Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OMCxxY0A3j9zrVtYh9Qkm97nu6I.cer
File: OMCxxY0A3j9zrVtYh9Qkm97nu6I.cer (raw, json)
Hash identifier: /x1QgCsD9FPcHFZTrxYSDxPMri1xg1M4cAlNaPsW4ho=
Subject key identifier: 38:C0:B1:C5:8D:00:DE:3F:73:AD:5B:58:87:D4:24:9B:DE:E7:BB:A2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01EB72
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 15 Apr 2024 03:51:37 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: AS: 9303
AS: 10200
AS: 17752
AS: 133756
IP: 103.24.136.0/22
IP: 202.14.102.0/24
IP: 202.20.65.0/24
IP: 202.20.92.0/24
IP: 202.21.157.0/24
IP: 202.27.192.0 -- 202.27.203.255
IP: 202.27.209.0 -- 202.27.219.255
IP: 202.27.222.0/24
IP: 202.27.236.0/24
IP: 202.27.247.0/24
IP: 202.27.251.0/24
IP: 202.36.43.0/24
IP: 202.37.70.0/23
IP: 202.37.117.0 -- 202.37.118.255
IP: 202.49.141.0/24
IP: 202.49.183.0/24
IP: 202.49.189.0/24
IP: 202.50.95.0/24
IP: 203.9.216.0/23
IP: 2404:bf00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125810 (0x1eb72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 15 03:51:37 2024 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A91D1200/serialNumber=38C0B1C58D00DE3F73AD5B5887D4249BDEE7BBA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:65:30:c5:e8:77:16:45:3c:52:9f:e9:b4:7c:
e1:ab:8c:1a:8a:48:f3:c5:33:fa:05:26:91:2b:4c:
34:84:b2:c7:4d:84:52:b9:b8:26:9b:37:3b:d8:b3:
c2:2b:3e:8f:bb:0c:58:b1:51:83:8a:96:50:05:d8:
1d:40:6f:20:fb:b3:2c:71:6c:9a:b5:fa:3e:4a:f6:
a9:8c:88:ba:86:a5:cc:26:cc:f2:41:dd:20:b0:63:
ec:f5:37:7c:22:8e:e0:b3:8b:ef:9b:29:31:b4:8b:
df:9d:9c:51:aa:21:0b:8b:58:d7:d5:b9:30:f7:9e:
4b:5e:14:ba:e3:3d:db:18:70:6c:af:28:eb:e2:c1:
d7:80:31:d2:c9:0f:f5:a7:93:36:a4:01:e0:8d:b6:
88:e5:df:ab:0d:81:f8:9b:d7:72:e2:ae:4b:1b:90:
ef:dc:9b:da:41:2a:27:d3:bb:eb:9a:08:ee:21:0e:
4a:14:54:15:f9:1d:7c:af:f9:d6:7e:21:99:58:8a:
a5:75:eb:c7:cb:ef:5f:94:ce:52:87:5f:7c:6d:69:
49:40:97:2f:32:94:f8:62:1d:ad:00:af:9e:6c:74:
09:53:20:f0:4a:24:db:18:96:0b:c3:cd:37:a1:63:
d7:18:80:e8:92:6e:e6:30:9d:e2:c6:72:5b:a8:b7:
49:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C0:B1:C5:8D:00:DE:3F:73:AD:5B:58:87:D4:24:9B:DE:E7:BB:A2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9303
10200
17752
133756
sbgp-ipAddrBlock: critical
IPv4:
103.24.136.0/22
202.14.102.0/24
202.20.65.0/24
202.20.92.0/24
202.21.157.0/24
202.27.192.0-202.27.203.255
202.27.209.0-202.27.219.255
202.27.222.0/24
202.27.236.0/24
202.27.247.0/24
202.27.251.0/24
202.36.43.0/24
202.37.70.0/23
202.37.117.0-202.37.118.255
202.49.141.0/24
202.49.183.0/24
202.49.189.0/24
202.50.95.0/24
203.9.216.0/23
IPv6:
2404:bf00::/32
