Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7-jegclQ-L9dR5OBQw603ABDFk.cer
File:                     c7-jegclQ-L9dR5OBQw603ABDFk.cer (raw, json)
Hash identifier:          qaUyxUyARenCQdkdkREstyqdfrWuQGn186o3QX3eRJk=
Subject key identifier:   73:BF:A3:7A:07:25:43:E2:FD:75:1E:4E:05:0C:3A:D3:70:01:0C:59
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01F853
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 10 Jun 2024 18:13:39 +0000
Certificate not after:    Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources:    AS: 139294
                          IP: 103.140.234.0/23
                          IP: 2001:df0:da80::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Oct 2024 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129107 (0x1f853)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun 10 18:13:39 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=A9195AA2/serialNumber=73BFA37A072543E2FD751E4E050C3AD370010C59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:99:a0:db:1d:00:2c:23:d6:36:36:77:00:66:
                    34:28:3a:70:77:d7:e7:7b:74:29:66:2e:b4:8c:7e:
                    92:a9:7f:90:6a:67:63:b2:7f:17:f3:c3:dc:40:10:
                    bd:6d:fc:3a:d0:c2:32:ab:8d:ad:66:85:eb:2d:06:
                    88:8a:24:a0:b9:15:cf:a2:6c:73:46:9e:85:ba:86:
                    9a:57:8e:9b:07:81:2d:4b:ba:01:99:40:14:52:3a:
                    3d:fa:f2:aa:97:c0:55:a8:06:c2:88:27:8e:d5:7e:
                    49:14:e9:4b:ab:8b:91:5a:0d:51:08:d6:16:1c:b6:
                    fb:6b:bf:c0:33:3f:77:e9:ac:5d:f8:5a:06:55:a5:
                    fb:e4:d7:58:14:0a:e7:09:37:40:c0:dd:74:75:2c:
                    c9:c8:d0:15:42:87:56:7b:5f:ca:04:de:e5:6a:2a:
                    4b:5d:af:f0:87:fe:a3:f1:44:fe:21:c2:1f:50:d6:
                    7c:9b:7b:a0:e5:ab:bc:95:45:e1:5b:0b:79:39:a8:
                    f9:e6:3a:db:ad:a2:c8:9f:b9:1e:84:c9:b8:28:1a:
                    e4:a3:ae:a7:07:43:91:b9:09:f7:0f:a1:9e:b7:f1:
                    23:78:4a:22:19:ff:ad:90:58:7a:09:99:5d:71:07:
                    f2:cd:9a:2b:09:f5:aa:3f:ac:24:aa:93:6b:06:31:
                    a1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:BF:A3:7A:07:25:43:E2:FD:75:1E:4E:05:0C:3A:D3:70:01:0C:59
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  139294

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.234.0/23
                IPv6:
                  2001:df0:da80::/48

    Signature Algorithm: sha256WithRSAEncryption
         5a:a7:6b:6e:15:4a:9a:bf:ac:9b:af:57:a2:35:b8:19:e6:96:
         d1:78:ff:56:35:91:78:d1:89:26:6a:94:45:cc:65:14:06:e5:
         d6:cf:fa:43:a4:74:a7:21:d4:38:a7:f7:e7:0f:56:b0:ee:6c:
         d5:9d:88:eb:4c:3b:20:e3:59:b1:30:e7:2e:9a:06:b5:9f:b8:
         95:3f:69:28:b0:b1:cd:e3:98:9e:7e:e8:0b:38:ee:b2:92:24:
         9a:95:f8:76:66:d0:26:87:63:cc:b4:0f:05:98:e6:33:1d:8f:
         30:d9:20:d6:1d:d7:bf:b4:cd:4e:7e:9d:49:14:73:30:39:65:
         65:b1:be:b6:9d:1c:bc:0a:17:44:51:2b:14:57:6e:b7:78:77:
         69:36:a4:9a:38:4a:a0:7b:54:4c:66:8c:2a:8c:07:a6:46:26:
         28:e1:dc:07:35:07:2c:8e:34:ba:aa:3f:45:f8:70:00:e1:bb:
         02:8a:a8:52:ee:4d:b4:2a:3d:fc:9c:81:e9:97:1f:58:2b:84:
         e0:c5:d7:4a:e5:4b:97:0e:8d:88:68:26:f5:65:1e:7d:32:2b:
         25:fd:4b:10:bb:55:e2:91:08:2e:ea:a4:fa:e8:dd:a5:85:89:
         d6:16:59:12:ca:2b:49:47:b7:fd:d6:03:c7:1b:d9:c7:4a:e2:
         33:c3:43:93
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 21 04:28:57 2024 by rpki-client on console.sobornost.net