Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer
File:                     ED-ovf_7nwVXByxHMyuBqegO3TU.cer (raw, json)
Hash identifier:          Ub4GAeM4Q5dus4b70qNcuEHGY+LY691MMfj3+FcwFYQ=
Subject key identifier:   10:3F:A8:BD:FF:FB:9F:05:57:07:2C:47:33:2B:81:A9:E8:0E:DD:35
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       020548
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 06 Aug 2024 14:29:18 +0000
Certificate not after:    Fri 31 Oct 2025 00:00:00 +0000
Subordinate resources:    AS: 64061
                          IP: 103.237.100.0/22
                          IP: 163.53.244.0/22

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Oct 2024 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132424 (0x20548)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug  6 14:29:18 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=A9140D69/serialNumber=103FA8BDFFFB9F0557072C47332B81A9E80EDD35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:57:8f:e2:b0:5d:2a:58:0c:35:4b:d8:c8:fc:
                    f7:c0:ad:2a:23:ea:ef:50:8d:e0:2b:fc:72:03:06:
                    cf:dd:ac:50:54:51:b7:2d:e3:4f:d1:85:8e:75:11:
                    2a:85:ce:ae:eb:07:dc:3c:59:5b:66:1f:b7:b3:4f:
                    19:ed:9a:35:52:bd:c4:69:b8:73:7b:80:74:5a:7d:
                    92:43:35:c4:e8:4b:ec:60:2a:88:17:84:4f:ae:a1:
                    c5:6f:6a:d4:b2:6e:87:c0:69:fa:61:39:88:91:c2:
                    09:79:2e:f2:29:0d:3a:2f:27:eb:d5:3b:9e:06:32:
                    4c:70:a4:df:71:a9:0e:87:53:ef:57:78:f3:3a:86:
                    23:e2:fe:4f:50:d5:f4:af:c2:31:25:9c:3e:bb:1a:
                    a5:9d:ff:a9:dc:01:5c:f4:48:c7:27:2b:ca:14:3b:
                    24:8a:7e:df:8c:dd:5e:38:05:b7:da:8c:fb:15:fb:
                    e5:09:1c:d6:b8:a5:02:a9:b5:ff:c1:0d:87:8e:10:
                    95:34:b5:c7:43:75:86:aa:93:cb:98:c0:6e:36:41:
                    2c:5f:d2:44:46:42:a2:e2:1a:f0:5d:1a:b3:9b:f0:
                    8e:68:37:f9:35:62:46:ba:64:ef:a4:96:78:26:15:
                    da:d0:7d:ff:fa:14:20:ac:4b:96:4b:2c:b6:4d:ea:
                    02:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:3F:A8:BD:FF:FB:9F:05:57:07:2C:47:33:2B:81:A9:E8:0E:DD:35
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  64061

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.237.100.0/22
                  163.53.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:13:57:18:f1:70:3f:80:a9:9e:1d:cb:c5:d6:fb:04:e9:29:
         d1:bf:f7:f5:1d:fc:0e:28:b8:17:25:07:73:ca:b5:bd:e3:f6:
         db:06:09:2a:e7:1d:78:55:8c:67:0e:d5:af:49:7e:f7:69:37:
         b3:ad:84:9d:fd:23:52:df:cd:8a:0b:77:ee:17:ff:f8:4b:8d:
         f1:d9:bb:35:c1:05:dd:fc:39:cd:00:2e:f8:75:78:fa:9e:8a:
         e4:27:7f:09:ee:69:f3:45:8d:a9:d2:e8:64:8b:22:da:b0:28:
         ed:96:c5:ce:75:c6:6b:58:20:62:68:85:9c:fb:b0:13:85:c4:
         e7:72:3e:e5:cb:83:5e:5f:78:4d:02:2f:33:47:0f:97:14:79:
         d7:01:c3:bd:33:21:a7:be:16:97:e4:7e:97:a2:c2:93:d0:fd:
         8c:50:1d:9f:0f:54:f7:48:1c:e7:5c:4e:09:68:2a:c2:ec:e4:
         51:9f:54:c1:8b:bc:2b:88:28:cd:87:24:b0:a9:fa:72:1d:9f:
         23:98:81:0d:a4:b0:5e:04:32:8e:92:da:13:89:95:1a:02:4a:
         85:41:f7:2d:a7:e5:6a:bf:04:ca:b1:34:6c:b7:f2:d7:a8:7f:
         91:34:ab:01:17:6f:be:ba:04:22:7d:45:eb:e5:f4:df:d1:82:
         68:f8:54:2c
-----BEGIN CERTIFICATE-----
MIIGIDCCBQigAwIBAgIDAgVIMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDgwNjE0MjkxOFoXDTI1MTAzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNDBENjkxMTAvBgNVBAUTKDEwM0ZBOEJERkZGQjlGMDU1NzA3MkM0
NzMzMkI4MUE5RTgwRUREMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCzV4/isF0qWAw1S9jI/PfArSoj6u9QjeAr/HIDBs/drFBUUbct40/RhY51ESqF
zq7rB9w8WVtmH7ezTxntmjVSvcRpuHN7gHRafZJDNcToS+xgKogXhE+uocVvatSy
bofAafphOYiRwgl5LvIpDTovJ+vVO54GMkxwpN9xqQ6HU+9XePM6hiPi/k9Q1fSv
wjElnD67GqWd/6ncAVz0SMcnK8oUOySKft+M3V44BbfajPsV++UJHNa4pQKptf/B
DYeOEJU0tcdDdYaqk8uYwG42QSxf0kRGQqLiGvBdGrOb8I5oN/k1Yka6ZO+klngm
FdrQff/6FCCsS5ZLLLZN6gIXAgMBAAGjggMVMIIDETAdBgNVHQ4EFgQUED+ovf/7
nwVXByxHMyuBqegO3TUwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTQwRDY5LzBFMTc3RDVBMDU4QzExRURBREQ2NjAxMUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE0MEQ2OS8wRTE3N0Q1QTA1OEMxMUVEQURENjYwMTFDNEY5QUUwMi9FRC1vdmZf
N253VlhCeXhITXl1QnFlZ08zVFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAPo9MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCZ+1kAwQCozX0
MA0GCSqGSIb3DQEBCwUAA4IBAQByE1cY8XA/gKmeHcvF1vsE6SnRv/f1HfwOKLgX
JQdzyrW94/bbBgkq5x14VYxnDtWvSX73aTezrYSd/SNS382KC3fuF//4S43x2bs1
wQXd/DnNAC74dXj6norkJ38J7mnzRY2p0uhkiyLasCjtlsXOdcZrWCBiaIWc+7AT
hcTncj7ly4NeX3hNAi8zRw+XFHnXAcO9MyGnvhaX5H6XosKT0P2MUB2fD1T3SBzn
XE4JaCrC7ORRn1TBi7wriCjNhySwqfpyHZ8jmIENpLBeBDKOktoTiZUaAkqFQfct
p+VqvwTKsTRst/LXqH+RNKsBF2++ugQifUXr5fTf0YJo+FQs
-----END CERTIFICATE-----
Generated at Mon Oct 21 04:28:42 2024 by rpki-client on console.sobornost.net