Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fHal9jt-Zxl369uyp87Umxgq0E.cer
File:                     0fHal9jt-Zxl369uyp87Umxgq0E.cer (raw, json)
Hash identifier:          jF6hJTEqbC/VHBHkjUvJTODThreBOtT4p/1ctxksuZc=
Subject key identifier:   D1:F1:DA:97:D8:ED:F9:9C:65:DF:AF:6E:CA:9F:3B:52:6C:60:AB:41
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       020E0E
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 17 Sep 2024 23:39:54 +0000
Certificate not after:    Wed 28 May 2025 00:00:00 +0000
Subordinate resources:    AS: 132906
                          IP: 103.148.240.0/24
                          IP: 103.164.7.0/24
                          IP: 2001:df2:fe80::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Oct 2024 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134670 (0x20e0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep 17 23:39:54 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=A912185F/serialNumber=D1F1DA97D8EDF99C65DFAF6ECA9F3B526C60AB41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5b:bf:8d:2f:bd:c7:d6:44:5d:87:d9:8e:d5:
                    ba:f8:be:e1:19:1c:75:1b:cf:94:bf:ce:00:88:50:
                    56:88:70:3e:02:85:12:c6:01:a4:31:df:b0:54:8e:
                    7b:67:dd:04:e6:07:08:ae:fd:29:85:80:91:97:24:
                    17:78:f2:70:87:db:45:8d:d9:fc:34:49:db:32:0e:
                    20:26:e0:e6:15:4c:b6:00:ac:2b:35:0d:0f:75:35:
                    76:fa:5c:ca:98:09:95:bc:e3:2e:de:52:0f:49:c5:
                    b3:f0:4c:bd:e6:90:13:78:f9:a2:39:f8:59:42:d6:
                    e6:0f:b5:f7:d2:65:0d:f4:23:e1:84:17:f2:eb:ac:
                    e5:9e:6e:09:43:93:9d:c1:70:e9:99:f3:82:c1:7e:
                    11:c9:84:36:16:ba:1b:02:bd:70:7f:6d:73:b0:ef:
                    ad:67:98:47:c0:5b:77:b7:18:c4:11:06:a9:6d:28:
                    42:cd:ea:43:ce:fa:07:b8:ef:98:fe:d4:00:4c:da:
                    ca:c6:75:26:bd:d1:57:c6:1e:6d:45:4e:a0:a7:10:
                    4e:d1:6d:de:c5:21:10:00:71:8e:bf:d9:66:a0:df:
                    57:57:47:5c:90:3a:83:51:f5:08:4a:f9:2f:f8:5e:
                    3c:7e:72:c1:87:dc:90:67:82:0e:db:a2:80:d4:ec:
                    6b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:F1:DA:97:D8:ED:F9:9C:65:DF:AF:6E:CA:9F:3B:52:6C:60:AB:41
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  132906

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.240.0/24
                  103.164.7.0/24
                IPv6:
                  2001:df2:fe80::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:8d:de:59:78:5e:81:7e:ed:c7:ba:ea:ee:73:23:0a:8d:4a:
         02:ee:2b:ed:f7:a1:ef:b3:cd:c2:2a:80:b2:76:b6:ef:b1:f9:
         e1:84:e7:84:94:c3:29:ec:ad:19:c3:24:74:18:e3:82:cd:62:
         5b:f7:da:fa:f5:91:45:9b:77:02:77:2a:12:54:e2:42:af:d8:
         94:9e:91:95:96:02:c6:8a:94:38:9c:c7:8a:86:b2:d8:c1:9c:
         40:13:bd:4d:e7:7a:b5:71:f2:24:f3:d8:5c:c5:f0:5d:24:89:
         aa:e6:21:69:d2:e4:46:ce:fb:8f:8e:08:62:25:3b:4f:0b:b2:
         5f:6c:bf:b8:df:32:75:8a:9c:15:83:84:b4:4c:f6:98:34:89:
         7d:88:33:10:7e:de:2a:1c:58:9d:07:80:d9:9a:cd:ad:7f:64:
         76:4b:fa:ec:d7:85:9c:e9:89:c7:7b:39:fb:34:57:89:69:de:
         7b:79:04:d1:cb:45:5f:cd:fd:4b:a1:21:c6:7b:d0:f4:36:82:
         bc:79:2b:75:43:29:ea:d9:2d:80:0a:4a:c3:6c:b0:89:22:e0:
         f3:b1:46:ac:c1:56:43:d0:1f:58:f5:ce:43:f0:b1:d7:a5:0a:
         23:b2:ab:8c:d7:89:78:71:da:4c:24:12:58:e5:16:98:be:47:
         c1:c4:f9:c0
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIDAg4OMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDkxNzIzMzk1NFoXDTI1MDUyODAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMjE4NUYxMTAvBgNVBAUTKEQxRjFEQTk3RDhFREY5OUM2NURGQUY2
RUNBOUYzQjUyNkM2MEFCNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC6W7+NL73H1kRdh9mO1br4vuEZHHUbz5S/zgCIUFaIcD4ChRLGAaQx37BUjntn
3QTmBwiu/SmFgJGXJBd48nCH20WN2fw0SdsyDiAm4OYVTLYArCs1DQ91NXb6XMqY
CZW84y7eUg9JxbPwTL3mkBN4+aI5+FlC1uYPtffSZQ30I+GEF/LrrOWebglDk53B
cOmZ84LBfhHJhDYWuhsCvXB/bXOw761nmEfAW3e3GMQRBqltKELN6kPO+ge475j+
1ABM2srGdSa90VfGHm1FTqCnEE7Rbd7FIRAAcY6/2Wag31dXR1yQOoNR9QhK+S/4
Xjx+csGH3JBngg7booDU7GtJAgMBAAGjggMmMIIDIjAdBgNVHQ4EFgQU0fHal9jt
+Zxl369uyp87Umxgq0EwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTIxODVGLzIwRkI2RDI2NzU0RTExRUY5Qzc5QUY2RUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEyMTg1Ri8yMEZCNkQyNjc1NEUxMUVGOUM3OUFGNkVDNEY5QUUwMi8wZkhhbDlq
dC1aeGwzNjl1eXA4N1VteGdxMEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAgcqMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAZ5TwAwQAZ6QH
MA8EAgACMAkDBwAgAQ3y/oAwDQYJKoZIhvcNAQELBQADggEBAG6N3ll4XoF+7ce6
6u5zIwqNSgLuK+33oe+zzcIqgLJ2tu+x+eGE54SUwynsrRnDJHQY44LNYlv32vr1
kUWbdwJ3KhJU4kKv2JSekZWWAsaKlDicx4qGstjBnEATvU3nerVx8iTz2FzF8F0k
iarmIWnS5EbO+4+OCGIlO08Lsl9sv7jfMnWKnBWDhLRM9pg0iX2IMxB+3iocWJ0H
gNmaza1/ZHZL+uzXhZzpicd7Ofs0V4lp3nt5BNHLRV/N/UuhIcZ70PQ2grx5K3VD
KerZLYAKSsNssIki4POxRqzBVkPQH1j1zkPwsdelCiOyq4zXiXhx2kwkEljlFpi+
R8HE+cA=
-----END CERTIFICATE-----
Generated at Mon Oct 21 04:28:34 2024 by rpki-client on console.sobornost.net