Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vW8yJwkswpQOGkXy4_RJHw3c26I.cer
File:                     vW8yJwkswpQOGkXy4_RJHw3c26I.cer (raw, json)
Hash identifier:          ZT81iZe98KYJe0FB3hhgmJKXkorBkU3FntifiSPNW5M=
Subject key identifier:   BD:6F:32:27:09:2C:C2:94:0E:1A:45:F2:E3:F4:49:1F:0D:DC:DB:A2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01E359
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9130D77/54B30422454011EB8861352FC4F9AE02/vW8yJwkswpQOGkXy4_RJHw3c26I.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9130D77/54B30422454011EB8861352FC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 07 Mar 2024 13:20:36 +0000
Certificate not after:    Wed 28 May 2025 00:00:00 +0000
Subordinate resources:    AS: 133959
                          IP: 103.50.14.0/23
                          IP: 2402:5080::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 21:10:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123737 (0x1e359)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Mar  7 13:20:36 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=A9130D77/serialNumber=BD6F3227092CC2940E1A45F2E3F4491F0DDCDBA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5f:ff:4e:a1:20:fe:19:26:8e:2c:cf:c8:69:
                    68:95:9f:e0:25:00:33:f9:6e:6d:1c:37:6c:3a:85:
                    3b:95:7f:46:ca:17:9e:6a:16:9a:dd:83:ef:5d:1f:
                    9c:f4:84:5b:2a:8b:b0:89:35:99:5e:75:27:7e:e8:
                    8a:dc:f9:8a:bd:a2:23:67:c2:7c:da:07:e4:1b:03:
                    4f:8c:e0:94:74:bb:6c:a2:58:df:b1:ac:f7:7b:64:
                    9b:ec:ef:b4:d6:96:e3:85:05:cc:75:85:a8:97:76:
                    3e:d2:52:2a:8b:f7:c1:b9:f6:22:e1:00:a2:8f:76:
                    a5:94:ff:77:65:be:24:48:ff:2e:99:89:7c:2a:d3:
                    a5:4d:d7:1a:6b:bf:42:88:09:89:c8:a9:2b:21:3e:
                    ce:d1:dc:4f:49:f7:7b:a9:e4:1f:bb:d8:ac:74:75:
                    bb:58:1e:2f:41:81:85:ec:f0:8c:f8:a0:90:1d:eb:
                    2e:25:6c:82:11:1f:4c:68:4f:b8:1c:14:9d:ad:b8:
                    b7:42:15:13:08:09:d5:f3:06:06:4c:5e:bb:40:f8:
                    04:7d:4e:ef:ad:56:50:21:12:9c:c1:e0:60:ea:48:
                    ed:31:03:85:e1:f0:08:5d:d8:f7:79:e3:fd:2e:83:
                    77:bd:ad:df:6b:45:50:48:36:88:8a:21:23:52:8e:
                    a4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:6F:32:27:09:2C:C2:94:0E:1A:45:F2:E3:F4:49:1F:0D:DC:DB:A2
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9130D77/54B30422454011EB8861352FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9130D77/54B30422454011EB8861352FC4F9AE02/vW8yJwkswpQOGkXy4_RJHw3c26I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  133959

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.50.14.0/23
                IPv6:
                  2402:5080::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:c7:46:3c:61:d7:9d:4a:4c:63:f1:64:e9:64:0d:17:82:b5:
         42:fa:74:83:d8:a3:58:16:87:ad:7f:80:1a:b2:09:31:45:d3:
         66:7c:ac:0f:a0:fa:13:03:99:3f:ed:c1:70:4f:d4:4b:3b:ae:
         e8:83:7c:c5:4b:38:b5:95:3b:cd:68:b6:9d:06:2a:3a:47:75:
         16:c4:8c:be:b6:ea:9e:4f:19:be:24:a9:16:54:08:fa:a6:ef:
         ed:d6:d2:ab:e7:e3:4f:cd:c5:b4:82:c4:56:e7:a9:f9:7f:27:
         b6:6f:dc:06:c0:26:55:c8:ad:1f:a8:7e:dd:ae:77:05:25:e1:
         50:78:41:4b:24:6d:16:5d:a0:30:46:bd:71:a2:3f:cf:69:3b:
         9c:0b:9f:40:09:06:24:ce:c9:55:e7:71:6f:6b:6a:91:8b:6a:
         8b:8b:b5:0c:3e:8c:ae:a3:1f:5f:7c:66:2e:1e:33:0f:65:62:
         d2:39:9b:4b:89:59:60:6b:8a:7d:d0:3b:ee:06:da:ba:01:36:
         78:24:0d:a6:72:dc:55:ac:15:f3:d0:18:cd:5c:ac:d1:29:16:
         ab:48:b6:11:e4:58:0a:27:48:20:5b:34:a7:ef:fa:e8:b4:73:
         65:8b:01:a5:c5:92:b3:72:d2:15:66:51:cd:f8:6f:8d:18:9a:
         da:42:5a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:34:39 2024 by rpki-client on console-fra.rpki-client.org