Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uw81vosh-3I_vNcbAXuVdCN-3IQ.cer
File:                     uw81vosh-3I_vNcbAXuVdCN-3IQ.cer (raw, json)
Hash identifier:          Q2XVi4iWFJD1OfgHlniBEPJm3+FZmaKshfWqD9XEzs4=
Subject key identifier:   BB:0F:35:BE:8B:21:FB:72:3F:BC:D7:1B:01:7B:95:74:23:7E:DC:84
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       7DE1
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A917275D/019B96B4B66C11EEA0D88D33C4F9AE02/uw81vosh-3I_vNcbAXuVdCN-3IQ.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A917275D/019B96B4B66C11EEA0D88D33C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 01 Jul 2026 01:16:16 +0000
Certificate not after:    Fri 30 Oct 2026 00:00:00 +0000
Subordinate resources:    IP: 157.10.229.0/24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 16:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32225 (0x7de1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jul  1 01:16:16 2026 GMT
            Not After : Oct 30 00:00:00 2026 GMT
        Subject: CN=A917275D, serialNumber=BB0F35BE8B21FB723FBCD71B017B9574237EDC84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b5:ee:07:4c:d3:b1:ab:ce:d7:5d:99:9b:6b:
                    a4:0c:e7:ab:6a:8f:cd:9f:14:3b:c3:6d:8a:88:2e:
                    34:f8:fc:a6:49:40:b8:44:f8:d5:b8:ab:b0:89:ff:
                    95:5b:a4:ac:07:17:e8:d9:d3:f9:5a:cf:04:99:1c:
                    60:1b:6d:30:19:ec:1e:83:98:51:2e:7d:fc:82:b0:
                    5d:dd:29:8b:8c:4f:7a:9a:9d:4e:77:98:82:05:e3:
                    4c:fa:24:87:26:4b:62:3c:44:5e:d3:d5:5e:d6:43:
                    30:0f:23:50:fc:f1:c7:a9:71:bf:e3:31:f5:1a:5e:
                    73:24:03:9b:db:85:70:e5:7f:e5:4c:87:22:6b:f0:
                    ac:94:08:42:b9:10:00:b0:31:d8:5a:12:ab:be:15:
                    4b:c3:21:7f:81:b3:71:55:fd:89:38:53:c8:0b:52:
                    16:af:87:f5:8c:a1:2c:e8:e6:c4:db:de:55:17:22:
                    3f:26:e8:1c:72:c3:fd:76:4b:3b:15:19:29:f7:5b:
                    99:56:ae:5f:c5:a4:d2:56:48:15:72:14:17:cb:9a:
                    6e:8a:d2:01:23:5a:f8:9e:60:24:d7:57:6b:9e:a7:
                    61:55:f9:f1:45:22:34:f9:1f:e1:07:d9:c6:c3:03:
                    4a:0a:e0:84:b6:19:46:a0:c7:48:66:13:f8:b8:e1:
                    c8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:0F:35:BE:8B:21:FB:72:3F:BC:D7:1B:01:7B:95:74:23:7E:DC:84
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917275D/019B96B4B66C11EEA0D88D33C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917275D/019B96B4B66C11EEA0D88D33C4F9AE02/uw81vosh-3I_vNcbAXuVdCN-3IQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:89:54:f8:a6:2d:0c:69:d8:eb:f3:17:34:d1:80:d1:11:f6:
         61:4b:5f:a7:92:96:43:15:66:43:ca:f2:60:7d:ec:13:fa:d7:
         88:56:b0:91:a4:3f:f0:58:06:72:44:9b:4f:fc:db:a5:f6:ec:
         ee:2f:29:55:de:96:4f:2a:62:0d:39:b8:8f:a3:b2:1e:78:12:
         c7:b9:24:96:8f:bd:e1:16:fa:57:dd:c0:72:ba:a7:5d:b7:cf:
         06:09:d4:41:de:b8:55:58:8c:4f:03:ab:70:80:c1:f1:76:16:
         c1:e6:ba:49:05:45:ed:4c:24:33:5f:b6:54:8c:3f:30:98:39:
         3c:40:95:c7:fd:75:b3:9a:c3:9f:e8:27:0a:13:3c:91:4b:1f:
         fe:76:69:7a:64:7a:11:f3:2d:59:d2:b4:a8:fe:3b:42:fc:a9:
         1d:70:4f:c6:3a:8d:75:d9:5d:30:66:99:7c:f6:12:07:87:3f:
         4c:94:bf:de:80:b7:af:3e:3d:65:92:36:a2:f2:59:27:6d:92:
         f5:53:54:12:ff:1f:7d:c7:f5:e7:2a:9a:d4:fe:72:20:77:2c:
         0f:00:cc:f4:05:19:6f:52:6c:6f:a0:d8:39:0c:84:9d:0d:ea:
         7b:1d:0e:12:bc:e9:62:cb:09:72:8f:ba:7f:57:ca:e5:2c:10:
         6b:5e:85:7a
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICfeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwNzAxMDExNjE2WhcNMjYxMDMwMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE3Mjc1RDExMC8GA1UEBRMoQkIwRjM1QkU4QjIxRkI3MjNGQkNENzFC
MDE3Qjk1NzQyMzdFREM4NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AMW17gdM07GrztddmZtrpAznq2qPzZ8UO8NtioguNPj8pklAuET41birsIn/lVuk
rAcX6NnT+VrPBJkcYBttMBnsHoOYUS59/IKwXd0pi4xPepqdTneYggXjTPokhyZL
YjxEXtPVXtZDMA8jUPzxx6lxv+Mx9RpecyQDm9uFcOV/5UyHImvwrJQIQrkQALAx
2FoSq74VS8Mhf4GzcVX9iThTyAtSFq+H9YyhLOjmxNveVRciPyboHHLD/XZLOxUZ
KfdbmVauX8Wk0lZIFXIUF8uaborSASNa+J5gJNdXa56nYVX58UUiNPkf4QfZxsMD
SgrghLYZRqDHSGYT+LjhyF0CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBS7DzW+iyH7
cj+81xsBe5V0I37chDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzI3NUQvMDE5Qjk2QjRCNjZDMTFFRUEwRDg4RDMzQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTcyNzVELzAxOUI5NkI0QjY2QzExRUVBMEQ4OEQzM0M0RjlBRTAyL3V3ODF2b3No
LTNJX3ZOY2JBWHVWZENOLTNJUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAJ0K5TANBgkqhkiG9w0BAQsFAAOCAQEArYlU+KYtDGnY6/MXNNGA
0RH2YUtfp5KWQxVmQ8ryYH3sE/rXiFawkaQ/8FgGckSbT/zbpfbs7i8pVd6WTypi
DTm4j6OyHngSx7kklo+94Rb6V93AcrqnXbfPBgnUQd64VViMTwOrcIDB8XYWwea6
SQVF7UwkM1+2VIw/MJg5PECVx/11s5rDn+gnChM8kUsf/nZpemR6EfMtWdK0qP47
QvypHXBPxjqNddldMGaZfPYSB4c/TJS/3oC3rz49ZZI2ovJZJ22S9VNUEv8ffcf1
5yqa1P5yIHcsDwDM9AUZb1Jsb6DYOQyEnQ3qex0OErzpYssJco+6f1fK5SwQa16F
eg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:04:43 2026 by rpki-client