Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.cer
File: 8_Jz8-_OVR7jPIRNRAqjDtoIfiw.cer (raw, json)
Hash identifier: MkBl3rotfD62h1wGHPR6cL7bC6dVZE6NHLtt93h9oNY=
Subject key identifier: F3:F2:73:F3:EF:CE:55:1E:E3:3C:84:4D:44:0A:A3:0E:DA:08:7E:2C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01D522
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 30 Dec 2023 14:10:29 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: AS: 149006
IP: 103.176.18.0/23
IP: 2400:1fe0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120098 (0x1d522)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Dec 30 14:10:29 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A914E1F1/serialNumber=F3F273F3EFCE551EE33C844D440AA30EDA087E2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8c:29:70:68:25:1c:d9:77:a1:fe:a7:fc:d6:
b0:78:ba:0b:08:3e:c0:29:30:d6:38:bb:db:80:9b:
5b:8c:20:83:72:3d:d8:28:47:5e:d1:01:0a:22:f4:
4b:6c:67:85:65:3a:65:53:f7:37:a5:43:b0:47:cf:
86:5f:30:6c:e5:d3:a0:1d:6c:69:57:a4:f9:24:6f:
13:c6:5c:5f:53:80:08:bf:9a:af:7a:c9:5b:fc:d5:
a2:77:3c:03:6a:0f:de:27:0a:17:e3:1b:75:ef:03:
e8:23:4d:e6:e5:34:70:c1:fe:65:a1:87:8f:0b:91:
f6:73:2a:60:bc:89:97:1a:1b:af:29:02:1a:56:ef:
16:44:df:fa:69:ea:92:a3:97:be:10:0a:a2:c0:24:
01:ee:77:b5:55:76:02:b9:e3:59:34:a8:6c:25:ab:
f6:e5:38:7b:92:10:71:96:73:0f:05:98:e5:73:03:
08:fc:2b:17:0e:f8:db:25:31:ce:fc:63:cc:8d:08:
24:2f:c2:24:05:ec:3b:e9:93:40:63:55:ff:27:51:
24:69:17:44:b0:d2:cf:1f:b1:c0:29:d2:c7:a3:4d:
13:5b:2b:82:e5:d3:87:e9:3b:8b:91:a5:48:f1:9c:
aa:99:fe:de:24:3e:8b:e9:9e:89:55:dd:55:cd:d1:
22:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F2:73:F3:EF:CE:55:1E:E3:3C:84:4D:44:0A:A3:0E:DA:08:7E:2C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
149006
sbgp-ipAddrBlock: critical
IPv4:
103.176.18.0/23
IPv6:
2400:1fe0::/32
Signature Algorithm: sha256WithRSAEncryption
1b:c8:78:7c:0f:ed:4c:ef:36:f5:63:f2:1d:34:1b:9f:07:4f:
98:a3:a7:4f:3b:61:06:8b:7a:35:fd:6f:ad:e5:5c:11:07:9b:
9d:e4:6c:e6:ba:b1:80:84:fe:a2:a4:41:7d:3c:fe:d7:5b:a7:
fe:bc:99:63:40:43:84:14:9e:d1:02:19:f9:0a:ba:d3:a4:8c:
0c:65:15:de:fb:ee:ac:45:f6:be:47:fc:23:b6:93:5e:1a:00:
e2:e5:8e:1c:e5:a2:fb:2f:f5:93:5c:64:f5:f0:59:16:93:34:
9c:38:45:2d:c9:2c:d9:8d:62:42:c2:38:e1:f4:f7:49:76:c4:
ee:8d:b3:44:4e:24:55:3c:a8:a6:c2:8c:10:eb:29:3d:4d:a9:
66:0c:f3:c3:9b:97:e5:47:0b:64:79:12:bc:13:c5:b1:85:74:
ae:39:bb:53:ed:03:bf:4d:6c:f4:6f:ea:57:e3:52:3c:02:c2:
f0:2a:86:b7:53:b1:26:37:58:f6:4d:d8:72:37:3b:11:9c:ee:
5d:85:1b:2b:9a:40:fd:dc:a6:3b:99:be:dc:7b:c1:b5:de:a4:
cb:bd:c1:bc:3d:9f:88:96:93:f1:29:3f:d8:52:c1:66:0e:8f:
12:7a:9e:da:fa:a0:4c:e6:29:23:85:8b:5c:a3:af:d8:2e:ef:
19:2c:28:d8
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAdUiMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMTIzMDE0MTAyOVoXDTI1MDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNEUxRjExMTAvBgNVBAUTKEYzRjI3M0YzRUZDRTU1MUVFMzNDODQ0
RDQ0MEFBMzBFREEwODdFMkMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCbjClwaCUc2Xeh/qf81rB4ugsIPsApMNY4u9uAm1uMIINyPdgoR17RAQoi9Ets
Z4VlOmVT9zelQ7BHz4ZfMGzl06AdbGlXpPkkbxPGXF9TgAi/mq96yVv81aJ3PANq
D94nChfjG3XvA+gjTeblNHDB/mWhh48LkfZzKmC8iZcaG68pAhpW7xZE3/pp6pKj
l74QCqLAJAHud7VVdgK541k0qGwlq/blOHuSEHGWcw8FmOVzAwj8KxcO+NslMc78
Y8yNCCQvwiQF7Dvpk0BjVf8nUSRpF0Sw0s8fscAp0sejTRNbK4Ll04fpO4uRpUjx
nKqZ/t4kPovpnolV3VXN0SKFAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQU8/Jz8+/O
VR7jPIRNRAqjDtoIfiwwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTRFMUYxLzRGRUJGMjRBMDlEQTExRURBMDNDOTgxN0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE0RTFGMS80RkVCRjI0QTA5REExMUVEQTAzQzk4MTdDNEY5QUUwMi84X0p6OC1f
T1ZSN2pQSVJOUkFxakR0b0lmaXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAkYOMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZ7ASMA0EAgAC
MAcDBQAkAB/gMA0GCSqGSIb3DQEBCwUAA4IBAQAbyHh8D+1M7zb1Y/IdNBufB0+Y
o6dPO2EGi3o1/W+t5VwRB5ud5GzmurGAhP6ipEF9PP7XW6f+vJljQEOEFJ7RAhn5
CrrTpIwMZRXe++6sRfa+R/wjtpNeGgDi5Y4c5aL7L/WTXGT18FkWkzScOEUtySzZ
jWJCwjjh9PdJdsTujbNETiRVPKimwowQ6yk9TalmDPPDm5flRwtkeRK8E8WxhXSu
ObtT7QO/TWz0b+pX41I8AsLwKoa3U7EmN1j2TdhyNzsRnO5dhRsrmkD93KY7mb7c
e8G13qTLvcG8PZ+IlpPxKT/YUsFmDo8Sep7a+qBM5ikjhYtco6/YLu8ZLCjY
-----END CERTIFICATE-----
Generated at Thu May 9 10:10:29 2024 by rpki-client on console-ams.rpki-client.org