Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOCDR5xGct-ZKLqoOPKrKAJt7_c.cer
File:                     zOCDR5xGct-ZKLqoOPKrKAJt7_c.cer (raw, json)
Hash identifier:          dnb0yyAdXecelNcqzKYlYOz6MAOdjooN41Lowjt6ZEc=
Subject key identifier:   CC:E0:83:47:9C:46:72:DF:99:28:BA:A8:38:F2:AB:28:02:6D:EF:F7
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01DC62
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91540B9/D5C251C85B5311ED978E0577C4F9AE02/zOCDR5xGct-ZKLqoOPKrKAJt7_c.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91540B9/D5C251C85B5311ED978E0577C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 01 Feb 2024 05:04:37 +0000
Certificate not after:    Thu 01 May 2025 00:00:00 +0000
Subordinate resources:    AS: 149438
                          IP: 103.179.152.0/23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Apr 2024 04:49:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121954 (0x1dc62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb  1 05:04:37 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=A91540B9/serialNumber=CCE083479C4672DF9928BAA838F2AB28026DEFF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d0:3b:11:00:51:01:14:25:05:f6:e7:f0:80:
                    2b:f7:2b:fb:2d:4f:d3:67:27:8e:d9:f7:76:e2:8f:
                    aa:b0:cc:55:76:38:b2:27:2e:c0:06:da:8e:05:49:
                    ef:ca:63:e8:37:de:14:7c:cb:55:b1:0c:9c:df:df:
                    26:57:81:4f:a8:b4:4e:b3:3c:56:98:0a:49:6d:0a:
                    5c:f7:57:0e:6a:72:d4:81:a2:9b:b4:62:98:e1:e8:
                    54:2b:56:44:0c:84:de:e5:c1:ff:7e:e0:88:40:23:
                    a0:75:f5:f6:9e:75:5e:4d:dd:2c:d4:e2:4d:86:e5:
                    4b:54:2b:4e:79:de:3c:d0:f6:7e:0f:6b:2e:4a:a5:
                    fe:20:ca:f0:6a:73:2e:75:70:5d:1e:98:c2:ba:cf:
                    e4:31:50:7d:e8:b5:f0:3e:98:a4:4e:51:f5:fc:05:
                    5a:94:8a:d4:05:0c:b7:45:34:ed:f1:10:d9:0b:4b:
                    c8:91:d9:1c:86:e4:7a:42:6d:98:33:c2:0a:91:94:
                    00:8a:08:54:9b:fb:d4:7b:55:f2:c9:41:57:aa:b3:
                    7b:e5:d0:77:25:4a:d2:c6:34:a1:2b:cd:17:ad:5b:
                    ad:ef:4e:ca:4c:4d:13:36:e0:d2:cd:19:ad:d9:54:
                    80:5f:96:24:19:34:b3:86:f6:b3:b9:c2:ba:be:92:
                    87:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:E0:83:47:9C:46:72:DF:99:28:BA:A8:38:F2:AB:28:02:6D:EF:F7
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91540B9/D5C251C85B5311ED978E0577C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91540B9/D5C251C85B5311ED978E0577C4F9AE02/zOCDR5xGct-ZKLqoOPKrKAJt7_c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  149438

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:3c:3d:fc:f9:3c:a7:ab:e1:0d:10:68:66:4f:7c:51:83:1f:
         94:31:ad:5e:5e:65:7e:8c:9f:13:8b:27:a5:cb:22:ce:20:0d:
         18:47:c6:8a:d1:c1:cc:8c:8a:39:6b:7a:f8:dd:ed:ad:bc:58:
         f2:07:d8:82:1b:a2:66:f9:47:42:a1:4a:55:1c:5a:c6:92:0d:
         c5:5d:45:64:79:dc:66:e2:a1:4f:86:34:f2:1f:23:59:1d:cb:
         ea:28:9a:eb:3c:e0:71:a3:89:1b:30:3d:d2:a8:32:c0:c1:31:
         2a:de:09:a2:d4:de:bb:d5:32:6f:0a:26:2d:ea:7b:d6:e8:b1:
         25:4a:18:22:f8:dc:c0:84:49:2c:fa:39:24:0b:b9:2b:76:0e:
         9e:8b:65:3d:27:58:36:c4:31:3b:f5:aa:dd:b3:f4:dc:02:7e:
         ef:01:05:2f:83:73:33:31:9e:54:16:20:68:cc:8c:84:52:2a:
         1e:e5:54:0e:b8:61:1f:85:15:c1:d8:30:74:21:60:14:32:86:
         f3:15:4c:8a:c4:84:c7:02:af:42:65:87:e2:43:2f:19:5b:be:
         19:ec:a5:d8:31:06:fb:51:df:d0:03:6d:d7:de:d5:75:33:41:
         5c:7b:f7:ad:ca:6f:09:41:5d:57:c4:e0:f9:88:c2:e2:7d:9d:
         89:1b:9e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 06:02:47 2024 by rpki-client on console-fra.rpki-client.org