Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xl_8-yz82bzWja6waX0xbPNbI_A.cer
File:                     xl_8-yz82bzWja6waX0xbPNbI_A.cer (raw, json)
Hash identifier:          iEC/2AvleZLo8Xz53vcSgWQOKnNqPqay2Qs3Lnm3Jis=
Subject key identifier:   C6:5F:FC:FB:2C:FC:D9:BC:D6:8D:AE:B0:69:7D:31:6C:F3:5B:23:F0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01B6F6
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 15 Aug 2023 14:47:22 +0000
Certificate not after:    Thu 31 Oct 2024 00:00:00 +0000
Subordinate resources:    AS: 150137
                          IP: 103.90.12.0/23
                          IP: 103.191.181.0/24
                          IP: 2001:df1:940::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 23 Apr 2024 06:13:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112374 (0x1b6f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 15 14:47:22 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=A91472E2/serialNumber=C65FFCFB2CFCD9BCD68DAEB0697D316CF35B23F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:aa:c1:8a:f2:07:ca:07:79:ac:98:d5:5b:6e:
                    11:7b:12:47:88:ba:e2:55:0d:7a:47:05:ed:c6:c8:
                    86:61:27:10:91:4b:b1:b1:e8:37:15:d6:5d:58:9b:
                    1a:87:13:c5:07:a6:0a:7d:f7:45:5b:d6:dc:c8:77:
                    b3:ad:3b:50:f3:4d:98:fb:b1:78:72:5a:47:8b:77:
                    6e:af:26:2c:2a:d2:11:7b:c7:67:67:ae:74:cc:b9:
                    ab:a8:45:35:3a:7d:0e:46:93:d9:06:72:fa:4d:42:
                    9c:2c:6c:09:e9:84:3c:54:00:86:57:0b:00:3f:92:
                    fe:f3:35:ae:30:3e:59:8f:20:99:18:8f:00:f3:bf:
                    80:19:e6:25:42:f7:4d:4c:64:9c:8d:6e:81:12:fb:
                    b0:6f:3a:f2:e8:47:87:69:a6:68:bc:67:ad:f7:70:
                    89:6c:d7:c1:e2:d8:77:1f:b3:02:f8:27:03:3e:b2:
                    18:01:15:45:19:97:77:fa:d5:72:86:fb:98:2e:fc:
                    8a:bc:67:51:97:4a:bb:89:7c:1e:93:40:c0:5b:b0:
                    07:2d:e3:a1:61:cc:5b:4f:9b:d4:fd:5b:7c:3d:5a:
                    77:1b:a4:6e:16:82:4e:10:4a:3e:ae:52:0b:27:04:
                    f2:47:65:9a:9e:a3:2f:20:c1:03:9e:fd:99:60:29:
                    7e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:5F:FC:FB:2C:FC:D9:BC:D6:8D:AE:B0:69:7D:31:6C:F3:5B:23:F0
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  150137

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.12.0/23
                  103.191.181.0/24
                IPv6:
                  2001:df1:940::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:5e:d3:d3:bf:8e:ca:b6:33:99:39:f0:17:e0:51:ec:fa:38:
         30:2d:aa:f2:6a:72:4a:1d:7b:bf:9b:38:91:a7:23:53:e1:5f:
         92:23:21:03:1f:c2:89:f4:36:41:18:c9:29:56:dd:a3:d6:20:
         f1:07:a6:d6:19:13:99:5f:09:7c:77:59:b1:88:6e:cf:b3:bc:
         0e:f9:5e:f6:f4:92:36:aa:4a:b8:27:00:9f:78:08:8e:db:f5:
         ea:a8:aa:f1:f5:8c:df:87:aa:b7:e7:24:23:7b:4b:f9:ac:ab:
         16:cd:c2:f2:64:a3:3a:bd:43:2e:66:7b:cc:eb:2f:45:16:9e:
         72:65:f2:e5:09:67:37:4f:d6:97:23:b3:6d:34:c9:43:1a:af:
         12:d7:47:d5:37:6e:dd:04:11:c5:22:32:eb:d0:0e:06:39:5b:
         ff:d6:10:a3:55:e6:ab:03:e4:db:cf:08:c9:d7:b6:f9:23:5a:
         83:6a:f8:af:58:41:83:b3:bc:99:b7:82:43:de:93:4f:da:fb:
         01:7a:c3:8b:94:41:51:de:01:73:99:8a:42:91:47:86:21:dc:
         f5:1d:6e:76:69:e9:27:2d:66:97:ee:00:12:9e:c3:15:60:0a:
         7f:5c:fe:64:91:0b:7c:69:e4:eb:41:be:c8:d2:b0:6f:c4:08:
         73:60:51:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 07:07:40 2024 by rpki-client on console-ams.rpki-client.org