Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/twc6HQnyOiR_zleFKqS4poDG2nA.cer
File:                     twc6HQnyOiR_zleFKqS4poDG2nA.cer (raw, json)
Hash identifier:          FMYpLHN3FG7VjJxPtVzE5B7N0aVewCX5ekPNsy0wLX8=
Subject key identifier:   B7:07:3A:1D:09:F2:3A:24:7F:CE:57:85:2A:A4:B8:A6:80:C6:DA:70
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01C82B
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A917E75D/8602302259F611E2A14BEC382979BB20/twc6HQnyOiR_zleFKqS4poDG2nA.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A917E75D/8602302259F611E2A14BEC382979BB20/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 01 Nov 2023 19:22:44 +0000
Certificate not after:    Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 132457
                          IP: 103.21.194.0/24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Apr 2024 04:49:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116779 (0x1c82b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov  1 19:22:44 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=A917E75D/serialNumber=B7073A1D09F23A247FCE57852AA4B8A680C6DA70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:55:41:e0:90:cd:79:c4:63:d1:09:21:08:8d:
                    1a:81:f8:d7:35:67:a4:b6:8a:82:23:96:06:6e:12:
                    44:64:3b:73:8b:3a:ad:a3:60:33:d4:3e:ca:3f:04:
                    d9:28:17:27:9f:ce:f9:ab:eb:0d:e1:53:37:8c:12:
                    ab:fb:7c:c7:ae:74:f7:5e:eb:92:d6:38:c3:e9:41:
                    ae:16:b2:fc:75:d6:fa:ed:80:76:96:2b:de:72:62:
                    39:49:a2:84:65:28:1f:95:f5:0e:b0:6e:2c:f1:30:
                    46:aa:e9:f1:a1:2c:31:71:7d:a0:44:88:b1:75:30:
                    a4:79:bf:c0:ae:1b:44:50:95:e1:99:5d:aa:77:75:
                    9b:ac:f4:2c:36:8d:68:1e:57:fc:3f:04:b9:66:ed:
                    1b:ec:e1:e1:ae:ed:17:2d:96:d4:0d:6f:4f:ec:11:
                    15:1e:4c:2e:51:79:dd:82:9e:ae:b4:85:ad:8c:f1:
                    e3:8f:97:19:5a:87:c8:1d:89:70:05:86:64:3e:8f:
                    57:4b:f9:63:dd:f1:7d:64:24:07:0e:2a:ea:81:76:
                    cf:76:f0:ab:f3:c7:9d:68:9a:23:8e:92:38:f8:f7:
                    64:9e:13:33:d1:a3:24:1f:08:b4:31:e1:32:24:35:
                    24:ab:f5:e0:cb:c8:2e:5d:c0:cf:45:12:da:ee:42:
                    33:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:07:3A:1D:09:F2:3A:24:7F:CE:57:85:2A:A4:B8:A6:80:C6:DA:70
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917E75D/8602302259F611E2A14BEC382979BB20/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917E75D/8602302259F611E2A14BEC382979BB20/twc6HQnyOiR_zleFKqS4poDG2nA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  132457

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.21.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:bb:e8:b0:05:b8:d7:3e:42:d2:f2:9d:a8:ae:23:36:8d:90:
         6d:14:ee:0f:58:86:a7:1b:a7:2d:88:c7:25:74:80:b2:96:47:
         ff:ea:73:83:d6:03:3a:65:5b:9f:7a:79:bc:98:c0:3e:e1:45:
         8e:09:ca:48:b2:0c:d8:83:30:ad:86:5a:5e:29:c5:50:63:cd:
         8b:4d:b0:15:a5:d9:6a:d1:8c:ab:7c:d7:6c:3f:e8:35:4e:ce:
         75:41:25:41:5c:7c:d0:8b:12:b6:38:cb:26:ea:e7:38:c3:ef:
         39:03:be:48:2e:c2:10:eb:87:f4:24:73:d9:d6:c1:c2:93:52:
         66:46:5d:ce:e5:2f:12:eb:8e:fa:b2:67:58:35:ad:b1:80:ab:
         2c:b0:50:f1:f3:ca:b2:92:a2:53:8e:9d:0e:b3:94:9f:40:65:
         ce:a5:25:3d:7a:c6:61:db:4a:18:f9:a7:36:87:37:51:d9:ed:
         1b:0e:c9:12:5f:87:90:fb:51:5a:4e:26:7b:a0:df:3e:5e:0d:
         45:fd:3c:38:b6:c0:97:c0:d4:80:e0:6b:98:53:e5:89:58:7a:
         f1:81:2a:7f:ac:23:66:39:f7:5b:9a:dc:87:af:85:2c:bb:69:
         c7:46:39:10:c2:ec:7f:7c:56:0a:70:bc:a6:fe:73:bd:49:9d:
         23:86:da:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 06:02:43 2024 by rpki-client on console-fra.rpki-client.org