Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer
File:                     zF1c4NwYIQkMvHU417txI3GQguc.cer (raw, json)
Hash identifier:          VMahzU3AFvgZMRXy0yhRVbLIjSTrdXBksSqv0iqSarc=
Subject key identifier:   CC:5D:5C:E0:DC:18:21:09:0C:BC:75:38:D7:BB:71:23:71:90:82:E7
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01B49B
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 02 Aug 2023 21:23:35 +0000
Certificate not after:    Thu 31 Oct 2024 00:00:00 +0000
Subordinate resources:    AS: 140980
                          IP: 103.154.16.0/23
                          IP: 2406:5040::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Apr 2024 04:49:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111771 (0x1b49b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug  2 21:23:35 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=A91C91A6/serialNumber=CC5D5CE0DC1821090CBC7538D7BB7123719082E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:54:5d:1b:a4:23:1f:62:4f:ac:1e:d3:8d:15:
                    6f:e3:8e:1b:81:1f:d5:b4:30:0c:55:10:6f:45:94:
                    51:b8:f2:bf:48:00:3f:89:4d:5e:1e:fd:7c:3c:da:
                    c2:ac:d9:46:28:00:62:4d:1c:3c:5a:4d:00:69:4c:
                    01:9a:7c:7b:75:b0:bb:ff:37:d4:6c:0f:31:cb:be:
                    57:bf:75:a0:50:0a:54:60:20:5b:18:17:b1:18:aa:
                    d3:fd:61:4f:9b:7d:a1:aa:22:9c:18:59:22:d6:cf:
                    b7:38:f4:b5:ef:e9:82:b5:f6:28:74:56:b4:82:b7:
                    32:3c:ad:31:9f:e0:03:0f:18:7d:4a:b2:6f:a5:e8:
                    ba:24:70:de:95:04:92:29:7d:dc:3c:96:b6:fc:d8:
                    0f:3c:c4:81:84:03:e5:ef:cc:0b:86:ae:e4:0e:26:
                    7d:ab:28:e5:26:54:bc:74:e5:df:4d:92:9f:cf:d8:
                    b7:12:f8:80:d1:77:db:b5:90:8d:40:07:2b:f9:42:
                    43:39:71:d6:c7:34:72:bf:27:05:f0:b5:e9:0d:e9:
                    c9:9a:73:fa:ff:2f:76:f5:fc:38:fd:9b:e0:fd:64:
                    f2:4f:28:44:82:b7:8e:bf:30:ec:91:11:cf:38:44:
                    53:f6:6f:92:95:7d:0f:62:c5:07:1e:9b:88:d6:ba:
                    5a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:5D:5C:E0:DC:18:21:09:0C:BC:75:38:D7:BB:71:23:71:90:82:E7
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  140980

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.16.0/23
                IPv6:
                  2406:5040::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:be:c9:f7:68:48:a7:5e:4a:f8:0a:1f:af:e7:47:68:86:25:
         7f:dd:cb:3e:13:35:1e:1e:17:dd:65:0b:1d:5c:74:25:87:b6:
         78:cc:24:94:44:2e:4a:40:96:58:94:a1:37:4d:ad:c3:ba:99:
         a6:40:15:1e:3b:7e:07:eb:f5:ac:b6:47:5e:7a:dd:8c:4c:11:
         39:54:32:13:b0:23:ac:e9:b8:bb:87:ac:1b:73:da:45:1c:e1:
         08:9c:d3:1d:3a:03:f3:b4:68:5e:9d:f3:36:a5:d5:29:0b:ea:
         6e:3c:33:bc:8d:3a:ab:9b:e8:b0:f5:84:30:a1:91:73:b1:64:
         dd:12:31:21:bd:6f:fe:4d:54:4b:70:82:c6:a7:6c:34:c6:62:
         78:49:0e:19:e0:16:a9:8d:55:14:02:51:ea:53:df:9d:cd:ad:
         0e:a4:5f:73:2d:fb:83:84:51:d7:70:58:52:8a:47:92:46:a4:
         60:71:6b:8d:34:d3:d6:4d:07:9c:7f:13:c2:a7:0c:91:24:87:
         af:e1:70:4b:91:05:b7:96:35:4e:5c:c4:0f:b2:10:e7:a3:ac:
         fd:d4:c9:ae:63:3c:3d:0c:7f:eb:50:d9:9d:55:bf:23:75:94:
         c6:c4:7e:25:d4:f8:a2:21:61:e7:a8:78:97:fe:64:80:77:ee:
         2b:e5:8f:f0
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAbSbMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMDgwMjIxMjMzNVoXDTI0MTAzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQzkxQTYxMTAvBgNVBAUTKENDNUQ1Q0UwREMxODIxMDkwQ0JDNzUz
OEQ3QkI3MTIzNzE5MDgyRTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCtVF0bpCMfYk+sHtONFW/jjhuBH9W0MAxVEG9FlFG48r9IAD+JTV4e/Xw82sKs
2UYoAGJNHDxaTQBpTAGafHt1sLv/N9RsDzHLvle/daBQClRgIFsYF7EYqtP9YU+b
faGqIpwYWSLWz7c49LXv6YK19ih0VrSCtzI8rTGf4AMPGH1Ksm+l6LokcN6VBJIp
fdw8lrb82A88xIGEA+XvzAuGruQOJn2rKOUmVLx05d9Nkp/P2LcS+IDRd9u1kI1A
Byv5QkM5cdbHNHK/JwXwtekN6cmac/r/L3b1/Dj9m+D9ZPJPKESCt46/MOyREc84
RFP2b5KVfQ9ixQcem4jWulrzAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUzF1c4NwY
IQkMvHU417txI3GQgucwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUM5MUE2L0JBNENDRTBFRDcyQjExRUE4QzFCQkQ0REM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFDOTFBNi9CQTRDQ0UwRUQ3MkIxMUVBOEMxQkJENERDNEY5QUUwMi96RjFjNE53
WUlRa012SFU0MTd0eEkzR1FndWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAia0MC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZ5oQMA0EAgAC
MAcDBQAkBlBAMA0GCSqGSIb3DQEBCwUAA4IBAQBevsn3aEinXkr4Ch+v50dohiV/
3cs+EzUeHhfdZQsdXHQlh7Z4zCSURC5KQJZYlKE3Ta3DupmmQBUeO34H6/Wstkde
et2MTBE5VDITsCOs6bi7h6wbc9pFHOEInNMdOgPztGhenfM2pdUpC+puPDO8jTqr
m+iw9YQwoZFzsWTdEjEhvW/+TVRLcILGp2w0xmJ4SQ4Z4BapjVUUAlHqU9+dza0O
pF9zLfuDhFHXcFhSikeSRqRgcWuNNNPWTQecfxPCpwyRJIev4XBLkQW3ljVOXMQP
shDno6z91MmuYzw9DH/rUNmdVb8jdZTGxH4l1PiiIWHnqHiX/mSAd+4r5Y/w
-----END CERTIFICATE-----
Generated at Fri Mar 29 06:02:47 2024 by rpki-client on console-fra.rpki-client.org