Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbxGXaaBtbMRiXq2xGjCVHBuXS8.cer
File: LbxGXaaBtbMRiXq2xGjCVHBuXS8.cer (raw, json)
Hash identifier: uHauFyVMPAENgr4FBZsybBUXp9JmjiZVUtT8Imzi2VU=
Subject key identifier: 2D:BC:46:5D:A6:81:B5:B3:11:89:7A:B6:C4:68:C2:54:70:6E:5D:2F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01A4A6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 23 May 2023 07:21:50 +0000
Certificate not after: Tue 30 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 137816
IP: 103.114.192.0/22
IP: 2402:d1c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107686 (0x1a4a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 23 07:21:50 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=A9153D75/serialNumber=2DBC465DA681B5B311897AB6C468C254706E5D2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:62:c2:88:11:55:d0:94:9d:69:a3:e3:cb:22:
65:ec:4b:b7:89:91:d7:46:a0:72:60:e0:5c:3d:32:
02:17:a0:6a:a0:1d:6d:be:d3:68:3b:a8:3c:4e:c7:
70:5d:d5:8c:9b:97:38:e3:a1:ed:43:af:ed:c3:89:
76:2a:34:bd:5a:9d:75:c4:27:2b:3e:98:95:8c:b4:
33:3d:67:e1:19:97:99:0a:fd:f2:5a:9e:3c:cd:68:
21:2a:8d:50:3f:70:54:79:42:62:ba:0f:17:bb:29:
e5:34:32:b3:cd:20:85:84:14:04:49:4a:83:e9:ed:
50:57:97:85:58:10:6b:9f:7e:3b:e8:f0:26:a2:fd:
eb:e3:06:0a:2c:2d:57:7d:9f:2a:82:71:83:42:f7:
12:ae:04:8b:14:55:29:a2:cb:c6:b9:b1:f9:64:96:
4d:d8:f6:34:a0:4b:a6:41:c1:cb:4f:85:50:08:63:
7c:29:1e:3c:84:96:6f:0e:97:fa:0b:97:98:7b:eb:
d6:10:6b:c4:74:0c:c2:05:ed:df:29:2e:50:bf:5b:
cb:83:8a:b4:0c:ff:cf:0c:d1:4c:f2:4b:24:0d:7a:
52:d2:93:7e:a8:b8:97:ab:09:44:29:d8:1c:e5:87:
9a:d4:ab:12:3a:c3:1f:0a:6c:28:e6:e7:b4:3a:c2:
c9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:BC:46:5D:A6:81:B5:B3:11:89:7A:B6:C4:68:C2:54:70:6E:5D:2F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137816
sbgp-ipAddrBlock: critical
IPv4:
103.114.192.0/22
IPv6:
2402:d1c0::/32
Signature Algorithm: sha256WithRSAEncryption
50:22:17:be:a0:61:de:80:6f:09:8a:52:df:c9:f2:30:4a:0c:
e0:a8:df:e1:a6:fc:57:af:33:03:68:9e:5b:96:cb:11:9a:42:
db:32:95:02:05:cb:cd:f0:60:7c:7b:61:ae:ee:a7:15:31:a0:
71:38:fe:a6:fd:61:35:a9:de:d5:ce:34:f6:21:03:bc:95:d3:
d1:c9:5f:68:29:f4:eb:44:62:57:06:c1:28:5c:28:af:44:91:
2e:36:13:5b:64:ba:ee:2b:f2:7c:4a:3a:10:f1:57:8c:61:1d:
f6:7d:4b:77:8f:1c:88:9f:00:2a:c0:49:9c:5e:1b:4b:2b:fc:
45:ba:c0:12:6f:2c:bf:ce:a7:1d:17:dd:81:cd:e7:ef:40:fa:
1a:46:d4:39:0d:cd:91:f7:a2:20:b4:c9:72:00:85:65:39:d4:
a4:c1:6b:f0:30:88:e8:eb:a4:00:1e:b1:a3:b8:64:44:56:b0:
f7:17:e3:27:2f:09:fc:1e:43:62:64:6e:e8:5c:4d:35:84:e0:
7b:b2:82:bd:fc:9d:f9:ef:68:57:bb:e0:82:88:1b:45:31:e2:
e4:b6:6b:fe:47:dd:93:31:13:b1:01:de:9b:2b:b4:c1:33:ef:
75:1e:63:16:07:70:b3:46:2f:da:b7:ba:ab:d4:be:42:7e:01:
18:f8:18:80
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAaSmMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMDUyMzA3MjE1MFoXDTI0MDczMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNTNENzUxMTAvBgNVBAUTKDJEQkM0NjVEQTY4MUI1QjMxMTg5N0FC
NkM0NjhDMjU0NzA2RTVEMkYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDEYsKIEVXQlJ1po+PLImXsS7eJkddGoHJg4Fw9MgIXoGqgHW2+02g7qDxOx3Bd
1Yyblzjjoe1Dr+3DiXYqNL1anXXEJys+mJWMtDM9Z+EZl5kK/fJanjzNaCEqjVA/
cFR5QmK6Dxe7KeU0MrPNIIWEFARJSoPp7VBXl4VYEGuffjvo8Cai/evjBgosLVd9
nyqCcYNC9xKuBIsUVSmiy8a5sflklk3Y9jSgS6ZBwctPhVAIY3wpHjyElm8Ol/oL
l5h769YQa8R0DMIF7d8pLlC/W8uDirQM/88M0UzySyQNelLSk36ouJerCUQp2Bzl
h5rUqxI6wx8KbCjm57Q6wskFAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQULbxGXaaB
tbMRiXq2xGjCVHBuXS8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTUzRDc1LzUyREU0QzRBNjRBMzExRUQ4MjIwMjQxMkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE1M0Q3NS81MkRFNEM0QTY0QTMxMUVEODIyMDI0MTJDNEY5QUUwMi9MYnhHWGFh
QnRiTVJpWHEyeEdqQ1ZIQnVYUzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhpYMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZ3LAMA0EAgAC
MAcDBQAkAtHAMA0GCSqGSIb3DQEBCwUAA4IBAQBQIhe+oGHegG8JilLfyfIwSgzg
qN/hpvxXrzMDaJ5blssRmkLbMpUCBcvN8GB8e2Gu7qcVMaBxOP6m/WE1qd7VzjT2
IQO8ldPRyV9oKfTrRGJXBsEoXCivRJEuNhNbZLruK/J8SjoQ8VeMYR32fUt3jxyI
nwAqwEmcXhtLK/xFusASbyy/zqcdF92BzefvQPoaRtQ5Dc2R96IgtMlyAIVlOdSk
wWvwMIjo66QAHrGjuGREVrD3F+MnLwn8HkNiZG7oXE01hOB7soK9/J3572hXu+CC
iBtFMeLktmv+R92TMROxAd6bK7TBM+91HmMWB3CzRi/at7qr1L5CfgEY+BiA
-----END CERTIFICATE-----
Generated at Thu May 9 10:10:38 2024 by rpki-client on console-ams.rpki-client.org