Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vtASVxhUXB5QgDHT_1-26Chqf9g.cer
File:                     vtASVxhUXB5QgDHT_1-26Chqf9g.cer (raw, json)
Hash identifier:          MWj7aDdSm0RWzoKA7K2f1LTDdPhIl0yiYRNHYPm42bM=
Subject key identifier:   BE:D0:12:57:18:54:5C:1E:50:80:31:D3:FF:5F:B6:E8:28:6A:7F:D8
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0214C7
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 18 Oct 2024 19:31:00 +0000
Certificate not after:    Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources:    AS: 150326
                          IP: 103.12.182.0/23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136391 (0x214c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct 18 19:31:00 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=A91E72DE/serialNumber=BED0125718545C1E508031D3FF5FB6E8286A7FD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:92:50:ec:18:07:bd:81:1a:d9:cb:87:fa:2e:
                    b2:85:76:eb:8f:cd:98:b1:3e:57:55:92:f3:bb:39:
                    f0:a4:02:2c:db:9a:c4:3e:7b:7f:20:f6:d3:eb:cf:
                    d0:e3:0d:29:d3:5d:84:9f:96:07:85:27:93:56:7e:
                    44:b6:2b:09:a1:86:64:70:16:d9:29:f8:c3:40:36:
                    30:a2:3c:5d:cd:6f:43:d3:d0:91:df:d0:d8:c0:ee:
                    36:76:35:42:90:26:8a:24:4b:4d:b9:d1:1b:3f:d9:
                    40:37:34:f8:57:0c:ce:78:5d:f3:68:57:73:aa:07:
                    aa:06:b1:b0:05:4b:64:45:c1:08:c2:ae:d5:22:ab:
                    83:73:1b:37:68:e0:77:a8:e0:62:9c:d4:94:a2:64:
                    d1:ca:c1:9a:bb:96:42:6a:1c:8d:7a:df:a8:56:b4:
                    a3:e3:3b:ca:3d:cf:70:b1:64:d7:38:24:fb:ff:81:
                    a3:40:16:65:22:f7:4d:46:fc:d3:f6:ed:6f:86:68:
                    1b:59:16:8e:86:c4:10:68:83:1e:bf:37:69:49:54:
                    17:c4:7c:66:71:80:c1:3c:eb:84:67:50:c6:cf:4a:
                    e5:71:81:d9:ed:35:c1:04:ab:11:b7:d8:4e:98:0c:
                    ea:5b:ca:9a:f1:d4:6e:c1:8c:f1:45:05:33:d6:5d:
                    7c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D0:12:57:18:54:5C:1E:50:80:31:D3:FF:5F:B6:E8:28:6A:7F:D8
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  150326

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.12.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:19:fb:a0:10:8d:c0:2a:48:7d:e3:ce:b0:02:ed:46:c6:cd:
         5c:94:9b:50:f6:24:73:93:3b:b8:60:6f:4d:03:bd:ea:31:27:
         0c:8b:14:48:b6:56:2f:b8:24:86:07:17:74:43:78:d1:f9:d8:
         78:96:ad:f2:7e:c1:fe:65:90:a0:45:63:7b:91:1d:e1:c4:ea:
         93:96:84:98:43:3c:4e:e0:4f:36:2c:c8:61:94:cd:50:5c:0f:
         65:8c:de:3b:cd:eb:a6:e2:87:98:17:d1:4c:47:18:e7:33:8b:
         5f:33:ec:cb:87:b3:05:4e:92:7f:fb:d1:d3:63:a0:56:68:7e:
         d7:42:84:88:8a:d7:02:19:f5:33:9c:5b:d8:a7:44:e1:c3:6c:
         b0:f5:3e:c0:73:1e:69:40:58:26:50:3a:d3:11:40:29:fe:94:
         a5:cb:59:75:41:f5:4c:87:c6:14:a5:94:d2:4c:37:10:d0:c4:
         2a:2c:e8:30:73:60:bf:aa:34:18:8f:d0:8b:9a:80:3c:03:34:
         2f:dd:c4:fc:7a:43:8f:6a:a7:a1:8d:2b:4c:e6:94:76:2e:1a:
         b4:4f:2b:af:e9:a8:7e:11:57:8c:54:f2:49:2c:b6:5d:8d:bf:
         15:ab:6a:b4:da:bc:2e:75:f3:03:ea:b0:60:8c:1e:61:e6:e6:
         a5:93:0f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:03:56 2024 by rpki-client on console-fra.rpki-client.org