Certificate

$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uoOujSb_GDFCpL3Rjy0BOW5eMY0.cer
File:                     uoOujSb_GDFCpL3Rjy0BOW5eMY0.cer (raw, json)
Hash identifier:          7bnkF6q7YpIQcO1gdFzHtvdoztIK8Cv/Z73LnW2mcoE=
Subject key identifier:   BA:83:AE:8D:26:FF:18:31:42:A4:BD:D1:8F:2D:01:39:6E:5E:31:8D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02E08E
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91599FE/68A2D684D1BB11F1993A588A2F66CEF9/uoOujSb_GDFCpL3Rjy0BOW5eMY0.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91599FE/68A2D684D1BB11F1993A588A2F66CEF9/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 27 Oct 2026 04:03:50 +0000
Certificate not after:    Thu 30 Dec 2027 00:00:00 +0000
Subordinate resources:    AS: 141163
                          IP: 103.155.142.0/23
                          IP: 2406:6f40::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Nov 2026 04:29:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188558 (0x2e08e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct 27 04:03:50 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=A91599FE, serialNumber=BA83AE8D26FF183142A4BDD18F2D01396E5E318D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:91:6c:1f:5d:6d:9f:74:0c:bb:3a:71:72:df:
                    9b:a0:ca:7a:47:32:98:0f:3a:ea:c0:56:82:c0:4d:
                    b2:ce:73:9d:36:75:4d:20:4d:37:f3:7b:71:2c:7b:
                    01:08:dc:32:3c:fc:b7:f9:d9:0f:81:2c:b5:a9:97:
                    ec:fd:1b:bd:f9:ae:68:89:a5:a2:8e:4c:86:92:60:
                    3c:df:ac:86:8a:cb:fd:d7:0e:2d:71:e7:54:14:b5:
                    5c:82:e0:2f:1e:3d:36:31:d5:de:4a:96:8e:54:a8:
                    e9:d3:40:be:1e:f4:24:b9:01:8d:90:b7:54:55:15:
                    49:74:fd:f6:9e:84:4f:5c:b3:b3:b1:95:14:cc:9d:
                    31:ce:d5:50:8f:7e:0f:a6:e2:7d:91:ed:61:10:39:
                    77:67:f7:03:8a:1c:63:e4:6b:5d:11:fc:69:72:8e:
                    71:eb:b4:6b:c8:09:64:c0:1f:2f:2b:da:cb:df:e0:
                    03:f7:eb:c2:09:bd:f0:df:ef:47:03:53:8d:b7:fe:
                    41:49:ab:e7:39:c4:c2:e5:92:7f:8f:9a:29:55:79:
                    a1:53:6f:18:72:40:29:64:06:ac:2a:75:6b:8a:fd:
                    d1:3f:a0:7e:bc:9e:a6:51:b2:8a:f6:2c:aa:3b:13:
                    46:6a:ac:04:4f:c9:59:0a:80:32:2e:9a:b6:aa:50:
                    50:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:83:AE:8D:26:FF:18:31:42:A4:BD:D1:8F:2D:01:39:6E:5E:31:8D
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91599FE/68A2D684D1BB11F1993A588A2F66CEF9/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91599FE/68A2D684D1BB11F1993A588A2F66CEF9/uoOujSb_GDFCpL3Rjy0BOW5eMY0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  141163

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.142.0/23
                IPv6:
                  2406:6f40::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:48:b8:a9:67:8f:6c:40:68:7f:e6:0a:d1:38:b1:66:a8:bd:
         02:92:5e:1a:36:44:55:61:68:8e:bb:1e:b4:e8:70:92:91:e3:
         66:64:ec:37:f3:61:bd:60:06:33:ad:3c:cd:06:57:43:db:53:
         c6:bd:e4:16:76:3f:64:0a:51:80:4a:92:95:14:8c:09:e9:60:
         1c:ab:c8:95:a2:b7:f7:2b:13:47:e0:91:e6:c0:4f:f3:f3:10:
         26:05:cf:d3:d6:aa:1a:6c:b6:bd:ed:2f:5b:5c:05:c1:5b:cd:
         f0:c9:51:e1:91:ac:05:af:5f:7a:35:bc:a3:c5:50:8f:a1:8b:
         9c:aa:f2:4e:6f:9f:78:8b:a5:58:e9:61:e4:9f:05:d9:72:af:
         f5:bf:4b:98:bb:d3:b1:8c:38:2d:f9:09:21:6f:bf:f2:1e:fa:
         70:06:1a:bd:45:c2:c9:e8:ca:d5:16:bc:3d:be:33:d2:2f:98:
         30:1b:46:86:54:5c:fd:75:c2:b2:df:bb:ce:d8:5f:ef:7b:8a:
         5d:ed:ae:b6:81:34:d1:7b:b1:aa:90:c5:1d:7c:4c:f0:a8:9f:
         9c:f2:7f:f7:20:cd:11:4e:76:12:6a:3d:40:7e:e0:4d:02:66:
         96:1c:21:af:e2:1a:6a:16:a3:b0:3f:44:87:1e:5a:e3:fa:1c:
         92:fd:a5:6c
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAuCOMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MTAyNzA0MDM1MFoXDTI3MTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNTk5RkUxMTAvBgNVBAUTKEJBODNBRThEMjZGRjE4MzE0MkE0QkRE
MThGMkQwMTM5NkU1RTMxOEQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCLkWwfXW2fdAy7OnFy35ugynpHMpgPOurAVoLATbLOc502dU0gTTfze3EsewEI
3DI8/Lf52Q+BLLWpl+z9G735rmiJpaKOTIaSYDzfrIaKy/3XDi1x51QUtVyC4C8e
PTYx1d5Klo5UqOnTQL4e9CS5AY2Qt1RVFUl0/faehE9cs7OxlRTMnTHO1VCPfg+m
4n2R7WEQOXdn9wOKHGPka10R/GlyjnHrtGvICWTAHy8r2svf4AP368IJvfDf70cD
U423/kFJq+c5xMLlkn+PmilVeaFTbxhyQClkBqwqdWuK/dE/oH68nqZRsor2LKo7
E0ZqrARPyVkKgDIumraqUFB3AgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUuoOujSb/
GDFCpL3Rjy0BOW5eMY0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTU5OUZFLzY4QTJENjg0RDFCQjExRjE5OTNBNTg4QTJGNjZDRUY5LzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE1OTlGRS82OEEyRDY4NEQxQkIxMUYxOTkzQTU4OEEyRjY2Q0VGOS91b091alNi
X0dERkNwTDNSankwQk9XNWVNWTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAidrMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZ5uOMA0EAgAC
MAcDBQAkBm9AMA0GCSqGSIb3DQEBCwUAA4IBAQAjSLipZ49sQGh/5grROLFmqL0C
kl4aNkRVYWiOux606HCSkeNmZOw382G9YAYzrTzNBldD21PGveQWdj9kClGASpKV
FIwJ6WAcq8iVorf3KxNH4JHmwE/z8xAmBc/T1qoabLa97S9bXAXBW83wyVHhkawF
r196NbyjxVCPoYucqvJOb594i6VY6WHknwXZcq/1v0uYu9OxjDgt+Qkhb7/yHvpw
Bhq9RcLJ6MrVFrw9vjPSL5gwG0aGVFz9dcKy37vO2F/ve4pd7a62gTTRe7GqkMUd
fEzwqJ+c8n/3IM0RTnYSaj1AfuBNAmaWHCGv4hpqFqOwP0SHHlrj+hyS/aVs
-----END CERTIFICATE-----
Generated at Thu Nov 5 08:29:10 2026 by rpki-client