Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer
File:                     ux3tVEsnoTcZtI-wA3PNSeDehRc.cer (raw, json)
Hash identifier:          oeoLGU6RPRIYoKjl4sfsCM7wSDYti56jqj5c6ZW3MFk=
Subject key identifier:   BB:1D:ED:54:4B:27:A1:37:19:B4:8F:B0:03:73:CD:49:E0:DE:85:17
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01D61E
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 18:48:13 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 9414
                          AS: 38594
                          AS: 38596
                          AS: 131218
                          AS: 149798
                          IP: 103.20.218.0/24
                          IP: 103.149.112.0/24
                          IP: 203.34.246.0/24
                          IP: 203.55.173.0/24
                          IP: 203.56.241.0/24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Apr 2024 02:50:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120350 (0x1d61e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan  2 18:48:13 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=A919123C/serialNumber=BB1DED544B27A13719B48FB00373CD49E0DE8517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5d:c7:91:e1:5c:ca:15:bf:5e:8b:b6:42:59:
                    6c:cf:80:90:ba:80:91:43:ef:b8:11:52:0a:69:1b:
                    fa:b9:08:49:77:14:2a:96:10:74:d1:97:f0:dc:e2:
                    fe:d2:0c:74:d8:f9:23:0d:c5:da:e7:a8:99:eb:f0:
                    a2:d1:03:83:f9:91:47:a4:16:56:f7:fb:e1:ac:51:
                    27:f5:e0:30:ea:94:73:22:f5:e4:0a:7f:3a:c0:22:
                    05:fc:d6:a9:c2:0d:ca:8f:15:bb:c6:a0:79:b5:c0:
                    16:1b:99:64:05:8b:db:fc:e3:f1:fc:c1:38:9d:d5:
                    30:bb:42:a7:f9:73:69:be:60:d1:68:c3:3b:16:00:
                    16:71:65:64:f0:bc:41:33:ff:2d:4c:eb:64:89:7b:
                    94:8a:69:0d:bb:66:df:5e:6f:05:4c:9d:8e:7c:ad:
                    6d:60:2b:27:e3:10:ef:b3:8e:52:84:39:d5:dc:fc:
                    90:75:0d:18:88:5f:8a:da:e3:f9:f2:23:d6:7c:2d:
                    8d:aa:8b:99:76:68:f6:e4:45:3f:be:ed:ca:cc:60:
                    be:48:69:f1:a0:43:5c:4b:fa:f7:80:e1:89:1b:88:
                    9e:34:52:c0:10:8f:65:44:dd:81:38:2b:d8:0c:bb:
                    e1:65:4a:87:9b:b7:79:e5:fc:4d:7f:4f:fe:a0:4c:
                    6a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:1D:ED:54:4B:27:A1:37:19:B4:8F:B0:03:73:CD:49:E0:DE:85:17
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  9414
                  38594
                  38596
                  131218
                  149798

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.20.218.0/24
                  103.149.112.0/24
                  203.34.246.0/24
                  203.55.173.0/24
                  203.56.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:aa:76:40:6d:bf:0d:13:45:66:7f:1d:1f:1f:f2:0f:a4:74:
         30:82:d8:a8:0a:51:2b:2d:51:5d:89:21:a3:0d:d2:86:0b:d1:
         ce:d2:01:fe:c7:31:7d:92:af:be:35:66:ba:b9:1a:33:0b:4c:
         d8:84:e4:3e:05:86:2f:c4:b6:a6:99:5d:89:32:45:72:5a:92:
         b3:bd:1b:d2:7e:46:8c:93:ae:6f:ae:82:1b:57:ed:2c:2b:5a:
         a9:49:fb:f6:be:29:5f:61:d3:2c:0c:d1:87:cc:d7:ee:15:9f:
         12:c2:0f:ed:d6:6f:4b:c6:2a:6f:96:a0:a7:2c:98:5b:00:ae:
         67:3a:1e:3e:43:bc:03:76:c7:d0:e4:e9:47:64:3a:ef:aa:eb:
         55:4b:e4:1c:34:b8:99:c2:e8:18:a4:b1:5e:9a:18:ce:a7:25:
         48:ed:8b:46:47:8d:75:0b:b4:2f:cc:87:4a:7a:9f:3e:ad:57:
         8e:b8:a0:de:cc:76:d5:72:38:af:d0:12:b0:23:89:4b:8d:ab:
         f4:1e:cd:2e:91:07:35:69:aa:16:1b:a9:81:0a:69:44:b1:18:
         f2:e0:70:a2:56:13:a0:ce:c3:04:92:58:44:b1:74:90:e9:1b:
         12:cf:cb:af:7d:b3:71:c7:49:43:09:73:a4:b9:57:a5:f3:7a:
         56:7e:8a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 03:25:55 2024 by rpki-client on console-ams.rpki-client.org