ff:90:3e:a1:40:5d:5e:56:57:d8:c1:b3:73:aa:41:
         f4:a5:37:d9:4c:27:2c:b6:07:55:6d:e0:2a:37:fd:f0:46:de:
         90:ac:34:bb:a5:5d:a5:ad:90:9b:3b:5a:47:3c:5a:62:24:41:
         12:0b:b1:d8:88:14:67:63:c0:01:5c:a5:47:06:b4:67:a0:5d:
         23:32:ad:5d:02:b9:24:ec:b2:a9:df:13:94:e8:4c:d4:9a:16:
         05:e2:af:8f:4c:06:f9:a6:e4:98:28:d7:9f:73:03:da:77:5e:
         61:8c:8a:3e:d7:1a:f7:79:e0:4e:7c:3f:51:12:ff:5f:40:9d:
         2d:73:ee:0a:a1:8c:93:5a:af:7c:e9:35:13:1a:90:49:5a:0d:
         ee:1e:2d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 00:01:02 2024 by rpki-client on console-fra.rpki-client.org