Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOjwS5AI_qHlwx9k52Pa3tJTpgw.cer
File:                     UOjwS5AI_qHlwx9k52Pa3tJTpgw.cer (raw, json)
Hash identifier:          XHTBwOeAjPcfJmDf34hTpsHgLv94kh6y85wf4+hV+OY=
Subject key identifier:   50:E8:F0:4B:90:08:FE:A1:E5:C3:1F:64:E7:63:DA:DE:D2:53:A6:0C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02B85D
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sun 31 May 2026 13:55:35 +0000
Certificate not after:    Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources:    AS: 152850
                          IP: 103.154.192.0/23
                          IP: 2001:df3:cc40::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178269 (0x2b85d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May 31 13:55:35 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=A91A1630, serialNumber=50E8F04B9008FEA1E5C31F64E763DADED253A60C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9f:df:4c:b4:17:1b:79:2d:77:6b:f3:00:b7:
                    5c:ea:46:81:be:3f:ef:2b:e2:10:82:51:a6:4a:93:
                    72:f7:ae:bc:48:b9:07:09:7b:7e:a8:72:07:c1:1b:
                    75:5c:e9:22:0e:03:35:02:97:75:25:7c:46:b4:5c:
                    2a:9e:26:b4:0e:3a:6a:78:dd:2f:26:21:72:3a:23:
                    10:f0:44:af:65:3e:3a:05:6d:12:8f:85:29:8e:b1:
                    86:01:89:b8:7c:36:94:32:d9:7d:ce:60:c3:46:d8:
                    86:f1:58:43:cf:cd:21:2e:6c:b0:80:19:65:68:f0:
                    26:04:44:3f:0d:b5:6d:08:51:55:35:a4:a0:3d:db:
                    1c:52:87:e8:1b:32:a4:66:16:12:74:84:7e:68:7f:
                    e5:5a:c6:ff:76:59:de:f3:c3:62:ae:5a:8d:e5:41:
                    b3:da:ed:7c:9b:a3:26:41:25:4f:75:7c:3f:51:9f:
                    52:45:e0:29:b7:3c:dc:cf:d5:c0:50:85:c3:51:31:
                    a8:15:3e:ec:9b:d4:b8:09:72:a4:ea:7b:53:dd:4c:
                    b3:3b:73:39:4c:f0:92:6c:84:88:aa:fc:4e:22:fa:
                    c0:53:a8:37:82:20:d2:e4:22:8f:cc:0b:af:9f:c9:
                    c9:b1:f7:e4:c0:e6:22:5e:3a:1b:1b:35:65:c2:9f:
                    60:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E8:F0:4B:90:08:FE:A1:E5:C3:1F:64:E7:63:DA:DE:D2:53:A6:0C
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  152850

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.192.0/23
                IPv6:
                  2001:df3:cc40::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:f6:24:cf:71:46:64:6b:69:10:0a:09:20:35:7b:36:bf:94:
         8e:67:0d:05:dc:c8:0f:fb:73:a7:11:f8:ef:8d:18:9e:59:58:
         7d:45:3d:18:23:4d:38:f0:09:b5:e6:65:60:3e:68:c0:2a:ec:
         4b:6d:04:75:dd:2e:7a:45:68:95:88:74:7f:a2:f9:67:b1:df:
         73:27:19:a2:4d:2c:c9:41:04:86:5b:3b:81:3c:5f:56:55:3e:
         86:ea:34:6c:b7:7c:47:4f:dd:f0:30:f5:69:32:92:0a:20:6c:
         a0:b5:5a:9c:5b:83:d7:9a:a6:eb:f1:b1:a3:9e:b4:bc:e8:89:
         d5:53:c7:e8:5b:d2:b0:b9:0a:be:b1:41:74:a1:20:47:91:22:
         53:eb:d3:40:7b:ec:fc:22:40:fd:bf:bb:25:84:44:7d:c7:bb:
         88:2c:93:54:57:5e:b3:e9:ce:97:97:4a:d7:e5:e2:0f:ae:6d:
         76:36:fe:a6:bb:b0:d1:23:4f:a8:da:05:92:ef:e6:2f:0e:49:
         94:b9:2f:25:fb:7e:f7:45:5c:dc:a4:1f:44:72:26:5c:6e:dc:
         36:8e:93:d6:5e:8c:e0:6c:60:c6:be:1a:95:b9:32:cb:ef:82:
         6f:76:5d:9f:7e:b6:ea:5e:99:0b:c2:40:4a:49:80:e2:1d:dc:
         94:60:49:37
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:58:09 2026 by rpki-client