Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRjlpr5egq5Qqb-gcZdfZuxZFw8.cer
File:                     kRjlpr5egq5Qqb-gcZdfZuxZFw8.cer (raw, json)
Hash identifier:          O9kyDK8vUStsFJFU2fnDUysUuo1G7GYFyPGYw/gqTtc=
Subject key identifier:   91:18:E5:A6:BE:5E:82:AE:50:A9:BF:A0:71:97:5F:66:EC:59:17:0F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0211D3
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Thu 03 Oct 2024 12:25:37 +0000
Certificate not after:    Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources:    AS: 131466
                          IP: 103.248.228.0/23
                          IP: 2401:2120::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Oct 2024 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135635 (0x211d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct  3 12:25:37 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=A91130000000/serialNumber=9118E5A6BE5E82AE50A9BFA071975F66EC59170F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d2:d9:6a:d4:7c:c4:01:98:3a:15:a2:d7:a5:
                    6e:6f:1a:fa:75:b9:6c:a0:3a:c3:05:e3:36:a2:b8:
                    3e:69:7b:6f:04:d7:68:75:51:d8:77:a5:03:32:a0:
                    88:48:b6:44:06:48:3e:78:9d:c6:6e:5c:7d:15:fa:
                    a7:b4:fa:00:b3:38:ea:13:07:11:62:62:03:93:59:
                    5d:9e:bd:07:28:21:3a:27:68:76:9a:21:27:b7:83:
                    14:82:39:e1:84:b5:f5:a9:9b:b8:14:d8:bb:55:d0:
                    23:4d:82:a3:34:b9:5d:4b:57:0c:fb:9f:e8:2a:80:
                    10:6c:45:db:38:02:2f:78:a8:f8:37:1b:07:f1:13:
                    66:e8:b2:d4:dc:ea:3d:ca:d3:cf:a7:34:27:1d:17:
                    1d:06:5d:b3:90:da:e3:7b:f2:b0:fe:71:db:8e:65:
                    74:40:96:bc:2c:a4:8e:16:e4:cf:c0:8a:69:44:b0:
                    10:ce:83:64:c0:37:ae:bb:34:25:66:76:51:f9:32:
                    7d:a2:03:e3:26:b2:54:4c:63:09:4a:62:40:c9:4a:
                    db:78:fc:9b:75:f6:57:02:a8:05:74:2a:02:cc:cb:
                    d1:8c:c1:59:23:89:1e:14:65:d0:05:07:61:b1:b1:
                    bc:5c:56:da:0e:1b:5d:0d:38:ab:3d:11:9e:24:6b:
                    e6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:18:E5:A6:BE:5E:82:AE:50:A9:BF:A0:71:97:5F:66:EC:59:17:0F
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131466

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.248.228.0/23
                IPv6:
                  2401:2120::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:b4:8a:c3:bf:ff:68:7d:97:a4:72:8f:10:80:65:a2:ce:e6:
         e5:43:2e:c6:78:dd:20:ff:f4:45:05:57:29:66:0d:c9:9f:48:
         64:38:48:01:e3:61:5a:14:39:44:de:16:75:5a:7e:ca:64:ab:
         07:ef:fe:e4:6e:75:1a:f2:64:c5:91:8c:34:e7:72:e9:3b:40:
         65:9a:67:d3:44:bf:55:c8:52:47:59:b7:1e:18:59:7a:54:98:
         16:37:2a:5d:fe:b3:c8:1d:3d:31:7e:9d:a6:7e:6b:de:dd:52:
         e6:fb:a5:16:78:90:48:39:88:33:49:fc:c6:1b:b5:ba:31:c2:
         9f:33:54:fe:8a:c4:ca:18:36:d6:ae:f9:30:a6:e1:84:b6:93:
         49:9b:e4:b2:67:07:c5:bc:7e:53:10:06:d0:27:f7:09:1b:59:
         a2:18:03:e5:7e:36:12:50:8d:7a:1a:9d:ae:8e:fa:a4:3d:af:
         79:f3:12:79:53:f2:0d:b5:ce:2e:eb:6a:26:bb:56:15:62:e8:
         d4:e3:ee:17:c6:ca:0f:56:f2:99:7e:67:53:33:5f:dd:d0:b2:
         b9:bb:0c:c1:e0:29:0d:ec:b5:0c:a3:5d:a9:a8:80:4d:16:4a:
         0d:d8:55:b2:4f:64:c1:9c:43:a9:ee:f6:19:55:33:9e:f5:08:
         43:9f:0f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 04:29:05 2024 by rpki-client on console.sobornost.net