Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKzc_ifokI3EfzPvkUrjxQi6R7M.cer
File: PKzc_ifokI3EfzPvkUrjxQi6R7M.cer (raw, json)
Hash identifier: 4IMHPgMmG/4wdv4ZVHowU90eg9b346P9aDskBRI36/g=
Subject key identifier: 3C:AC:DC:FE:27:E8:90:8D:C4:7F:33:EF:91:4A:E3:C5:08:BA:47:B3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01F04C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9133B40/F01CA9C61B2211EEB79B1E1BC4F9AE02/PKzc_ifokI3EfzPvkUrjxQi6R7M.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9133B40/F01CA9C61B2211EEB79B1E1BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 07 May 2024 06:44:50 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 151078
IP: 103.130.188.0/23
IP: 2001:df2:3cc0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127052 (0x1f04c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 7 06:44:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A9133B40/serialNumber=3CACDCFE27E8908DC47F33EF914AE3C508BA47B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:15:59:0d:d8:6e:c2:12:ff:8e:81:01:50:5c:
67:31:2a:fc:62:44:c2:d9:5c:57:81:0f:48:4e:57:
ff:66:eb:87:42:a0:75:92:66:83:8d:25:c3:9c:25:
5a:90:36:ee:3c:92:fd:3f:8e:69:80:c7:fd:33:10:
3f:fe:19:92:7e:24:c6:99:be:22:88:8d:5b:1e:39:
08:df:6b:63:90:93:81:65:a9:17:bd:38:44:fb:de:
28:86:f2:ba:90:9d:67:d5:5b:6c:51:c6:23:e1:dc:
0f:79:7a:83:aa:8e:73:5a:34:fe:3f:b0:e8:72:0b:
a5:5f:14:f7:ec:b2:b0:c8:72:73:2e:a7:34:ec:4f:
03:59:f9:09:a6:93:22:0d:31:f7:28:79:d6:52:15:
50:71:00:37:38:f0:c1:0b:2c:8d:0f:24:0e:49:db:
49:a8:d8:24:c5:49:b0:d5:d7:60:fc:cd:82:a2:1f:
fd:01:f6:6d:51:19:ed:61:72:1a:a4:41:24:c7:cb:
48:ed:b9:ee:57:c1:5b:e9:84:f4:bb:dc:34:cd:d1:
91:45:d9:97:32:3d:d3:c3:b8:cb:0a:dc:c9:2d:2f:
19:2a:01:e0:be:7e:c6:2a:c4:bc:59:52:88:f5:ab:
9a:88:82:ab:0a:36:f3:ef:88:c2:e5:69:98:70:d8:
78:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:AC:DC:FE:27:E8:90:8D:C4:7F:33:EF:91:4A:E3:C5:08:BA:47:B3
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9133B40/F01CA9C61B2211EEB79B1E1BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9133B40/F01CA9C61B2211EEB79B1E1BC4F9AE02/PKzc_ifokI3EfzPvkUrjxQi6R7M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151078
sbgp-ipAddrBlock: critical
IPv4:
103.130.188.0/23
IPv6:
2001:df2:3cc0::/48
Signature Algorithm: sha256WithRSAEncryption
70:e8:f7:da:0f:24:aa:c8:dd:e3:59:2f:43:f2:f4:f1:fa:37:
c6:ab:fc:4c:30:27:5a:a8:35:67:ce:4b:5c:34:aa:b7:6e:88:
84:f6:80:ac:f5:bc:5c:07:46:80:c3:99:6a:90:62:4c:f2:b9:
ee:b3:a7:60:2a:6b:bd:96:91:08:67:3e:93:73:be:41:66:02:
4f:d6:06:73:d3:7c:d2:cc:0e:c5:b6:a3:78:77:29:b0:02:9e:
5c:09:cf:fa:21:74:1e:b2:29:3f:40:f1:cf:70:4b:18:3c:d2:
25:15:f3:a9:d0:04:5d:7c:e6:28:78:c0:89:2d:0c:cf:c0:cd:
b9:bf:f4:08:ce:04:85:52:53:a7:e6:45:f8:7b:39:4e:b6:58:
49:74:38:7f:4e:9f:ae:48:8c:28:04:06:02:83:6e:71:7e:1a:
0d:cf:a9:7b:00:cd:0c:ac:b8:c7:5f:6c:f0:2c:8b:64:50:dc:
98:0c:88:c3:09:ca:fd:91:a1:8e:4a:9c:7f:c1:11:29:89:72:
e0:b6:31:61:49:07:18:cb:e0:a4:7f:98:6b:df:b0:0f:75:dc:
70:a0:3b:b6:92:d9:24:7c:6d:92:18:f5:f6:7f:34:67:98:01:
63:5a:b2:a6:9d:23:dc:0d:dd:e9:82:10:2f:8c:78:71:cc:41:
e4:e7:2a:55
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAfBMMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDUwNzA2NDQ1MFoXDTI1MDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMzNCNDAxMTAvBgNVBAUTKDNDQUNEQ0ZFMjdFODkwOERDNDdGMzNF
RjkxNEFFM0M1MDhCQTQ3QjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCuFVkN2G7CEv+OgQFQXGcxKvxiRMLZXFeBD0hOV/9m64dCoHWSZoONJcOcJVqQ
Nu48kv0/jmmAx/0zED/+GZJ+JMaZviKIjVseOQjfa2OQk4FlqRe9OET73iiG8rqQ
nWfVW2xRxiPh3A95eoOqjnNaNP4/sOhyC6VfFPfssrDIcnMupzTsTwNZ+QmmkyIN
MfcoedZSFVBxADc48MELLI0PJA5J20mo2CTFSbDV12D8zYKiH/0B9m1RGe1hchqk
QSTHy0jtue5XwVvphPS73DTN0ZFF2ZcyPdPDuMsK3MktLxkqAeC+fsYqxLxZUoj1
q5qIgqsKNvPviMLlaZhw2HgXAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUPKzc/ifo
kI3EfzPvkUrjxQi6R7MwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTMzQjQwL0YwMUNBOUM2MUIyMjExRUVCNzlCMUUxQkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEzM0I0MC9GMDFDQTlDNjFCMjIxMUVFQjc5QjFFMUJDNEY5QUUwMi9QS3pjX2lm
b2tJM0VmelB2a1VyanhRaTZSN00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAk4mMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ4K8MA8EAgAC
MAkDBwAgAQ3yPMAwDQYJKoZIhvcNAQELBQADggEBAHDo99oPJKrI3eNZL0Py9PH6
N8ar/EwwJ1qoNWfOS1w0qrduiIT2gKz1vFwHRoDDmWqQYkzyue6zp2Aqa72WkQhn
PpNzvkFmAk/WBnPTfNLMDsW2o3h3KbACnlwJz/ohdB6yKT9A8c9wSxg80iUV86nQ
BF185ih4wIktDM/Azbm/9AjOBIVSU6fmRfh7OU62WEl0OH9On65IjCgEBgKDbnF+
Gg3PqXsAzQysuMdfbPAsi2RQ3JgMiMMJyv2RoY5KnH/BESmJcuC2MWFJBxjL4KR/
mGvfsA913HCgO7aS2SR8bZIY9fZ/NGeYAWNasqadI9wN3emCEC+MeHHMQeTnKlU=
-----END CERTIFICATE-----
Generated at Thu May 9 03:29:59 2024 by rpki-client on console-fra.rpki-client.org