Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer
File:                     ez9g2bGigAKgeHXKtYohRXBz4X8.cer (raw, json)
Hash identifier:          PVwOnAUcAEegnhTyugEslqEJbq9+LAZ2FjSK5+Bd9HI=
Subject key identifier:   7B:3F:60:D9:B1:A2:80:02:A0:78:75:CA:B5:8A:21:45:70:73:E1:7F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01F392
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 24 May 2024 14:20:41 +0000
Certificate not after:    Wed 30 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 9989
                          IP: 27.111.208.0 -- 27.111.239.255
                          IP: 101.97.64.0/18
                          IP: 118.103.180.0/22
                          IP: 202.79.192.0/19
                          IP: 2403:b100::/31

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Oct 2024 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127890 (0x1f392)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May 24 14:20:41 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=A914254C/serialNumber=7B3F60D9B1A28002A07875CAB58A21457073E17F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7a:57:aa:b7:3e:c3:29:5b:a9:93:1e:a2:27:
                    73:8b:ec:3e:ee:fd:ad:7f:13:9e:51:88:26:b2:9b:
                    e3:74:f2:50:4d:5c:40:ab:10:ba:9c:5c:e1:ba:84:
                    62:60:ad:2c:2b:8d:bd:1d:eb:18:4d:22:de:ca:d8:
                    d8:e9:0d:f1:e7:b7:c9:05:3c:ac:a4:14:3c:52:fa:
                    ee:72:fc:a2:68:e0:31:f9:5b:9a:ff:16:da:e2:a4:
                    7d:d3:24:e3:d1:f4:b0:62:8c:2b:01:15:e2:a0:3f:
                    e8:bf:cf:8c:ef:20:2f:09:2b:02:51:c2:9f:7e:31:
                    53:40:fa:80:fd:4e:c7:ff:6f:77:a4:43:9b:c0:2e:
                    72:d0:3d:2f:e2:0e:d2:f7:6b:b5:23:d5:af:cc:9c:
                    40:44:f6:54:0a:2a:d5:67:fa:ac:3b:3b:f2:7c:ce:
                    56:10:49:09:e5:42:c9:78:27:69:6b:68:22:2b:cc:
                    53:77:2b:5c:b6:71:b6:7a:26:0e:3d:98:4e:2b:4c:
                    67:ef:c2:1a:b7:62:d4:7e:c8:8e:51:c4:38:c7:71:
                    cb:ee:61:97:39:2e:16:5e:11:c9:33:c8:81:7f:2a:
                    b3:f7:fb:c7:65:4f:8a:98:81:cf:91:b5:d8:36:8c:
                    77:2c:1a:7d:49:94:b5:2a:ae:a9:8f:a0:43:ad:8f:
                    91:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:3F:60:D9:B1:A2:80:02:A0:78:75:CA:B5:8A:21:45:70:73:E1:7F
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  9989

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.111.208.0-27.111.239.255
                  101.97.64.0/18
                  118.103.180.0/22
                  202.79.192.0/19
                IPv6:
                  2403:b100::/31

    Signature Algorithm: sha256WithRSAEncryption
         0a:04:46:9d:0e:28:15:1a:ef:bb:d4:13:ab:34:c8:40:c3:c1:
         58:1d:e3:a7:a8:29:84:7d:bb:24:ea:ce:f8:b8:61:51:2b:2a:
         aa:3e:bc:8e:4e:04:b3:c1:0f:0c:ba:8c:2c:58:f0:c3:3b:39:
         c2:d3:84:6c:fe:34:42:d0:0a:b1:3b:55:c8:b0:6a:e0:7b:f1:
         8d:9d:13:8f:28:e8:e7:30:8e:e1:56:3e:62:ae:f8:08:e3:f6:
         46:b7:fc:af:45:29:50:23:45:b6:f6:df:85:10:e7:75:65:5b:
         bd:30:79:64:1e:fd:8f:7a:a1:9f:20:aa:e7:a3:70:ab:70:db:
         c1:0c:ec:8d:64:f3:ab:ef:e1:a3:c9:08:51:d9:1a:7a:f4:0a:
         2e:fa:1a:5f:bd:5a:f1:42:18:45:aa:31:04:29:8a:7e:93:2d:
         61:f5:2b:eb:ee:f8:f2:c7:02:df:90:c6:b3:03:28:0f:c5:21:
         69:19:f5:87:ae:c9:5c:d8:ab:e1:87:72:04:d4:a7:03:02:7b:
         92:6f:34:8a:d2:4b:58:1f:47:ee:10:2c:8c:ec:48:64:38:52:
         ef:c0:41:37:4a:03:92:38:33:da:b3:32:37:e8:de:3e:3d:88:
         85:7c:c5:9f:56:28:6e:69:03:59:51:70:01:4f:3e:c2:46:3c:
         36:ab:fb:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 04:29:01 2024 by rpki-client on console.sobornost.net