Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygBwrFIB1vandapSXVPY4zDjIJY.cer
File:                     ygBwrFIB1vandapSXVPY4zDjIJY.cer (raw, json)
Hash identifier:          ff/sGTScUTFvcE/Gz6nVuRRRftYKGjjNkbIR16nbDgQ=
Subject key identifier:   CA:00:70:AC:52:01:D6:F6:A7:75:AA:52:5D:53:D8:E3:30:E3:20:96
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01CBEA
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 21 Nov 2023 04:48:55 +0000
Certificate not after:    Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources:    AS: 150681
                          IP: 103.53.160.0/23
                          IP: 2400:cae0::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Apr 2024 02:50:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117738 (0x1cbea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov 21 04:48:55 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=A9116907/serialNumber=CA0070AC5201D6F6A775AA525D53D8E330E32096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a4:a3:e9:6f:ba:a7:65:26:bb:e8:ea:3a:a4:
                    69:f2:dc:45:9d:7b:f9:e6:e7:e2:f5:97:67:c2:ec:
                    2f:85:f2:c8:30:de:8c:b0:38:01:de:7c:6a:7c:2d:
                    49:3e:2f:77:81:1e:44:9f:8f:9c:5b:a6:71:c1:fb:
                    8d:c9:86:83:e7:a2:04:af:1e:61:2c:b7:ac:98:99:
                    00:6c:97:4c:8e:4f:d3:a1:a9:c9:1b:df:22:a4:0b:
                    58:a0:a2:83:57:4d:75:c8:3c:82:12:69:9a:3d:5a:
                    e2:d8:ab:f3:40:1b:6b:e7:7e:2a:d6:ea:01:aa:c6:
                    e4:a2:77:d1:ca:43:d6:d6:8e:d3:71:91:74:d3:0b:
                    8f:54:cc:06:5a:ba:2b:58:35:3c:aa:37:1b:15:6f:
                    cc:48:ed:1c:bd:1d:77:27:56:df:90:6b:9b:5e:8e:
                    09:b1:30:36:fa:da:8e:f7:04:82:d4:01:c0:05:c0:
                    7f:a9:3e:9c:8a:64:cc:85:29:e3:85:1e:d4:5c:42:
                    b2:91:3a:12:24:c6:c2:49:81:73:dd:c9:9e:b7:2e:
                    02:19:05:02:1c:d8:63:3a:c9:af:c1:a4:83:fb:a1:
                    fa:d3:db:38:09:1e:7d:b5:03:56:bc:03:08:9c:4e:
                    e7:e6:ae:8e:ac:8a:69:e2:8c:80:80:de:c3:eb:5d:
                    35:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:00:70:AC:52:01:D6:F6:A7:75:AA:52:5D:53:D8:E3:30:E3:20:96
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  150681

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.53.160.0/23
                IPv6:
                  2400:cae0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:a5:26:89:ab:c2:a3:54:8d:5d:1b:7c:c2:14:df:66:d2:85:
         b3:50:d3:a4:9c:2d:b9:c6:08:47:65:30:b6:cc:8e:60:43:ea:
         b9:b3:13:ae:ef:04:b3:9b:d2:9e:67:fc:e0:b1:99:5d:31:7b:
         fb:cd:63:93:b2:11:c3:e7:b0:2c:12:94:61:ef:66:39:61:46:
         0f:4f:04:42:c5:33:4c:fe:71:d4:74:d9:aa:50:f6:7a:dd:e2:
         c8:12:c2:6b:23:dd:d2:b5:47:1d:2a:03:15:6e:37:c6:5e:27:
         3f:98:9c:d3:49:65:02:36:3b:0d:f7:88:90:0c:02:e2:0a:ef:
         75:76:86:45:0d:e2:c9:b6:0c:8a:bb:af:57:9b:1e:27:9d:01:
         1d:85:b6:84:9e:1d:8c:e3:08:b6:46:27:94:3d:48:5c:db:81:
         13:89:31:7c:1e:ca:e5:b3:9f:79:68:55:b0:d4:35:f6:da:e4:
         4d:91:53:9a:49:96:26:f1:c7:a3:e7:4b:61:bf:9b:99:bc:9a:
         09:f3:1e:e7:89:ce:73:9a:c8:0b:01:bc:64:14:23:a2:f0:b7:
         61:93:21:6c:54:6c:98:87:ff:54:e6:b9:dc:cd:85:a6:41:5f:
         9f:7d:ab:42:d4:82:4c:c1:c8:0a:08:7a:4e:c7:d2:53:e1:0d:
         42:f0:bd:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 03:44:47 2024 by rpki-client on console-fra.rpki-client.org