Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer
File:                     x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer (raw, json)
Hash identifier:          Ecq21Hwu5T5G+p41J9LuEfBpCGi/KXwpJJgZVSqBA80=
Subject key identifier:   C7:E5:79:0B:05:E0:D4:D2:09:DB:43:DC:68:0F:B7:88:27:98:14:A9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01ADA7
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 03 Jul 2023 02:17:52 +0000
Certificate not after:    Sat 31 Aug 2024 00:00:00 +0000
Subordinate resources:    AS: 133523
                          IP: 103.73.115.0/24
                          IP: 103.232.218.0/24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 02:50:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109991 (0x1ada7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul  3 02:17:52 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=A91E01B2/serialNumber=C7E5790B05E0D4D209DB43DC680FB788279814A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7c:13:a7:e8:c7:3a:f4:a2:9c:c6:84:93:cb:
                    3b:84:b2:67:e0:a7:ff:e0:9a:57:7f:07:23:1f:9f:
                    50:06:36:8a:88:14:88:70:0b:63:10:85:c7:dc:30:
                    e9:5a:6b:1d:07:3b:35:95:70:31:c9:15:35:fc:c2:
                    c2:d1:01:34:16:a5:1b:a3:0f:ff:d2:cd:70:45:09:
                    0e:8f:74:d8:7f:62:7e:11:e1:7e:3f:eb:b3:4f:56:
                    98:e7:fb:d3:17:e8:59:59:b7:6a:33:61:44:da:86:
                    02:99:07:4b:35:26:91:ad:7b:d6:cf:75:9f:50:b1:
                    95:5e:a1:fe:6f:60:2d:05:14:ad:f2:a6:e8:d2:0d:
                    51:34:6f:6e:cf:f3:ab:f7:e5:a6:b2:72:6c:88:17:
                    0c:d2:a3:ea:9b:09:d3:0b:07:21:f5:4d:e1:82:d7:
                    d8:dc:71:61:32:45:c1:90:46:90:bf:a8:60:74:96:
                    8b:c5:7e:cd:7e:ed:48:f1:d8:ac:7a:87:c9:37:5a:
                    6d:af:7f:d8:f9:e0:3a:ef:b7:c9:14:d5:53:05:cf:
                    3f:2b:a7:ab:c9:46:e1:6a:48:2c:7d:52:10:a8:54:
                    88:92:0c:c4:87:be:3b:4b:a8:c8:5d:41:00:46:b0:
                    62:b5:79:f9:7c:67:00:79:0c:54:66:6e:51:75:32:
                    94:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:E5:79:0B:05:E0:D4:D2:09:DB:43:DC:68:0F:B7:88:27:98:14:A9
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  133523

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.115.0/24
                  103.232.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:f0:ac:26:b1:3a:d6:b5:48:64:8a:79:7a:23:96:5b:cf:aa:
         0f:2f:54:74:ef:d6:1b:ff:2e:93:50:e8:d7:0e:3a:a6:64:05:
         40:73:ab:36:a8:05:04:d6:d6:d9:7c:aa:a2:00:93:36:6c:1a:
         f6:f9:6e:dd:d2:5b:74:9d:1f:a5:f0:be:8b:39:25:a1:c7:ac:
         8b:3d:5b:79:70:51:eb:7a:e2:41:79:a7:78:03:86:9f:76:74:
         80:9c:a1:ed:f2:f8:62:11:bf:04:3b:71:7e:1a:c2:1a:5e:94:
         41:4c:c5:b0:0e:fe:29:21:7a:8c:db:d2:fa:f5:2b:c5:9e:27:
         d4:5e:26:5b:66:27:69:b6:01:04:47:9e:37:6f:0a:4a:58:1c:
         f2:95:27:dd:a1:41:73:12:58:d1:21:f3:6c:b8:be:2f:3c:47:
         b7:e3:00:12:5c:55:02:a3:9d:88:9c:68:2b:d6:47:79:55:af:
         4e:b5:6e:f0:f2:64:71:bc:93:db:f0:8f:61:f1:de:1a:03:6c:
         c8:f3:ce:ba:c6:ff:4a:18:0a:89:78:7f:76:7b:fe:fb:82:ab:
         90:9c:78:25:71:fa:e1:b0:bb:11:62:e6:e7:9b:93:51:3c:23:
         6e:8f:a3:7c:1a:d0:7c:ea:97:8b:6f:6e:31:6d:ba:1e:aa:80:
         bd:c8:3a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 05:37:28 2024 by rpki-client on console-ams.rpki-client.org