Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g6wWjkn7Jet2lFoL0Ubqi1e_Ccw.cer
File:                     g6wWjkn7Jet2lFoL0Ubqi1e_Ccw.cer (raw, json)
Hash identifier:          ENd9Yu32sBUaMK1joZxZBiYGxreGVu/CF3AFEl+K4W4=
Subject key identifier:   83:AC:16:8E:49:FB:25:EB:76:94:5A:0B:D1:46:EA:8B:57:BF:09:CC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01F445
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91AE954/B1F6BCC2C14A11ED882BE329C4F9AE02/g6wWjkn7Jet2lFoL0Ubqi1e_Ccw.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91AE954/B1F6BCC2C14A11ED882BE329C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 28 May 2024 20:02:28 +0000
Certificate not after:    Wed 30 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 4817
                          IP: 210.10.0.0/20
                          IP: 210.10.64.0/22
                          IP: 210.10.76.0/22
                          IP: 2400:79e0::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Oct 2024 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128069 (0x1f445)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May 28 20:02:28 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=A91AE954/serialNumber=83AC168E49FB25EB76945A0BD146EA8B57BF09CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:34:ea:69:e1:16:3e:7d:7b:a3:f4:32:70:aa:
                    fe:e7:86:a3:f1:62:5b:27:ef:a0:88:1d:cd:6e:75:
                    b0:35:e1:16:ae:83:cf:88:2a:79:66:ff:db:b7:e4:
                    4b:0a:26:b8:59:bb:70:5f:5e:e4:69:da:67:c6:76:
                    57:9e:f1:db:b2:05:a7:d9:81:e4:e6:09:53:96:4c:
                    b8:bb:08:5e:15:8c:75:ac:63:66:cc:b4:8c:93:f4:
                    37:06:e0:6a:93:1d:50:d2:7a:67:59:30:fd:f0:8f:
                    ec:ed:47:dc:41:67:09:e1:18:d5:54:45:8a:88:5c:
                    33:7f:ec:8a:20:7c:9a:4d:03:59:41:74:6c:2f:b9:
                    79:0a:0c:82:96:37:42:62:9a:97:e8:87:2d:48:52:
                    40:9a:88:00:66:10:9c:d2:20:3b:43:76:11:74:45:
                    92:37:d4:aa:ab:57:69:b4:66:eb:1a:74:b7:3e:ff:
                    eb:81:ff:f7:f6:b2:db:37:42:79:87:2a:49:97:c9:
                    72:1a:a5:d7:bd:8e:66:c5:d2:28:84:58:7d:86:f8:
                    7e:f5:3c:ba:a8:e0:1a:3c:31:32:a3:c6:d7:19:c1:
                    03:4d:ab:ae:b1:09:06:11:77:ae:15:53:81:a4:b5:
                    e4:b9:52:ad:e7:fa:95:22:7f:2c:fe:ff:ed:98:0f:
                    c7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:AC:16:8E:49:FB:25:EB:76:94:5A:0B:D1:46:EA:8B:57:BF:09:CC
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AE954/B1F6BCC2C14A11ED882BE329C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AE954/B1F6BCC2C14A11ED882BE329C4F9AE02/g6wWjkn7Jet2lFoL0Ubqi1e_Ccw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  4817

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.10.0.0/20
                  210.10.64.0/22
                  210.10.76.0/22
                IPv6:
                  2400:79e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         ce:5a:fd:b9:7d:7a:9f:54:1e:85:e2:b7:7e:d5:ac:2c:75:26:
         65:d1:d6:2b:2c:77:29:05:3d:26:fe:13:15:8b:88:d0:49:8c:
         c1:db:22:50:7f:84:b5:f0:6a:a6:46:5a:01:c6:cb:92:82:16:
         bc:92:53:0c:f4:41:cd:d6:14:76:06:b5:9a:9c:80:71:ca:60:
         e1:15:a2:ca:5c:34:82:3c:0f:8d:d6:d7:39:48:04:f8:c4:cb:
         dc:68:61:21:e1:0a:41:fe:ae:58:ea:08:ea:19:19:a5:9c:1d:
         95:97:52:14:04:98:8b:7f:7d:88:54:d6:7a:03:f4:47:51:74:
         a5:ae:8f:e5:83:97:37:2d:51:fe:82:5a:b8:43:aa:fc:74:f6:
         fb:2a:4a:10:62:3c:65:a9:ed:a8:40:ae:7f:c1:57:d0:89:16:
         ad:d1:fc:52:6b:49:f1:ed:6e:32:9d:b3:3c:51:fa:5a:c5:ac:
         e3:54:db:e3:81:ec:35:f7:ba:d3:43:7d:fd:c3:a0:bb:19:97:
         ae:eb:b4:4d:29:a7:3e:22:a8:ef:05:f4:29:be:de:15:b0:a8:
         af:46:94:7e:4c:e7:d6:e4:27:91:56:5c:c3:34:dd:7a:70:1d:
         0b:44:a2:9b:38:b1:bb:7e:a9:d0:cd:f5:0f:81:4e:61:8a:e5:
         8c:df:c0:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 04:29:02 2024 by rpki-client on console.sobornost.net