Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer
File:                     84ggnKyyxrgUysV4XUv002zElx8.cer (raw, json)
Hash identifier:          3TM9B0KD3ZR9qAipoPggUoVyPPh/Qy8CsZrLcVnC1Rs=
Subject key identifier:   F3:88:20:9C:AC:B2:C6:B8:14:CA:C5:78:5D:4B:F4:D3:6C:C4:97:1F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01F2C3
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 20 May 2024 15:06:39 +0000
Certificate not after:    Wed 30 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 133451
                          IP: 103.132.232.0/24
                          IP: 103.212.192.0/23
                          IP: 103.229.248.0/24
                          IP: 2001:df1:200::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Oct 2024 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127683 (0x1f2c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May 20 15:06:39 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=A9138A50/serialNumber=F388209CACB2C6B814CAC5785D4BF4D36CC4971F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f3:f7:85:b1:b6:8b:66:44:94:5a:d5:6e:4a:
                    30:8a:14:fc:e9:d2:54:fa:2c:fa:75:4a:36:f4:d9:
                    38:b0:8e:cd:25:57:ba:61:34:70:36:5e:56:1a:c0:
                    b9:a6:6c:2a:83:f4:62:26:5e:b3:76:6b:fc:a2:f9:
                    2c:3f:50:56:79:56:ed:2c:b0:3f:83:68:57:c3:ba:
                    ab:0b:b1:c4:e0:b8:6d:16:33:f9:15:54:91:c9:cc:
                    0b:03:bd:92:da:83:e9:70:06:70:ed:d7:4e:e6:d5:
                    a7:89:44:e9:d5:3a:b2:c7:27:b1:3a:09:41:2c:5a:
                    18:9c:38:bc:ec:81:26:d2:52:19:7f:1b:04:55:c1:
                    98:9a:95:0e:a1:58:ab:92:9c:59:c6:fe:fd:e4:07:
                    80:c4:21:02:04:01:e6:29:22:1b:96:65:6b:5f:06:
                    db:12:72:4f:40:3a:36:59:b3:48:45:cf:05:ed:d3:
                    37:47:88:a4:21:5f:a4:80:d2:72:66:a1:c8:58:71:
                    cd:01:b4:fb:19:30:f3:71:b6:b8:a6:d4:1b:9a:ba:
                    25:d6:50:aa:97:ef:32:15:6a:69:ce:e3:73:58:88:
                    83:be:e7:42:87:28:2b:1c:f8:d2:92:d0:85:63:16:
                    88:55:71:22:9c:76:35:09:af:88:4e:e1:c9:35:49:
                    c6:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:88:20:9C:AC:B2:C6:B8:14:CA:C5:78:5D:4B:F4:D3:6C:C4:97:1F
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  133451

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.232.0/24
                  103.212.192.0/23
                  103.229.248.0/24
                IPv6:
                  2001:df1:200::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:e0:a5:df:65:c6:f2:ed:ef:2d:11:cf:2c:3a:ca:d9:be:d5:
         9c:9a:7c:97:66:1c:31:71:04:cf:73:1e:b7:3e:a3:29:22:6c:
         f2:00:77:e3:b7:34:71:93:f7:d6:5e:9b:bb:ed:77:5f:19:82:
         04:12:a9:b9:72:fe:df:46:f7:8a:0c:e6:59:a4:d0:e4:0a:ad:
         79:ed:00:7a:47:33:61:65:4a:09:70:0b:53:53:6a:4b:08:8c:
         0e:12:4d:8f:3b:fe:da:cb:06:52:28:87:60:d6:68:7c:8d:07:
         cd:01:e5:a7:75:4e:39:69:9a:00:29:6e:77:71:22:ea:e8:16:
         a5:5f:d5:db:f7:8f:5e:1d:3e:ff:12:82:bb:96:42:12:89:c2:
         6b:98:68:00:b8:cc:d7:dc:09:d4:d7:0c:74:94:7c:70:af:8b:
         e7:65:aa:b0:f8:c3:d7:1a:1d:20:8f:9c:2a:23:cf:5d:13:ad:
         a5:ec:39:a9:93:21:40:f2:f8:af:58:81:4f:fc:a8:44:3c:e9:
         7a:66:85:de:83:a6:cb:f8:b4:e9:be:75:7a:07:89:d5:60:b0:
         89:a3:d9:5b:3d:9a:c2:cd:ab:2f:b6:c9:72:fc:a9:50:9a:8a:
         08:20:26:8d:98:3d:40:6f:61:40:4c:a1:49:80:cd:bc:a9:a3:
         af:b6:21:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 04:28:38 2024 by rpki-client on console.sobornost.net