Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ulHQnhOT5woFhzID_3zE4f1-pw8.cer
File:                     ulHQnhOT5woFhzID_3zE4f1-pw8.cer (raw, json)
Hash identifier:          Kkime6SeWDOKTlR+Nqef7hwx2btLy5hMrMLfedDq8bg=
Subject key identifier:   BA:51:D0:9E:13:93:E7:0A:05:87:32:03:FF:7C:C4:E1:FD:7E:A7:0F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01C6F1
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9168B03/D118E678F99D11E6B8727013C4F9AE02/ulHQnhOT5woFhzID_3zE4f1-pw8.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9168B03/D118E678F99D11E6B8727013C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 30 Oct 2023 16:35:07 +0000
Certificate not after:    Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 9832
                          IP: 103.9.132.0/22
                          IP: 180.92.224.0/20
                          IP: 203.148.88.0/22
                          IP: 203.188.240.0/20
                          IP: 2403:bf80::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 02:50:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116465 (0x1c6f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct 30 16:35:07 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=A9168B03/serialNumber=BA51D09E1393E70A05873203FF7CC4E1FD7EA70F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f1:a8:ca:92:4e:1b:83:63:25:b9:e7:13:10:
                    37:ab:3b:98:57:96:10:93:15:6d:bc:03:b0:ed:e1:
                    2f:f0:5c:d1:89:1f:8a:85:c2:c5:11:d2:12:ea:5c:
                    da:54:9e:12:24:d2:75:3a:04:bd:0a:89:72:9b:58:
                    be:ba:a4:9f:f6:7d:00:9d:7b:ee:a6:be:cd:59:55:
                    e0:56:fd:a8:ae:9d:ab:15:9c:ad:53:5e:33:2b:65:
                    3f:7a:a8:0f:12:df:66:3d:d4:92:44:14:fe:32:5c:
                    70:3b:ad:ae:4a:43:25:d7:0e:4e:af:a7:40:3a:ff:
                    0c:eb:48:8f:82:a7:4e:f8:6d:88:9c:8f:ef:0b:9b:
                    03:43:57:91:8b:81:e8:73:04:58:47:1f:a8:e3:5f:
                    1e:3c:a6:c4:b0:e7:c2:a1:71:23:29:62:1c:5d:09:
                    59:75:8e:ce:de:a8:b8:54:b1:77:b2:00:f7:57:f8:
                    13:19:e3:69:5b:31:56:47:4a:be:43:09:cd:17:f8:
                    ca:5b:9d:c6:e7:72:1d:0f:9f:dc:05:05:c6:33:4e:
                    16:8b:8e:43:03:71:43:c4:39:f1:36:fe:d8:82:01:
                    0b:b0:59:30:38:80:9b:75:70:8f:de:ea:2e:e2:4d:
                    41:e0:a7:b7:75:89:f9:f5:c4:b0:1d:41:ce:dd:11:
                    be:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:51:D0:9E:13:93:E7:0A:05:87:32:03:FF:7C:C4:E1:FD:7E:A7:0F
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9168B03/D118E678F99D11E6B8727013C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9168B03/D118E678F99D11E6B8727013C4F9AE02/ulHQnhOT5woFhzID_3zE4f1-pw8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  9832

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.9.132.0/22
                  180.92.224.0/20
                  203.148.88.0/22
                  203.188.240.0/20
                IPv6:
                  2403:bf80::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:bb:f9:07:f4:f3:14:cf:43:68:93:c2:64:6b:71:30:28:b6:
         34:32:b9:a5:df:19:66:1e:bb:c1:ad:82:e1:77:60:6a:c0:73:
         06:c8:c6:39:74:b5:47:c0:b7:d9:ad:73:67:7e:bb:1e:f1:42:
         58:4d:ee:c9:0e:5b:8a:03:75:08:dd:c2:53:11:a1:0f:07:3b:
         cc:fb:8f:74:93:d7:f6:74:83:f3:f9:05:b4:ab:69:8a:01:83:
         a7:e7:c8:8e:7c:ee:44:9a:00:6c:c0:db:4b:55:2a:a7:38:cf:
         47:75:a1:f7:c0:3d:fb:82:70:bc:7e:3c:c0:1c:b9:ba:4c:fc:
         88:47:d9:8c:42:9d:c7:0f:77:19:52:03:47:f4:6e:01:a7:9e:
         52:c0:1f:58:5d:5f:85:f4:c6:49:ca:9e:ce:db:79:2b:a8:a5:
         b5:25:b4:d6:7d:5c:ed:3c:fa:a7:28:03:60:e5:43:8c:4d:37:
         1d:82:0e:d7:bc:eb:30:87:4f:90:5e:ed:85:c3:f6:70:36:1e:
         21:a7:0c:68:3d:42:c1:89:04:c6:20:03:d7:e5:6c:e1:4f:1a:
         15:d0:a4:54:ab:c3:1e:ec:a3:ad:25:2e:ad:6a:2c:7a:98:8d:
         b7:96:31:1a:d3:dd:63:1d:5a:73:35:18:74:70:2b:7b:42:48:
         55:80:e8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 03:58:07 2024 by rpki-client on console-fra.rpki-client.org