Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x52oqmnxJno4UemSoGnAL1DoArw.cer
File:                     x52oqmnxJno4UemSoGnAL1DoArw.cer (raw, json)
Hash identifier:          dr2lWm55yHlOZCkycaeltbt+U1aBzBW0g6uw9HIK6+o=
Subject key identifier:   C7:9D:A8:AA:69:F1:26:7A:38:51:E9:92:A0:69:C0:2F:50:E8:02:BC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01B263
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 27 Jul 2023 08:29:38 +0000
Certificate not after:    Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources:    AS: 133433
                          IP: 103.227.26.0/23
                          IP: 2401:de0::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 03:13:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111203 (0x1b263)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 27 08:29:38 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=A91DC524/serialNumber=C79DA8AA69F1267A3851E992A069C02F50E802BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d0:9f:98:c3:32:80:c4:6e:68:2d:56:65:3d:
                    d6:53:e0:70:d9:70:bc:70:0c:f7:8d:77:12:69:5f:
                    ed:40:ef:0e:be:73:ce:aa:72:ca:7f:31:c0:fa:3b:
                    f5:8a:1d:af:50:d6:24:43:ac:b1:c0:26:51:2a:14:
                    99:43:ad:19:00:0f:7b:bd:ca:16:bc:a3:ab:d7:d4:
                    77:16:2b:91:48:2d:1a:45:b5:1e:fa:c0:ca:12:59:
                    59:9e:31:3b:ea:5c:31:bb:1d:d6:92:08:25:ca:9f:
                    0d:84:aa:b4:92:29:f5:49:3b:65:c0:1d:74:58:45:
                    19:37:11:d1:e0:ec:1b:75:56:dd:02:08:97:e2:98:
                    de:f7:df:f8:a0:32:3d:8c:f2:a7:0e:c9:11:20:93:
                    ab:d6:bb:70:5a:36:2d:63:02:b3:33:29:e5:d7:93:
                    c6:9b:70:a2:e2:c0:33:bd:db:e6:65:66:95:f9:a9:
                    9f:7f:1b:33:d8:67:ae:e2:8c:91:c4:26:4f:6d:ad:
                    5f:00:ba:96:55:cc:b0:87:13:11:fa:db:23:cb:84:
                    25:4c:98:30:2e:ec:bd:82:bb:2d:5e:e3:09:c4:c2:
                    9a:68:e5:fb:9b:67:63:57:c5:ea:f6:da:ea:c5:6b:
                    5c:89:47:d0:df:02:23:8e:d5:d0:da:8f:8d:57:c2:
                    1b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:9D:A8:AA:69:F1:26:7A:38:51:E9:92:A0:69:C0:2F:50:E8:02:BC
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  133433

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.227.26.0/23
                IPv6:
                  2401:de0::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:08:8f:b7:3c:16:1e:06:a7:a5:74:25:4b:1b:e4:c0:cd:15:
         63:07:f6:40:31:f9:02:4e:56:44:b7:01:48:fc:c1:8a:a5:39:
         48:65:8b:a5:9d:5d:5d:5e:22:88:70:98:2f:5d:9d:5d:68:7c:
         02:e8:58:27:31:6c:b7:82:52:fb:ae:4c:0a:57:fb:bd:80:c7:
         c5:17:1a:3a:f9:5e:bb:af:d0:e6:bd:ce:59:5c:51:a6:33:f2:
         08:16:42:8a:09:d6:11:a3:5c:b0:79:b6:e7:df:57:e0:8e:d1:
         42:16:2c:36:ac:06:50:81:d8:99:df:7f:35:13:28:92:27:56:
         22:16:85:0c:32:ab:68:bf:28:a6:4d:ca:09:c0:92:32:c7:a0:
         13:7b:8c:cb:03:8d:5b:bb:46:d5:03:60:cb:c1:78:8b:b3:11:
         76:9a:f9:79:fd:aa:dd:02:18:4b:55:d3:f3:8b:25:8b:14:7c:
         19:61:24:02:7e:01:4e:6d:7c:7c:02:b1:59:a0:03:68:5f:01:
         af:1c:b7:66:c1:0c:38:7b:fa:ba:bb:d3:9b:f9:a0:05:5e:59:
         ab:e6:de:6d:a9:cc:0c:d1:b3:a8:90:40:26:68:3c:09:bb:4b:
         02:3b:c1:e2:09:0d:0e:44:50:9c:10:b7:27:45:6f:27:a0:90:
         d9:dc:bf:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:05:29 2024 by rpki-client on console-fra.rpki-client.org