Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZWJxEurnsskvifeninGipPqV9T0.cer
File:                     ZWJxEurnsskvifeninGipPqV9T0.cer (raw, json)
Hash identifier:          gwS+KK4439r/J7yXV3vggsd73jmuAgQVc8bFoNY4t80=
Subject key identifier:   65:62:71:12:EA:E7:B2:C9:2F:89:F7:A7:8A:71:A2:A4:FA:95:F5:3D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       021431
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/ZWJxEurnsskvifeninGipPqV9T0.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 16 Oct 2024 00:22:25 +0000
Certificate not after:    Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources:    AS: 24046
                          IP: 203.10.24.0/21

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Oct 2024 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136241 (0x21431)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct 16 00:22:25 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=A913860A/serialNumber=65627112EAE7B2C92F89F7A78A71A2A4FA95F53D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:2d:7a:b9:c7:1c:2a:a2:e4:9c:23:99:db:d6:
                    d6:6b:eb:bf:c2:c3:4d:d7:d9:90:f9:78:05:54:c4:
                    bf:05:e1:80:ce:d5:6a:e0:7c:91:55:41:f5:59:bb:
                    ad:57:b3:bb:c7:11:fc:36:e9:45:a3:4a:c0:b2:f4:
                    cf:d6:dc:46:ef:a8:40:9e:66:33:cc:cc:0b:07:91:
                    e9:5a:2c:3e:1e:b9:6b:46:5a:ff:19:1b:11:93:ec:
                    90:1b:6e:26:30:69:70:e3:22:bc:63:c2:0c:44:c6:
                    a6:b1:93:82:36:c4:8f:5b:5c:cc:0c:37:8d:46:15:
                    ae:e2:a0:a8:19:4b:4b:24:d3:8e:67:47:3e:52:7a:
                    b4:6a:b6:86:21:45:f2:74:78:1b:82:2a:11:70:ac:
                    a2:4a:ee:32:8d:46:82:bb:db:de:98:f4:20:17:cc:
                    f8:16:4d:c8:a4:f9:af:50:7b:2e:4b:a7:f5:1f:87:
                    48:4e:d7:45:99:81:6f:e2:e5:26:0d:f9:6e:eb:1f:
                    18:17:49:d3:3b:2c:35:f9:5e:a9:b3:6a:46:b1:ea:
                    7f:73:71:ed:2a:ed:7d:61:ad:c2:6b:97:18:ec:90:
                    0a:2f:7b:19:43:e9:dc:5e:4e:57:db:86:23:75:e0:
                    70:b4:80:01:99:87:c0:cf:51:79:04:45:6e:9f:37:
                    a2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:62:71:12:EA:E7:B2:C9:2F:89:F7:A7:8A:71:A2:A4:FA:95:F5:3D
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/ZWJxEurnsskvifeninGipPqV9T0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  24046

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.10.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         d9:78:dc:af:5c:73:68:b2:e7:83:f0:72:18:32:aa:22:5b:b7:
         07:14:27:15:cc:48:29:20:d9:9b:c9:2c:ba:ad:9b:39:48:26:
         5c:49:ff:d7:7a:a0:01:3c:42:de:1a:21:fe:71:06:cc:17:34:
         62:bb:83:a3:8d:43:a4:c0:0e:1d:1b:37:2d:cd:d8:5d:57:7a:
         b3:a8:6d:31:b2:29:7d:46:82:1c:f1:af:ea:c4:81:53:3c:73:
         f9:ad:59:9e:d4:91:c1:ff:d5:70:59:83:cb:53:7f:3b:a2:b6:
         bc:1d:6d:05:25:00:9c:35:fb:57:01:9d:10:98:24:c7:6a:14:
         d3:f9:15:6b:71:e6:2e:90:64:c0:6c:c9:39:8c:b8:18:4f:42:
         51:f7:3c:53:44:f9:66:ea:e5:da:df:91:10:a4:38:2b:bf:e1:
         8d:17:a0:af:33:b8:aa:2c:66:56:5c:61:69:ce:99:fb:a0:d3:
         11:f4:23:73:61:1e:9c:d9:c7:14:fe:1c:78:16:56:4d:75:84:
         9f:99:b9:ce:93:b2:39:5c:e9:1f:38:c0:02:13:26:11:bc:bc:
         99:28:7d:9a:80:35:21:0e:00:62:aa:d5:bf:94:3f:83:b7:5c:
         41:98:98:0f:e2:d8:9b:81:7e:46:5f:b6:81:d9:c7:0f:38:4f:
         da:39:10:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 04:28:55 2024 by rpki-client on console.sobornost.net