Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w0Ozu4On4j-tla-NIytSBSoP3nI.cer
File:                     w0Ozu4On4j-tla-NIytSBSoP3nI.cer (raw, json)
Hash identifier:          6AZWw6Si8jC0fvh2vDoSSHjPOMD63DZBfhZ68dOekLk=
Subject key identifier:   C3:43:B3:BB:83:A7:E2:3F:AD:95:AF:8D:23:2B:52:05:2A:0F:DE:72
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01B495
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91C66B7/66CDA4E8911611EA91C4650CC4F9AE02/w0Ozu4On4j-tla-NIytSBSoP3nI.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91C66B7/66CDA4E8911611EA91C4650CC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 02 Aug 2023 20:56:21 +0000
Certificate not after:    Tue 30 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 140732
                          IP: 103.150.208.0/23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Apr 2024 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111765 (0x1b495)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug  2 20:56:21 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=A91C66B7/serialNumber=C343B3BB83A7E23FAD95AF8D232B52052A0FDE72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b2:9b:8f:f8:88:8a:6a:de:7a:61:37:22:86:
                    65:61:18:1f:83:c9:2c:4b:2a:cb:d9:37:50:c1:5c:
                    a9:f8:87:c4:fc:7b:2c:e0:73:4b:93:aa:79:c5:c7:
                    54:5e:77:28:7a:fe:77:c3:36:10:e9:5e:0d:b6:76:
                    a9:61:74:48:d4:f1:c3:21:3e:42:13:6d:8e:9d:3b:
                    12:60:5c:82:73:93:9f:b4:8f:12:a8:d2:f7:55:93:
                    80:a5:a2:87:d4:a7:2a:05:7d:c6:05:be:f9:c8:28:
                    d6:9a:f9:ef:42:12:3a:73:fe:d0:54:8e:9e:20:77:
                    b6:0f:c1:af:4a:ba:47:fa:e0:6b:16:fe:76:74:43:
                    ca:88:74:9a:be:04:1a:30:a0:f2:be:61:eb:65:d3:
                    cb:82:36:5a:85:ba:60:4f:fb:92:fc:00:c4:99:e2:
                    48:5f:60:df:0c:d5:d3:28:aa:75:66:a6:98:06:cd:
                    f6:3b:eb:26:2f:4e:4a:9f:a4:7c:8a:d9:42:2e:f9:
                    56:0c:fe:7f:6f:5a:84:35:a2:84:d2:17:b7:34:3e:
                    7b:7a:a9:93:06:96:a7:ec:a4:65:a2:7b:d1:ee:46:
                    a9:ea:ef:5d:cc:20:23:0e:82:b5:4c:a2:b9:3f:1f:
                    fc:bc:bb:89:d8:0d:6a:30:dc:da:e6:96:02:1b:08:
                    75:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:43:B3:BB:83:A7:E2:3F:AD:95:AF:8D:23:2B:52:05:2A:0F:DE:72
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C66B7/66CDA4E8911611EA91C4650CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C66B7/66CDA4E8911611EA91C4650CC4F9AE02/w0Ozu4On4j-tla-NIytSBSoP3nI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  140732

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:1a:43:f1:59:79:01:dd:ca:39:f9:78:46:5c:c2:5b:ec:27:
         28:e6:9a:df:3a:c3:a0:bb:17:0a:cc:b4:9b:18:a6:97:e5:50:
         fb:5b:bc:fc:28:92:77:c5:c6:b1:0f:7a:63:55:10:48:14:0a:
         6c:37:ce:94:14:c8:37:e5:06:f1:e6:3e:b7:8a:0f:60:69:b5:
         69:b5:be:fd:d8:51:a9:6f:3a:b5:de:ad:90:4e:08:77:34:dd:
         90:09:21:93:e0:8e:45:c1:d7:d9:8f:90:17:81:39:32:77:ac:
         86:19:9d:84:a2:7a:42:c3:93:fe:a3:58:36:f3:03:bf:3b:af:
         4a:fc:17:7d:3d:10:a0:26:1f:29:fd:34:9a:c7:f3:69:5c:2c:
         71:39:fd:1e:ca:d6:b3:ff:20:51:6a:a7:27:0a:bb:d3:25:ae:
         f3:31:bc:21:1f:f9:4b:6d:c7:93:23:7a:65:b2:b5:76:64:eb:
         d7:c0:b6:4a:e9:c0:07:38:11:e7:88:eb:b4:bc:7c:88:9c:2f:
         c2:d5:0d:de:61:ad:dc:45:41:5d:65:ea:17:66:ba:7b:4d:e1:
         43:92:5f:70:0c:42:bf:90:6b:5d:2c:75:44:59:5a:15:3b:9f:
         43:c9:b7:5e:bd:dd:24:43:aa:c2:e5:2c:58:bc:f6:9f:5b:fb:
         2a:e2:e8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 23:50:59 2024 by rpki-client on console-ams.rpki-client.org