Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0dmQoBPz_nXCSiWNYNV1awA6nM.cer
File:                     z0dmQoBPz_nXCSiWNYNV1awA6nM.cer (raw, json)
Hash identifier:          fwAHpjh/5O9EHX7ry5U5SKoUPgLIyMPy2qo/sjlE+fA=
Subject key identifier:   CF:47:66:42:80:4F:CF:F9:D7:09:28:96:35:83:55:D5:AC:00:EA:73
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01BD29
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A917AAD4/0DD8F79E51BA11EE84EF9C5FC4F9AE02/z0dmQoBPz_nXCSiWNYNV1awA6nM.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A917AAD4/0DD8F79E51BA11EE84EF9C5FC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 12 Sep 2023 22:16:50 +0000
Certificate not after:    Sat 31 Aug 2024 00:00:00 +0000
Subordinate resources:    AS: 136390
                          IP: 103.187.115.0/24
                          IP: 2001:df0:bc40::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 10:14:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113961 (0x1bd29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep 12 22:16:50 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=A917AAD4/serialNumber=CF476642804FCFF9D7092896358355D5AC00EA73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3a:7c:27:d6:f0:53:2f:d7:68:df:4d:0d:51:
                    ef:04:b2:30:31:cc:17:2a:50:44:1d:57:ae:8b:24:
                    d9:47:08:1f:27:fb:a7:8c:e2:bf:60:b5:22:3c:3e:
                    64:7c:5b:51:74:89:34:a2:08:be:0b:59:ec:72:8b:
                    a5:9b:8e:15:2c:52:9c:09:e6:fa:ba:7b:62:3a:e3:
                    df:ca:47:fc:cc:f7:e7:67:65:bc:d8:36:05:97:a1:
                    51:d0:b0:ca:dc:b1:7f:01:7c:44:0d:45:41:59:3b:
                    f8:5d:25:16:0b:cf:41:e9:2e:b1:12:86:f4:15:53:
                    81:2c:93:27:d6:64:6c:19:3a:3d:af:cc:22:ba:6a:
                    28:3c:67:f1:ef:9c:04:74:24:9c:13:46:03:fe:db:
                    6b:14:22:ce:77:fb:e0:c7:b9:d0:e8:1e:ed:86:c4:
                    9f:cf:c7:40:e2:18:bb:87:70:ac:97:84:19:f7:2b:
                    03:68:c0:74:84:69:f9:cd:ca:e1:5c:95:7c:73:1f:
                    ad:a9:db:90:0c:36:39:ec:d7:83:cd:94:2a:a5:b1:
                    a9:68:e9:2d:5c:ab:34:8f:4b:b7:f2:44:99:75:45:
                    4c:2d:d7:f4:f9:8c:f2:d1:68:77:b3:95:b0:14:2f:
                    53:e3:b4:00:27:6a:ac:e7:30:82:95:0a:29:a4:87:
                    1d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:47:66:42:80:4F:CF:F9:D7:09:28:96:35:83:55:D5:AC:00:EA:73
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917AAD4/0DD8F79E51BA11EE84EF9C5FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917AAD4/0DD8F79E51BA11EE84EF9C5FC4F9AE02/z0dmQoBPz_nXCSiWNYNV1awA6nM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  136390

