Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer
File:                     vxobyMAsIDYtD9n5K8AGoolejIA.cer (raw, json)
Hash identifier:          VGPDMQASyFl0RgVQ+Tzzm1a3uInwxB9vlAIMh7Obd8c=
Subject key identifier:   BF:1A:1B:C8:C0:2C:20:36:2D:0F:D9:F9:2B:C0:06:A2:89:5E:8C:80
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01C1C5
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 03 Oct 2023 18:46:03 +0000
Certificate not after:    Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources:    IP: 103.195.207.0/24
                          IP: 2001:df6:2400::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 06:50:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115141 (0x1c1c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct  3 18:46:03 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=A91A423B/serialNumber=BF1A1BC8C02C20362D0FD9F92BC006A2895E8C80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:38:17:5c:71:62:9e:0d:73:a7:83:89:33:0d:
                    85:20:56:e5:82:59:25:6a:cf:45:69:aa:94:fd:e4:
                    47:38:43:59:4c:3e:da:31:aa:e7:38:5a:f3:ad:c8:
                    87:27:c0:02:40:ab:ba:53:67:36:13:05:47:2f:05:
                    8b:ce:6b:c0:aa:e1:b3:45:12:64:75:6d:99:f3:3a:
                    56:87:8a:d2:0b:91:08:a8:f5:5c:58:29:77:8a:aa:
                    d6:fa:ef:e8:82:e4:f7:f8:c4:ce:f4:d4:93:7a:e6:
                    73:98:99:15:ac:75:42:5b:56:04:63:3f:db:02:8a:
                    79:05:ef:95:fa:a9:ca:42:13:df:df:f9:9d:54:93:
                    b5:ed:9a:00:e9:ef:b2:db:c8:8c:36:8d:34:3c:83:
                    91:50:f0:39:db:dd:ae:79:e0:22:23:35:0f:cf:6f:
                    67:7f:9b:a8:e4:c3:7d:7d:a3:d7:d0:1c:87:0d:93:
                    88:77:f8:f1:c2:7a:a6:c6:1a:5e:b7:d2:c0:cc:50:
                    39:d0:f8:db:02:67:18:df:22:6b:6a:32:a5:42:61:
                    37:13:ed:47:2f:0c:d5:8f:2d:f9:fb:64:bc:85:2b:
                    26:bb:33:43:de:f1:5f:da:42:ed:ec:7b:f9:84:82:
                    28:5b:35:a3:31:cd:30:fc:a5:e7:46:3e:0e:f0:ee:
                    f5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:1A:1B:C8:C0:2C:20:36:2D:0F:D9:F9:2B:C0:06:A2:89:5E:8C:80
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.195.207.0/24
                IPv6:
                  2001:df6:2400::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:10:87:f1:63:55:c7:e6:1f:c1:2c:fe:11:97:de:c1:97:f8:
         a4:b4:6a:9b:39:97:85:2d:eb:e5:d4:ec:e9:21:12:d9:16:38:
         ac:22:77:e2:eb:34:2b:e8:1d:19:e9:ac:d1:64:0e:69:7c:2e:
         b7:9e:24:36:7c:2c:6d:63:1c:ad:bf:22:5e:3e:a0:25:b8:1a:
         5e:96:67:6b:c9:ef:5f:bb:2e:b8:a6:aa:80:3c:84:95:36:b3:
         f2:ef:87:2f:e2:d2:84:e8:b8:2e:0d:4d:71:6b:8f:c3:97:c4:
         ce:8b:b4:8d:cb:eb:5c:6d:ce:4f:74:e2:55:51:ed:46:53:38:
         d1:67:a1:b3:93:ee:cc:15:b3:37:ca:9e:48:05:fa:4e:26:4b:
         19:11:d2:60:d3:05:30:30:5c:12:a8:cb:f3:af:c3:9a:f8:4a:
         fe:07:32:d2:b7:8f:3e:63:a1:af:da:9e:26:43:fb:cb:ec:11:
         b6:5d:e4:08:2b:d8:5b:1b:a3:9f:4f:39:3e:5c:76:12:08:56:
         2c:5c:89:18:91:0f:43:93:76:23:d1:19:da:eb:25:29:e7:ee:
         02:b4:d0:ca:a0:6c:f2:21:a2:e3:04:ae:1f:c6:a9:08:1d:48:
         70:3c:f8:ca:14:51:59:ac:f9:0e:4d:33:48:cd:e5:45:3a:76:
         af:9c:56:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 07:41:47 2024 by rpki-client on console-ams.rpki-client.org