Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1AwbOf4FNm7Ysj4IgLaet198kOI.cer
File: 1AwbOf4FNm7Ysj4IgLaet198kOI.cer (raw, json)
Hash identifier: uX31DfdoJ2MBOSh+wb69W52C2pko1YfJMLBmvoXxBxU=
Subject key identifier: D4:0C:1B:39:FE:05:36:6E:D8:B2:3E:08:80:B6:9E:B7:5F:7C:90:E2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01C374
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9171A26/BE5312A245C111EA8D0BDD34C4F9AE02/1AwbOf4FNm7Ysj4IgLaet198kOI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9171A26/BE5312A245C111EA8D0BDD34C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 11 Oct 2023 16:01:13 +0000
Certificate not after: Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources: AS: 138198
IP: 103.122.28.0/22
IP: 2403:87c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115572 (0x1c374)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 11 16:01:13 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=A9171A26/serialNumber=D40C1B39FE05366ED8B23E0880B69EB75F7C90E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:74:48:e0:30:80:00:f9:d7:93:f7:5c:0e:aa:
62:3b:86:ac:93:9d:c8:ee:ad:b5:ca:7d:f2:a7:74:
09:fe:a2:b4:29:63:4b:6f:58:58:f7:88:f4:d5:26:
be:63:92:d7:d1:34:b6:0b:d9:8d:ae:9a:72:a5:63:
fa:7c:75:68:60:9d:1f:75:03:11:af:24:29:f9:75:
50:2c:8e:62:c1:75:49:1d:06:b9:07:e1:1d:75:df:
d4:b3:0b:c9:94:ad:a8:42:32:05:5f:a0:93:00:d9:
bf:c0:ee:4e:2e:4e:7b:30:32:b4:48:30:f2:d6:7f:
0f:61:24:3b:c5:c6:07:38:c4:fd:8b:fb:dd:99:49:
7d:9c:02:62:5a:e7:61:64:97:a6:7c:22:17:09:d1:
5e:df:bb:9d:c2:e6:78:1a:ea:1a:97:c5:41:45:d6:
d6:e1:c8:d9:cd:40:4e:36:60:20:95:71:69:34:27:
f6:b2:03:45:af:62:f2:f5:7b:94:1e:0f:cb:91:aa:
90:0d:27:1e:3f:15:7f:7f:4e:74:7a:c9:05:e3:8a:
af:95:f4:61:26:1e:63:2d:f3:01:b3:69:77:a1:d8:
36:92:09:f8:47:0e:3a:bf:3b:e8:8b:17:30:03:69:
43:48:b4:ab:84:bf:95:e8:e5:c2:76:23:49:84:d7:
ee:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:0C:1B:39:FE:05:36:6E:D8:B2:3E:08:80:B6:9E:B7:5F:7C:90:E2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9171A26/BE5312A245C111EA8D0BDD34C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9171A26/BE5312A245C111EA8D0BDD34C4F9AE02/1AwbOf4FNm7Ysj4IgLaet198kOI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138198
sbgp-ipAddrBlock: critical
IPv4:
103.122.28.0/22
IPv6:
2403:87c0::/32
Signature Algorithm: sha256WithRSAEncryption
81:ac:38:b0:ca:2d:3d:9a:8e:3b:bd:3f:1a:71:9a:b9:b6:1b:
15:f7:cb:a6:f5:4e:56:9d:54:71:70:f9:9a:65:fb:27:6b:fb:
64:a9:ef:42:08:2c:5e:d0:14:65:0e:35:4b:e1:f6:5c:f1:c2:
c1:f4:1f:c1:29:fd:97:ef:a6:04:54:35:a8:c9:6d:f7:f7:72:
e1:63:47:1c:b0:43:55:d5:c6:cc:f0:35:95:5d:c8:35:6b:28:
4f:65:73:ee:57:9c:2c:52:d6:e5:fb:b8:0a:1a:3e:0f:56:6b:
2e:8f:b0:3d:a7:57:f6:9a:f0:06:06:b9:11:dc:ee:2e:9d:0d:
ba:26:4c:74:09:20:ce:44:10:93:b2:4a:5b:15:39:1f:3d:3e:
9b:da:1c:75:e8:f6:24:69:67:3c:6b:40:76:e6:66:10:49:6a:
31:47:91:22:af:15:9c:55:6e:2e:08:76:d5:c1:ca:43:77:63:
1e:28:32:d5:a8:44:d9:e5:94:a2:67:21:9e:4b:17:69:2a:ce:
cf:76:af:f0:c4:00:b5:c3:e4:c8:52:f8:81:9b:cb:ab:7e:28:
63:0e:54:d7:83:f8:eb:50:59:fa:ce:4b:c6:d0:51:3e:52:c9:
1e:9b:7b:ab:08:37:80:b4:89:f7:9f:1d:0d:25:e5:9e:52:a5:
bd:71:14:d9
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAcN0MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMTAxMTE2MDExM1oXDTI0MTIwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNzFBMjYxMTAvBgNVBAUTKEQ0MEMxQjM5RkUwNTM2NkVEOEIyM0Uw
ODgwQjY5RUI3NUY3QzkwRTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDEdEjgMIAA+deT91wOqmI7hqyTncjurbXKffKndAn+orQpY0tvWFj3iPTVJr5j
ktfRNLYL2Y2umnKlY/p8dWhgnR91AxGvJCn5dVAsjmLBdUkdBrkH4R1139SzC8mU
rahCMgVfoJMA2b/A7k4uTnswMrRIMPLWfw9hJDvFxgc4xP2L+92ZSX2cAmJa52Fk
l6Z8IhcJ0V7fu53C5nga6hqXxUFF1tbhyNnNQE42YCCVcWk0J/ayA0WvYvL1e5Qe
D8uRqpANJx4/FX9/TnR6yQXjiq+V9GEmHmMt8wGzaXeh2DaSCfhHDjq/O+iLFzAD
aUNItKuEv5Xo5cJ2I0mE1+59AgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQU1AwbOf4F
Nm7Ysj4IgLaet198kOIwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTcxQTI2L0JFNTMxMkEyNDVDMTExRUE4RDBCREQzNEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE3MUEyNi9CRTUzMTJBMjQ1QzExMUVBOEQwQkREMzRDNEY5QUUwMi8xQXdiT2Y0
Rk5tN1lzajRJZ0xhZXQxOThrT0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhvWMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZ3ocMA0EAgAC
MAcDBQAkA4fAMA0GCSqGSIb3DQEBCwUAA4IBAQCBrDiwyi09mo47vT8acZq5thsV
98um9U5WnVRxcPmaZfsna/tkqe9CCCxe0BRlDjVL4fZc8cLB9B/BKf2X76YEVDWo
yW3393LhY0ccsENV1cbM8DWVXcg1ayhPZXPuV5wsUtbl+7gKGj4PVmsuj7A9p1f2
mvAGBrkR3O4unQ26Jkx0CSDORBCTskpbFTkfPT6b2hx16PYkaWc8a0B25mYQSWox
R5EirxWcVW4uCHbVwcpDd2MeKDLVqETZ5ZSiZyGeSxdpKs7Pdq/wxAC1w+TIUviB
m8urfihjDlTXg/jrUFn6zkvG0FE+Uskem3urCDeAtIn3nx0NJeWeUqW9cRTZ
-----END CERTIFICATE-----
Generated at Thu May 9 15:09:11 2024 by rpki-client on console-ams.rpki-client.org