Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.cer
File: Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.cer (raw, json)
Hash identifier: hVjaB7rwCO21vaY8LdDSUqsQPWHOar22169YJ/7adOg=
Subject key identifier: 09:DE:19:67:E9:52:EE:8E:1B:2D:D6:0F:88:F6:3B:A2:60:57:53:EF
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01C684
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Oct 2023 20:03:29 +0000
Certificate not after: Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources: AS: 147042
IP: 103.173.110.0/23
IP: 2407:e640::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116356 (0x1c684)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 27 20:03:29 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=A91E9D0C/serialNumber=09DE1967E952EE8E1B2DD60F88F63BA2605753EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6c:ec:50:6f:53:fe:c4:3c:1c:1b:aa:3a:c0:
18:e2:e2:e5:a2:dd:50:bf:32:89:14:5e:08:39:42:
5b:41:79:ab:ba:82:47:53:f3:11:93:d2:2b:ab:21:
92:bd:c5:f5:91:c0:e0:dc:51:23:3f:d0:f3:20:3b:
c2:d8:f3:e4:56:47:cb:b1:f2:e8:93:b1:c2:43:59:
cd:3a:4a:86:af:46:0c:33:c8:8f:e1:62:70:8d:5e:
ff:0f:51:aa:77:3a:20:bc:98:21:85:9e:a4:ca:38:
ab:da:43:af:26:90:90:02:c5:60:ab:ac:75:e5:9b:
93:92:72:8b:9e:6d:02:cf:f5:e4:bb:16:e3:cc:8b:
84:14:cc:bc:8e:ce:59:41:41:ae:d6:8a:04:2e:30:
6f:be:63:94:ab:73:28:ec:9f:32:7d:7d:a9:8d:cf:
fd:13:a5:f5:6c:16:9c:97:94:64:b8:34:f7:f9:d0:
40:43:66:7e:1d:ce:61:ec:6b:c2:d2:87:6b:59:8c:
9b:2e:01:52:28:39:50:52:31:0a:71:81:fb:d4:9a:
0d:aa:39:eb:5e:56:f2:c5:e2:97:fd:ef:ac:f3:b0:
ce:76:d7:f1:67:ab:9f:c7:92:df:9d:0b:15:8e:2c:
b0:40:21:4b:3d:72:40:29:ff:40:f0:0f:06:90:61:
c6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:DE:19:67:E9:52:EE:8E:1B:2D:D6:0F:88:F6:3B:A2:60:57:53:EF
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
147042
sbgp-ipAddrBlock: critical
IPv4:
103.173.110.0/23
IPv6:
2407:e640::/32
Signature Algorithm: sha256WithRSAEncryption
5c:d0:56:3e:fd:bc:34:07:72:8c:f9:d0:30:60:9e:bf:72:2c:
db:2c:bf:3b:f7:58:74:83:6d:40:63:ab:64:57:8d:e4:95:6c:
cc:b3:e4:f9:cf:00:82:29:95:a3:9d:7d:6c:a4:8b:e7:c9:2f:
c5:f5:22:fe:ee:10:1d:fd:b3:10:63:19:23:fe:10:64:76:00:
4f:ca:e5:61:d1:ee:92:94:69:69:64:5f:71:17:2d:71:cb:f5:
94:8e:10:9b:23:43:05:ad:6c:cb:e8:d8:fd:47:72:c0:66:d4:
b8:c4:a2:15:76:6d:3d:40:c2:33:37:a8:cf:87:c6:ec:5a:39:
83:88:af:68:64:c6:3b:b2:a9:ca:8f:ec:31:26:be:7d:7f:3d:
ec:4b:6b:47:90:03:b2:2e:64:63:1b:90:bf:8a:a3:8c:38:27:
5b:45:43:ec:c0:f8:fa:42:b8:5a:cf:42:4b:3b:e4:f8:96:49:
02:46:da:97:8f:c0:2d:f3:ae:15:d0:d4:80:c3:47:06:46:e7:
d6:34:69:1e:cc:35:c5:8f:63:70:44:93:95:6f:38:60:26:56:
e3:14:11:29:ab:ea:50:94:1f:d9:08:68:d2:18:53:f7:8f:05:
4e:13:84:cb:01:44:ab:c7:12:9c:ef:72:fb:0b:e0:30:99:c2:
f9:f7:a4:48
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAcaEMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMTAyNzIwMDMyOVoXDTI0MTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRTlEMEMxMTAvBgNVBAUTKDA5REUxOTY3RTk1MkVFOEUxQjJERDYw
Rjg4RjYzQkEyNjA1NzUzRUYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC6bOxQb1P+xDwcG6o6wBji4uWi3VC/MokUXgg5QltBeau6gkdT8xGT0iurIZK9
xfWRwODcUSM/0PMgO8LY8+RWR8ux8uiTscJDWc06SoavRgwzyI/hYnCNXv8PUap3
OiC8mCGFnqTKOKvaQ68mkJACxWCrrHXlm5OScouebQLP9eS7FuPMi4QUzLyOzllB
Qa7WigQuMG++Y5SrcyjsnzJ9famNz/0TpfVsFpyXlGS4NPf50EBDZn4dzmHsa8LS
h2tZjJsuAVIoOVBSMQpxgfvUmg2qOeteVvLF4pf976zzsM521/Fnq5/Hkt+dCxWO
LLBAIUs9ckAp/0DwDwaQYcbdAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUCd4ZZ+lS
7o4bLdYPiPY7omBXU+8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUU5RDBDLzgxNEY2RDA0MUExQTExRUM5RDFDREYxRUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFFOUQwQy84MTRGNkQwNDFBMUExMUVDOUQxQ0RGMUVDNEY5QUUwMi9DZDRaWi1s
UzdvNGJMZFlQaVBZN29tQlhVLTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAj5iMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZ61uMA0EAgAC
MAcDBQAkB+ZAMA0GCSqGSIb3DQEBCwUAA4IBAQBc0FY+/bw0B3KM+dAwYJ6/cizb
LL8791h0g21AY6tkV43klWzMs+T5zwCCKZWjnX1spIvnyS/F9SL+7hAd/bMQYxkj
/hBkdgBPyuVh0e6SlGlpZF9xFy1xy/WUjhCbI0MFrWzL6Nj9R3LAZtS4xKIVdm09
QMIzN6jPh8bsWjmDiK9oZMY7sqnKj+wxJr59fz3sS2tHkAOyLmRjG5C/iqOMOCdb
RUPswPj6Qrhaz0JLO+T4lkkCRtqXj8At864V0NSAw0cGRufWNGkezDXFj2NwRJOV
bzhgJlbjFBEpq+pQlB/ZCGjSGFP3jwVOE4TLAUSrxxKc73L7C+AwmcL596RI
-----END CERTIFICATE-----
Generated at Thu May 9 10:24:00 2024 by rpki-client on console-fra.rpki-client.org