Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer
File:                     f95kLEQhft58x2dxm6Z9A20X0Es.cer (raw, json)
Hash identifier:          UFVHgEaZVsrE00tYjbKDaKwprsUHR9RpqQ/xEiiAsco=
Subject key identifier:   7F:DE:64:2C:44:21:7E:DE:7C:C7:67:71:9B:A6:7D:03:6D:17:D0:4B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       020240
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 25 Jul 2024 06:10:10 +0000
Certificate not after:    Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources:    AS: 132227
                          IP: 103.214.248.0/23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Oct 2024 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131648 (0x20240)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 25 06:10:10 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=A9189883/serialNumber=7FDE642C44217EDE7CC767719BA67D036D17D04B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a2:2e:23:37:19:e0:13:a1:7b:80:a7:c9:4b:
                    89:ab:66:a8:e8:99:50:c7:23:d8:da:fc:51:3d:a7:
                    9d:10:9d:9d:cb:3a:08:28:55:fd:8f:87:30:ae:b6:
                    11:5c:74:66:a6:99:de:89:bc:cc:40:e6:17:98:c9:
                    e0:8c:4a:a5:d5:4e:e3:67:87:c9:85:2f:57:3e:ed:
                    80:ac:98:b9:1d:8e:23:bb:d5:b3:13:d3:84:4e:37:
                    16:56:42:36:6a:95:a9:03:2e:6a:8d:99:3c:8d:b5:
                    55:97:52:f4:e6:42:cd:88:43:ca:4e:fa:f5:16:e4:
                    6b:28:ad:48:72:61:13:ca:d0:28:6d:ab:b2:e2:ff:
                    ed:28:01:87:01:42:68:fb:d1:0b:f6:08:38:03:48:
                    1e:d4:9f:6d:a6:8c:56:1e:1d:17:70:83:fe:96:8a:
                    86:df:aa:ee:58:0b:81:ed:dc:00:d1:70:a2:07:04:
                    9f:17:10:96:eb:59:df:5b:49:2e:40:08:2d:54:13:
                    54:50:53:51:84:a3:fe:43:db:ff:79:b0:91:53:3b:
                    b1:d4:cc:1a:5c:16:6d:f5:2e:fa:eb:e2:0b:09:11:
                    51:53:23:a6:e2:db:11:94:ba:b2:8c:68:f5:2d:12:
                    73:8c:ad:94:87:50:a8:86:6c:e3:2a:44:16:88:cd:
                    88:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:DE:64:2C:44:21:7E:DE:7C:C7:67:71:9B:A6:7D:03:6D:17:D0:4B
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  132227

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:21:95:fe:ba:74:31:93:e6:1b:8e:84:1d:57:16:a4:8b:85:
         43:65:06:28:68:6a:9c:4e:1a:7e:be:2b:02:d4:05:f6:f2:ab:
         8a:3d:de:6e:70:74:7e:a9:b5:75:2d:b3:dd:f2:b7:5a:33:2a:
         99:a5:49:df:c6:ba:8c:11:a2:f8:52:7d:76:7b:2a:30:2b:76:
         90:33:32:da:b7:c5:13:ca:c3:3c:6f:61:46:12:38:74:ed:54:
         97:d6:a4:f0:57:c4:9c:8c:9d:d6:d4:15:f7:ca:ef:2b:66:6a:
         54:bc:43:04:de:2c:8f:d8:0f:fc:85:dd:c5:3f:8f:a6:b3:4f:
         44:ab:90:57:8a:65:14:97:6e:b2:21:82:f6:88:35:29:6f:45:
         0a:ed:5c:f7:58:62:4e:4c:3b:d9:ad:23:8c:88:5e:ef:86:0c:
         ef:f7:b3:43:44:1b:e2:7d:56:0f:df:83:bd:5d:9f:1c:aa:1a:
         41:29:f3:ca:b7:59:8e:3e:f8:03:9b:17:b7:bb:df:0a:df:0f:
         1d:4d:75:3b:78:76:d2:b2:d0:c8:95:3d:61:f5:a1:d9:dc:71:
         2a:82:d9:82:2e:79:cb:23:cd:01:3b:0f:78:27:eb:99:16:21:
         ff:85:b0:8e:ce:c0:fd:ba:4b:fb:bf:fc:60:b1:e0:28:29:2a:
         d0:b6:92:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 04:29:02 2024 by rpki-client on console.sobornost.net