Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer
File:                     xvo-z74pzTYwaQdi6zKIEDptCKA.cer (raw, json)
Hash identifier:          hwL32C2mZ4XyG0hqzA+rdewkmMkmFnVyrNTITPlllbc=
Subject key identifier:   C6:FA:3E:CF:BE:29:CD:36:30:69:07:62:EB:32:88:10:3A:6D:08:A0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01CA1A
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 09 Nov 2023 21:43:40 +0000
Certificate not after:    Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 58726
                          IP: 103.20.152.0/22
                          IP: 2001:df1:1a80::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Apr 2024 04:49:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117274 (0x1ca1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov  9 21:43:40 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=A91D9A6D/serialNumber=C6FA3ECFBE29CD3630690762EB3288103A6D08A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f0:8e:e0:db:a1:63:bc:e9:e0:1f:46:c9:71:
                    09:f7:01:42:81:12:fa:3e:bf:77:28:39:89:05:78:
                    66:ec:83:13:1a:a0:5c:6e:85:2d:82:30:aa:17:b9:
                    60:42:38:20:13:5b:a9:1f:bd:99:46:ce:23:22:2e:
                    28:8f:e0:d0:09:c8:d8:23:4c:03:f4:f6:ff:2b:be:
                    26:01:a6:61:f1:f0:f6:1a:b0:2e:dd:99:4d:2b:31:
                    e3:a1:45:17:fa:ba:30:04:2f:77:38:f0:8e:30:4c:
                    8d:01:da:19:85:da:c9:1c:b8:73:5a:8f:00:92:90:
                    60:0d:7a:3b:36:2e:dd:44:8b:b4:4c:11:16:e3:e8:
                    42:cd:96:06:fe:2a:9e:8d:c6:fd:5d:77:48:12:cc:
                    5a:99:3d:76:81:f0:85:4e:f0:ac:a5:d1:d8:26:fa:
                    6f:fa:3c:4e:1f:43:90:98:90:b8:e7:f0:3d:59:ad:
                    3c:63:e5:d8:f0:b1:50:01:91:e3:7d:08:bc:89:94:
                    59:fb:83:ff:be:89:9f:5b:2c:8c:f8:c3:e1:b8:a8:
                    2e:41:5f:f9:a5:a9:b0:ec:c2:b3:88:16:86:72:98:
                    cf:3b:72:19:14:bf:75:46:46:16:eb:57:15:7f:3b:
                    f4:28:28:7f:00:df:36:58:a2:88:56:1b:74:8e:6d:
                    7b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:FA:3E:CF:BE:29:CD:36:30:69:07:62:EB:32:88:10:3A:6D:08:A0
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58726

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.20.152.0/22
                IPv6:
                  2001:df1:1a80::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:6d:d0:a1:e2:bf:78:78:63:63:b9:37:97:d6:64:3e:34:11:
         df:b0:0a:c4:44:0f:da:35:ec:1a:f1:80:dd:0f:ce:ab:85:9c:
         23:85:63:08:16:bf:69:63:4e:ed:20:0f:7b:cf:c0:e8:5b:7e:
         e3:01:90:e4:b3:89:df:53:49:73:cd:0a:6e:38:f2:b8:e4:1e:
         aa:53:d8:1e:6f:cb:08:de:95:ef:7d:87:03:93:1c:5d:65:e1:
         16:4c:9d:3b:d9:2a:44:23:a2:66:36:62:58:5a:78:46:bc:ff:
         cd:96:a7:3b:da:4e:78:ba:f5:67:8e:cd:29:40:e8:a1:7b:1b:
         ac:2b:e5:c2:69:ac:2f:0e:67:08:dc:df:9e:6a:1b:1a:87:5b:
         fd:93:40:b1:49:45:11:c9:eb:25:4d:d0:b8:ed:df:ce:64:c9:
         05:0a:06:36:82:19:df:96:9b:ba:52:07:bc:ae:fd:e7:be:c0:
         e2:a3:e0:46:74:92:86:e5:6c:5c:b3:b7:3a:23:d4:c4:41:10:
         ea:1c:9b:b2:fa:84:4e:38:e5:97:3f:6e:3f:b4:0f:78:8b:74:
         f0:f6:da:14:c4:8f:e2:e9:de:8a:87:63:0e:2a:58:64:e3:2e:
         71:45:1f:0c:16:45:8f:83:f9:7b:85:be:ee:d7:43:80:50:25:
         d8:18:0d:ff
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAcoaMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMTEwOTIxNDM0MFoXDTI0MTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRDlBNkQxMTAvBgNVBAUTKEM2RkEzRUNGQkUyOUNEMzYzMDY5MDc2
MkVCMzI4ODEwM0E2RDA4QTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDE8I7g26FjvOngH0bJcQn3AUKBEvo+v3coOYkFeGbsgxMaoFxuhS2CMKoXuWBC
OCATW6kfvZlGziMiLiiP4NAJyNgjTAP09v8rviYBpmHx8PYasC7dmU0rMeOhRRf6
ujAEL3c48I4wTI0B2hmF2skcuHNajwCSkGANejs2Lt1Ei7RMERbj6ELNlgb+Kp6N
xv1dd0gSzFqZPXaB8IVO8Kyl0dgm+m/6PE4fQ5CYkLjn8D1ZrTxj5djwsVABkeN9
CLyJlFn7g/++iZ9bLIz4w+G4qC5BX/mlqbDswrOIFoZymM87chkUv3VGRhbrVxV/
O/QoKH8A3zZYoohWG3SObXuRAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUxvo+z74p
zTYwaQdi6zKIEDptCKAwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUQ5QTZEL0EyMUU3MUQyREI4RTExRTlBMzUyNjIyNEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFEOUE2RC9BMjFFNzFEMkRCOEUxMUU5QTM1MjYyMjRDNEY5QUUwMi94dm8tejc0
cHpUWXdhUWRpNnpLSUVEcHRDS0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAOVmMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCZxSYMA8EAgAC
MAkDBwAgAQ3xGoAwDQYJKoZIhvcNAQELBQADggEBAFlt0KHiv3h4Y2O5N5fWZD40
Ed+wCsRED9o17BrxgN0PzquFnCOFYwgWv2ljTu0gD3vPwOhbfuMBkOSzid9TSXPN
Cm448rjkHqpT2B5vywjele99hwOTHF1l4RZMnTvZKkQjomY2YlhaeEa8/82Wpzva
Tni69WeOzSlA6KF7G6wr5cJprC8OZwjc355qGxqHW/2TQLFJRRHJ6yVN0Ljt385k
yQUKBjaCGd+Wm7pSB7yu/ee+wOKj4EZ0koblbFyztzoj1MRBEOocm7L6hE445Zc/
bj+0D3iLdPD22hTEj+Lp3oqHYw4qWGTjLnFFHwwWRY+D+XuFvu7XQ4BQJdgYDf8=
-----END CERTIFICATE-----
Generated at Fri Mar 29 05:47:33 2024 by rpki-client on console-ams.rpki-client.org