Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7ZI6y4jhyqRjQV3Ew81hT9vY54.cer
File:                     w7ZI6y4jhyqRjQV3Ew81hT9vY54.cer (raw, json)
Hash identifier:          lle84uK914HdcpKbFnXHqsCoZ+BD6c36oNziguls0vs=
Subject key identifier:   C3:B6:48:EB:2E:23:87:2A:91:8D:05:77:13:0F:35:85:3F:6F:63:9E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01B15E
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 20 Jul 2023 16:01:10 +0000
Certificate not after:    Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources:    AS: 131448
                          IP: 103.69.136.0/22
                          IP: 116.66.180.0/22
                          IP: 2405:ef80::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Apr 2024 04:49:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110942 (0x1b15e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 20 16:01:10 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=A9168197/serialNumber=C3B648EB2E23872A918D0577130F35853F6F639E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:19:23:bf:a6:99:78:00:2c:9a:63:80:a9:04:
                    9b:dd:95:6c:80:25:9a:cc:89:da:83:f0:d5:45:d2:
                    36:c2:96:a4:50:d3:05:6f:17:3d:85:ee:91:a5:48:
                    80:91:2b:99:6c:52:97:2e:5b:62:85:89:29:0f:df:
                    66:fc:15:7f:26:b0:07:b6:ad:d7:58:e3:96:5f:c4:
                    64:89:9d:c1:12:e1:b7:11:9c:64:7f:63:b9:dc:b2:
                    f9:f0:3c:80:ea:b3:3d:b9:9f:07:24:7f:e8:53:dc:
                    51:0c:07:68:23:2b:b1:4e:2b:53:76:2c:b4:e3:03:
                    a6:2a:8d:35:11:ef:08:a4:50:e1:e3:eb:0d:8a:5f:
                    73:83:5c:cf:ec:de:45:f9:a4:b1:8d:8f:79:87:a2:
                    31:12:ed:f3:7e:8e:fc:8c:42:26:1a:24:67:73:0a:
                    7e:63:c6:3d:fb:d8:2f:40:5a:1e:1d:cd:95:76:8a:
                    7f:6a:ee:58:be:84:33:9a:ad:64:ed:e4:a4:ec:8a:
                    c1:84:e7:d5:fa:53:39:a9:01:69:ce:52:8b:ac:9b:
                    3f:60:75:e4:03:01:59:75:f5:ce:84:22:40:95:1b:
                    26:99:b1:ef:8b:a8:a8:fa:26:0a:b7:13:cf:cd:b0:
                    e3:6c:f4:7a:4e:c2:9f:7e:a2:4d:ff:97:e1:1a:4d:
                    f1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B6:48:EB:2E:23:87:2A:91:8D:05:77:13:0F:35:85:3F:6F:63:9E
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131448

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.69.136.0/22
                  116.66.180.0/22
                IPv6:
                  2405:ef80::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:5e:d3:19:71:57:5a:fe:c3:c1:37:3f:01:23:eb:f4:c5:b1:
         c7:cf:86:67:41:cb:b2:84:20:55:80:67:73:40:4a:f0:6a:f2:
         54:58:5b:f3:a6:f5:9b:2a:00:18:01:45:8c:5d:c3:f5:5e:c7:
         91:8c:e8:28:28:d7:ce:03:5f:2e:b1:09:19:15:d6:ec:02:5e:
         5b:2e:6a:88:f4:c6:c5:85:d2:1d:65:85:4b:ee:e0:86:a1:d6:
         0e:3d:fb:c7:3c:ca:22:06:98:f0:3f:ae:af:1e:6b:67:d4:d0:
         c0:7e:79:9a:ed:13:a6:41:80:af:6d:b5:b5:c1:49:f4:07:c3:
         20:e3:cb:04:84:8b:91:09:cb:2d:3b:d2:f0:cb:5d:40:f4:58:
         77:a6:f6:57:ad:d1:f3:e5:56:56:95:dc:c9:ab:28:2f:6f:6b:
         7d:7f:90:98:5e:ed:9d:2c:83:bc:f1:74:e4:12:22:79:f7:cf:
         25:4c:48:3d:9a:99:7b:04:d5:9f:b2:e0:bb:9c:20:18:c9:98:
         08:0b:4d:99:f1:9f:6c:7c:20:b0:f3:e1:b4:bd:7b:f1:92:fc:
         0a:04:5d:60:4f:30:36:71:71:4f:e4:1b:2b:63:cc:23:1b:db:
         2b:be:0b:ae:6e:da:77:9c:6f:a3:6b:e7:be:3c:f5:b3:d8:07:
         0f:0b:5c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 05:47:32 2024 by rpki-client on console-ams.rpki-client.org