Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wW7sB30zjEI6rx3reXZAZxt_yb4.cer
File:                     wW7sB30zjEI6rx3reXZAZxt_yb4.cer (raw, json)
Hash identifier:          YG+m986qvneaQcpsCJ+rJgl6agMlA5jF8Fh9q1Z5jG0=
Subject key identifier:   C1:6E:EC:07:7D:33:8C:42:3A:AF:1D:EB:79:76:40:67:1B:7F:C9:BE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01C9C3
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 08 Nov 2023 18:31:59 +0000
Certificate not after:    Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 139595
                          IP: 103.142.39.0/24
                          IP: 103.171.14.0/24
                          IP: 2001:df7:3080::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 07:49:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117187 (0x1c9c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov  8 18:31:59 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=A9199E9B/serialNumber=C16EEC077D338C423AAF1DEB797640671B7FC9BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:07:a4:9a:98:f9:c8:49:7b:e5:86:7c:c8:dc:
                    af:f2:db:11:7f:6b:b6:55:de:dd:96:79:3a:c2:2c:
                    c2:e3:e0:41:ef:b3:cb:3d:ea:24:96:17:c0:5a:c4:
                    7e:84:d7:e3:03:ac:18:76:51:65:10:26:79:00:26:
                    02:e6:e5:1a:8e:cd:8f:5b:ec:5d:dc:fa:a3:a2:02:
                    23:61:e2:14:1f:bb:62:92:62:61:91:84:79:b2:28:
                    18:b8:bc:9a:1b:e2:fe:1e:94:03:fe:90:19:75:4a:
                    fa:95:58:02:62:4b:1f:ee:c0:b0:ee:fe:cb:e5:8b:
                    b6:28:92:10:14:05:23:ee:01:ce:ce:a2:ff:f9:dd:
                    19:84:0f:2c:3a:34:b7:6e:f0:ba:16:a0:9e:5b:03:
                    c0:15:b5:cd:2b:e2:f5:b4:a9:ce:8b:53:12:6e:6b:
                    59:59:1b:46:e7:7a:10:f4:35:ff:60:14:16:c6:17:
                    59:6f:0e:48:40:e0:8e:d2:1b:36:ce:85:a7:8f:32:
                    5f:f9:22:64:d7:61:cd:a3:4d:e3:44:80:25:83:72:
                    4f:3e:de:12:ed:9b:68:d6:5a:19:00:fd:3a:59:6a:
                    80:e4:96:1c:53:53:01:d2:36:89:78:ff:79:ff:ec:
                    81:01:05:4a:61:28:19:7f:00:49:81:1b:7c:7e:79:
                    28:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:6E:EC:07:7D:33:8C:42:3A:AF:1D:EB:79:76:40:67:1B:7F:C9:BE
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  139595

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.39.0/24
                  103.171.14.0/24
                IPv6:
                  2001:df7:3080::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:3f:29:fd:c4:9b:41:d4:57:a0:ab:64:c8:0e:1b:b2:73:52:
         07:51:af:a7:2d:db:8a:b1:33:39:e7:31:22:de:8a:e7:0f:ca:
         df:cc:f0:d3:5f:84:d8:26:fc:6d:4b:2b:c8:50:3b:43:a2:ed:
         c8:88:e9:5f:4a:60:27:5b:5e:b0:02:2e:90:58:4e:3b:ff:30:
         00:8d:de:ce:0d:79:63:96:73:37:9e:2a:9a:80:c7:4f:9c:a2:
         26:cf:03:89:67:76:f8:68:82:94:48:02:07:dd:18:fc:75:c0:
         a2:1d:76:c8:c0:cc:d6:37:fe:49:10:c0:93:5d:a5:95:6f:5e:
         a0:cc:c6:36:af:20:1d:81:1c:20:72:b5:a3:dc:94:22:2c:1f:
         19:43:5b:d4:7d:10:98:64:08:ea:2f:02:78:64:66:a2:73:6f:
         99:f4:8d:95:15:60:fb:b4:65:04:45:38:8a:ce:5f:ce:fe:9d:
         71:e5:5b:e6:e6:7a:b9:2a:d9:08:ea:d8:61:6c:e3:c8:08:53:
         c7:bd:32:25:ae:f1:7d:a7:13:42:28:0e:2a:71:75:68:bc:31:
         f1:05:cc:ab:a5:8e:50:ea:f0:6d:70:15:84:59:cc:3f:be:2f:
         ac:b5:8d:7b:1a:f7:62:fd:00:fa:e6:74:90:b2:b4:28:ae:da:
         03:6d:ee:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:03:16 2024 by rpki-client on console-ams.rpki-client.org