Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tr-xkXvTGlViMihYRudjoUMyymg.cer
File:                     tr-xkXvTGlViMihYRudjoUMyymg.cer (raw, json)
Hash identifier:          J0utFgz+lAD6BQAX6U20jwtm59HrwPXbc/V54e7UX5k=
Subject key identifier:   B6:BF:B1:91:7B:D3:1A:55:62:32:28:58:46:E7:63:A1:43:32:CA:68
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01BF79
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91A6E4D/D3CC0D64FB4611EBA7661839C4F9AE02/tr-xkXvTGlViMihYRudjoUMyymg.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91A6E4D/D3CC0D64FB4611EBA7661839C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 25 Sep 2023 18:09:28 +0000
Certificate not after:    Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 132304
                          IP: 103.99.23.0/24
                          IP: 103.108.2.0/23
                          IP: 103.108.8.0/24
                          IP: 2001:df2:4100::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114553 (0x1bf79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep 25 18:09:28 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=A91A6E4D/serialNumber=B6BFB1917BD31A556232285846E763A14332CA68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:51:c3:24:99:2a:a3:3d:fd:4c:2d:7f:ab:42:
                    d5:ca:3d:b7:36:6d:f8:08:89:49:35:03:ce:6b:2c:
                    ac:37:c6:aa:fb:17:fd:d1:64:fa:f8:13:25:6a:f6:
                    92:54:87:7b:8e:18:92:c0:8a:30:73:75:08:d6:77:
                    82:af:42:86:37:4b:20:f1:f7:2f:b2:60:5e:7d:c3:
                    6d:69:4c:ab:be:16:4e:50:97:67:69:93:9a:d5:1f:
                    07:8f:a8:23:f1:aa:97:e6:fa:6e:d1:25:d3:d5:19:
                    a5:5d:4c:3d:7e:4a:66:e5:f6:9e:be:06:54:15:91:
                    db:6f:7d:87:76:10:4f:2f:1f:99:d8:bd:6f:00:6c:
                    2e:3b:62:4c:34:dd:de:32:26:bf:a0:ca:2b:31:4e:
                    c5:fe:96:d0:be:8f:e2:fa:93:93:53:33:9a:ee:f4:
                    e2:c2:3c:7a:a0:60:09:aa:91:4e:0f:32:4e:d4:33:
                    75:e9:78:67:47:fa:fe:88:97:9f:b9:d0:6c:72:c9:
                    0b:2b:fe:09:ed:31:69:cc:81:39:38:ae:7b:59:4a:
                    b0:f2:a4:4c:d3:ab:20:fd:3d:b8:da:e9:a1:bb:2d:
                    75:d5:7c:76:9d:41:a5:b4:9f:10:c9:d6:35:fe:16:
                    df:77:dd:75:fc:48:86:62:dd:93:32:02:0c:91:d2:
                    17:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:BF:B1:91:7B:D3:1A:55:62:32:28:58:46:E7:63:A1:43:32:CA:68
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A6E4D/D3CC0D64FB4611EBA7661839C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A6E4D/D3CC0D64FB4611EBA7661839C4F9AE02/tr-xkXvTGlViMihYRudjoUMyymg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  132304

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.99.23.0/24
                  103.108.2.0/23
                  103.108.8.0/24
                IPv6:
                  2001:df2:4100::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:68:63:43:f6:14:58:a5:be:2e:10:13:e5:b8:39:98:3c:fe:
         1d:40:b8:ea:a3:c9:5c:52:bb:d3:af:21:7f:4b:d9:3d:98:07:
         28:75:d3:da:0c:9b:05:dd:15:c9:92:69:9d:3b:dc:70:a5:9a:
         29:7a:51:73:af:90:85:89:af:23:55:1a:44:87:41:a9:0d:b4:
         54:eb:a2:e4:4e:31:03:7c:1d:c2:9a:63:79:f7:cb:63:92:d2:
         3c:a2:f8:97:29:ac:4f:a8:88:96:72:62:f1:7a:e8:55:18:79:
         15:0a:43:ba:a6:8f:22:ef:9c:ad:ec:4e:5d:d0:55:72:f9:47:
         fe:fb:2b:15:5f:13:5e:98:5a:95:0a:dc:93:eb:1a:d5:67:d9:
         f7:8d:c7:82:0b:f8:52:82:53:25:00:94:9c:3b:42:12:5d:97:
         bb:86:8e:e3:c5:bd:c5:81:b1:03:3c:57:37:af:e2:f0:21:dc:
         c6:d9:bf:9a:4d:aa:b3:ee:ec:29:4d:eb:7c:6b:be:a2:7e:83:
         03:1d:82:74:af:40:24:5c:74:a8:93:fa:b6:8a:db:84:b7:3d:
         c4:df:9e:f8:f9:1c:f3:ab:dc:36:7b:fb:52:82:4d:58:0a:ed:
         5f:6a:83:e5:99:ee:74:00:00:f5:86:9c:05:63:ea:db:a0:81:
         bb:46:a4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 15:20:14 2024 by rpki-client on console-fra.rpki-client.org