Signature Algorithm: sha256WithRSAEncryption
19:4d:35:ec:a9:f0:9f:59:d5:80:71:4f:18:af:6b:3a:e9:dd:
c2:6f:94:d8:8d:80:78:51:7f:93:09:39:41:92:c2:2b:69:ba:
15:0b:f9:c2:43:22:b9:e6:4c:a3:98:f5:c9:1f:53:c1:d0:39:
a7:5b:1d:3b:d4:f9:86:54:cc:69:a4:00:a8:f0:8f:b7:c5:3b:
90:d7:9c:32:c8:55:5b:a7:99:19:60:0f:ea:5c:6b:46:83:e9:
69:89:92:d5:81:59:08:b3:eb:36:20:da:0c:e5:d5:86:1e:50:
06:66:24:5e:9f:dc:ed:ba:38:a5:4d:81:b9:f7:ca:a8:84:e3:
ab:1b:fe:ad:6b:bd:4f:2d:30:e6:12:05:c5:d2:45:4a:8d:a7:
c4:01:63:00:93:08:14:15:de:2a:87:95:6a:cc:12:03:63:fc:
02:45:d0:a3:b1:17:ed:f7:a6:79:ce:87:c4:35:50:60:d2:1b:
86:1c:65:24:1b:63:a2:a2:eb:5b:e9:b1:a0:84:17:b0:43:05:
06:3b:bf:87:d4:61:e9:db:85:1e:80:e1:9e:cc:c4:f6:8c:ee:
94:b4:fc:93:54:85:bc:8a:be:42:15:5a:e4:06:cd:5b:ee:ff:
90:4f:a3:f2:4f:c3:97:b9:80:05:1a:22:21:39:1e:9a:90:36:
f1:50:0c:2c
-----BEGIN CERTIFICATE-----
MIIGvjCCBaagAwIBAgIDAetyMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDQxNTAzNTEzN1oXDTI1MDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRDEyMDAxMTAvBgNVBAUTKDM4QzBCMUM1OEQwMERFM0Y3M0FENUI1
ODg3RDQyNDlCREVFN0JCQTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC+ZTDF6HcWRTxSn+m0fOGrjBqKSPPFM/oFJpErTDSEssdNhFK5uCabNzvYs8Ir
Po+7DFixUYOKllAF2B1AbyD7syxxbJq1+j5K9qmMiLqGpcwmzPJB3SCwY+z1N3wi
juCzi++bKTG0i9+dnFGqIQuLWNfVuTD3nkteFLrjPdsYcGyvKOviwdeAMdLJD/Wn
kzakAeCNtojl36sNgfib13LirksbkO/cm9pBKifTu+uaCO4hDkoUVBX5HXyv+dZ+
IZlYiqV168fL71+UzlKHX3xtaUlAly8ylPhiHa0Ar55sdAlTIPBKJNsYlgvDzTeh
Y9cYgOiSbuYwneLGcluot0m9AgMBAAGjggOzMIIDrzAdBgNVHQ4EFgQUOMCxxY0A
3j9zrVtYh9Qkm97nu6IwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUQxMjAwL0Y1QTk1MkUwQ0MwMzExRURBOTdBQ0E1REM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFEMTIwMC9GNUE5NTJFMENDMDMxMUVEQTk3QUNBNURDNEY5QUUwMi9PTUN4eFkw
QTNqOXpyVnRZaDlRa205N251NkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJgYIKwYBBQUHAQgBAf8EFzAV
oBMwEQICJFcCAifYAgJFWAIDAgp8MIG2BggrBgEFBQcBBwEB/wSBpjCBozCBkQQC
AAEwgYoDBAJnGIgDBADKDmYDBADKFEEDBADKFFwDBADKFZ0wDAMEBsobwAMEAsob
yDAMAwQAyhvRAwQCyhvYAwQAyhveAwQAyhvsAwQAyhv3AwQAyhv7AwQAyiQrAwQB
yiVGMAwDBADKJXUDBADKJXYDBADKMY0DBADKMbcDBADKMb0DBADKMl8DBAHLCdgw
DQQCAAIwBwMFACQEvwAwDQYJKoZIhvcNAQELBQADggEBABlNNeyp8J9Z1YBxTxiv
azrp3cJvlNiNgHhRf5MJOUGSwitpuhUL+cJDIrnmTKOY9ckfU8HQOadbHTvU+YZU
zGmkAKjwj7fFO5DXnDLIVVunmRlgD+pca0aD6WmJktWBWQiz6zYg2gzl1YYeUAZm
JF6f3O26OKVNgbn3yqiE46sb/q1rvU8tMOYSBcXSRUqNp8QBYwCTCBQV3iqHlWrM
EgNj/AJF0KOxF+33pnnOh8Q1UGDSG4YcZSQbY6Ki61vpsaCEF7BDBQY7v4fUYenb
hR6A4Z7MxPaM7pS0/JNUhbyKvkIVWuQGzVvu/5BPo/JPw5e5gAUaIiE5HpqQNvFQ
DCw=
-----END CERTIFICATE-----
Generated at Thu May 9 10:24:14 2024 by rpki-client on console-fra.rpki-client.org