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.115.0/24
                IPv6:
                  2001:df0:bc40::/48

    Signature Algorithm: sha256WithRSAEncryption
         ca:45:42:b4:00:84:d1:22:3c:bc:24:d5:5e:98:a2:52:2d:4d:
         d9:af:04:cc:5d:33:e7:9f:7f:4f:bd:55:00:9a:6b:4c:5c:4f:
         1f:3d:db:4c:5f:02:3e:44:8c:81:64:b7:69:7e:1b:e8:40:0d:
         50:1e:50:8c:2d:4b:18:dd:67:99:2c:21:ab:be:0d:38:cc:2b:
         4b:36:22:17:08:3b:32:83:1e:c1:56:f3:37:b6:32:d9:ea:a6:
         47:7f:94:46:ed:c4:d2:7b:a5:e3:2d:48:4e:41:30:e5:5e:20:
         5f:16:31:50:d7:49:0d:66:74:b7:a2:29:8c:15:61:66:3a:34:
         b0:f6:55:b0:b1:a8:90:a6:c9:b1:c4:f8:af:2c:2b:6d:ec:cf:
         01:f5:1b:ea:d3:31:66:0e:28:1d:5b:c3:a2:cd:77:25:0b:66:
         6f:7d:05:af:0f:21:33:52:85:14:f5:9b:b5:a1:b0:a4:cb:8e:
         f2:b1:ba:80:ae:09:e5:36:f5:41:79:92:99:e0:d7:4a:e9:ae:
         00:35:95:c3:cf:0f:94:70:60:e1:96:8a:7c:59:f0:9a:b8:98:
         8b:46:c9:42:f1:3b:13:f9:ff:2b:52:60:5a:c5:9a:87:77:7b:
         e7:03:04:28:8d:9c:b4:14:cd:f9:6f:92:6d:d1:a7:44:0a:31:
         49:cf:68:f2
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAb0pMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMDkxMjIyMTY1MFoXDTI0MDgzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxN0FBRDQxMTAvBgNVBAUTKENGNDc2NjQyODA0RkNGRjlENzA5Mjg5
NjM1ODM1NUQ1QUMwMEVBNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDIOnwn1vBTL9do300NUe8EsjAxzBcqUEQdV66LJNlHCB8n+6eM4r9gtSI8PmR8
W1F0iTSiCL4LWexyi6WbjhUsUpwJ5vq6e2I649/KR/zM9+dnZbzYNgWXoVHQsMrc
sX8BfEQNRUFZO/hdJRYLz0HpLrEShvQVU4EskyfWZGwZOj2vzCK6aig8Z/HvnAR0
JJwTRgP+22sUIs53++DHudDoHu2GxJ/Px0DiGLuHcKyXhBn3KwNowHSEafnNyuFc
lXxzH62p25AMNjns14PNlCqlsalo6S1cqzSPS7fyRJl1RUwt1/T5jPLRaHezlbAU
L1PjtAAnaqznMIKVCimkhx03AgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUz0dmQoBP
z/nXCSiWNYNV1awA6nMwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTdBQUQ0LzBERDhGNzlFNTFCQTExRUU4NEVGOUM1RkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE3QUFENC8wREQ4Rjc5RTUxQkExMUVFODRFRjlDNUZDNEY5QUUwMi96MGRtUW9C
UHpfblhDU2lXTllOVjFhd0E2bk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhTGMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAZ7tzMA8EAgAC
MAkDBwAgAQ3wvEAwDQYJKoZIhvcNAQELBQADggEBAMpFQrQAhNEiPLwk1V6YolIt
TdmvBMxdM+eff0+9VQCaa0xcTx8920xfAj5EjIFkt2l+G+hADVAeUIwtSxjdZ5ks
Iau+DTjMK0s2IhcIOzKDHsFW8ze2Mtnqpkd/lEbtxNJ7peMtSE5BMOVeIF8WMVDX
SQ1mdLeiKYwVYWY6NLD2VbCxqJCmybHE+K8sK23szwH1G+rTMWYOKB1bw6LNdyUL
Zm99Ba8PITNShRT1m7WhsKTLjvKxuoCuCeU29UF5kpng10rprgA1lcPPD5RwYOGW
inxZ8Jq4mItGyULxOxP5/ytSYFrFmod3e+cDBCiNnLQUzflvkm3Rp0QKMUnPaPI=
-----END CERTIFICATE-----
Generated at Thu May 2 11:35:51 2024 by rpki-client on console-fra.rpki-client.org