Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH6czEtpiBWTjDs2e84wggMOI0c.cer
File: ZH6czEtpiBWTjDs2e84wggMOI0c.cer (raw, json)
Hash identifier: lXBq7aQyz70cTPakWhSIZNfKoNn+AnN9TVQqmS2V2iY=
Subject key identifier: 64:7E:9C:CC:4B:69:88:15:93:8C:3B:36:7B:CE:30:82:03:0E:23:47
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01B483
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 02 Aug 2023 17:42:51 +0000
Certificate not after: Thu 31 Oct 2024 00:00:00 +0000
Subordinate resources: AS: 150135
IP: 103.191.174.0/23
IP: 2001:df1:7c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111747 (0x1b483)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 2 17:42:51 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=A918216E/serialNumber=647E9CCC4B698815938C3B367BCE3082030E2347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ba:b9:03:42:06:b1:22:b1:01:9f:c6:af:57:
69:85:19:92:39:75:be:1e:85:14:d2:91:a2:d6:e3:
10:25:fe:1a:84:d8:e5:23:12:37:e1:1c:77:3e:d4:
9e:3d:2c:05:9f:d6:98:c0:6b:a4:74:34:eb:12:b5:
8d:b9:45:41:6b:38:3e:7f:79:7d:7d:fb:23:a9:3a:
c5:d5:8a:9e:02:56:01:c3:85:02:fe:77:d8:2d:34:
ea:94:36:8b:4d:43:4b:7f:4a:9f:18:03:d6:8d:41:
75:ba:7e:b0:cf:be:d9:d1:d7:59:31:4e:65:b4:f4:
e8:05:cf:2c:6e:86:ad:e0:48:88:eb:83:2e:55:4b:
64:57:30:6d:b0:1b:92:c0:1b:19:00:35:5a:fc:2f:
08:3a:05:d0:eb:95:a1:e0:67:c3:c2:9e:b8:05:9e:
03:0b:00:1d:5b:31:c8:5b:f9:9e:63:f6:50:dc:aa:
3f:7b:c5:b5:5a:1d:1b:e6:b9:4a:96:2c:48:0b:98:
9f:a6:0d:67:69:2f:e2:85:3f:78:d6:54:01:7a:26:
fe:5c:95:17:53:95:c7:41:86:1a:0a:63:af:b8:1f:
a8:f4:36:fe:36:12:d3:b4:dc:49:5a:7a:b8:17:13:
92:de:ec:c9:fa:c4:6b:c9:1a:a8:58:d0:88:e9:58:
cf:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7E:9C:CC:4B:69:88:15:93:8C:3B:36:7B:CE:30:82:03:0E:23:47
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
150135
sbgp-ipAddrBlock: critical
IPv4:
103.191.174.0/23
IPv6:
2001:df1:7c0::/48
Signature Algorithm: sha256WithRSAEncryption
24:7c:56:3d:92:03:fe:76:fa:bc:95:13:70:be:fc:e0:d4:4e:
4c:08:f3:db:24:b6:b0:08:c7:4a:0b:33:bb:2b:fe:a4:40:e5:
5b:84:b7:b1:49:d6:2a:23:2a:ee:c0:1b:53:c7:3e:70:cd:68:
1e:e2:6d:d1:ea:5a:00:31:3e:12:e1:47:cb:34:6f:b5:9a:c4:
24:21:bc:a7:2b:9f:92:42:78:39:06:15:55:55:f4:96:00:c2:
72:f5:81:b0:47:db:86:a3:22:64:96:ef:e5:95:64:cc:43:86:
f9:44:25:b6:79:75:c4:70:3d:4f:92:45:2e:8f:37:ea:e5:6e:
64:da:ad:be:04:45:d8:e6:f8:de:89:56:94:32:f2:b9:74:33:
92:49:a0:49:60:4f:6d:b2:33:bd:0f:8b:54:23:01:61:96:5a:
50:8f:af:32:63:09:71:5f:9f:dd:03:86:e3:4a:20:62:2e:a2:
a7:a1:76:af:54:75:3d:11:aa:91:69:ca:e5:2c:d0:d5:7e:d6:
3b:39:04:a7:e5:18:d5:99:52:1d:a6:e4:db:ab:0c:76:37:cd:
b9:e9:a2:dd:ee:30:86:4e:ad:fe:fc:e7:c2:99:e2:61:76:c9:
54:08:15:6c:60:0f:43:c7:06:8a:78:92:b1:cc:cb:d2:2e:74:
86:d3:c6:aa
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAbSDMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMDgwMjE3NDI1MVoXDTI0MTAzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxODIxNkUxMTAvBgNVBAUTKDY0N0U5Q0NDNEI2OTg4MTU5MzhDM0Iz
NjdCQ0UzMDgyMDMwRTIzNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC8urkDQgaxIrEBn8avV2mFGZI5db4ehRTSkaLW4xAl/hqE2OUjEjfhHHc+1J49
LAWf1pjAa6R0NOsStY25RUFrOD5/eX19+yOpOsXVip4CVgHDhQL+d9gtNOqUNotN
Q0t/Sp8YA9aNQXW6frDPvtnR11kxTmW09OgFzyxuhq3gSIjrgy5VS2RXMG2wG5LA
GxkANVr8Lwg6BdDrlaHgZ8PCnrgFngMLAB1bMchb+Z5j9lDcqj97xbVaHRvmuUqW
LEgLmJ+mDWdpL+KFP3jWVAF6Jv5clRdTlcdBhhoKY6+4H6j0Nv42EtO03ElaergX
E5Le7Mn6xGvJGqhY0IjpWM+PAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUZH6czEtp
iBWTjDs2e84wggMOI0cwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTgyMTZFL0FGRkVDNDEwMEI2RTExRUQ5NzM1ODgxMEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE4MjE2RS9BRkZFQzQxMDBCNkUxMUVEOTczNTg4MTBDNEY5QUUwMi9aSDZjekV0
cGlCV1RqRHMyZTg0d2dnTU9JMGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAkp3MDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ7+uMA8EAgAC
MAkDBwAgAQ3xB8AwDQYJKoZIhvcNAQELBQADggEBACR8Vj2SA/52+ryVE3C+/ODU
TkwI89sktrAIx0oLM7sr/qRA5VuEt7FJ1iojKu7AG1PHPnDNaB7ibdHqWgAxPhLh
R8s0b7WaxCQhvKcrn5JCeDkGFVVV9JYAwnL1gbBH24ajImSW7+WVZMxDhvlEJbZ5
dcRwPU+SRS6PN+rlbmTarb4ERdjm+N6JVpQy8rl0M5JJoElgT22yM70Pi1QjAWGW
WlCPrzJjCXFfn90DhuNKIGIuoqehdq9UdT0RqpFpyuUs0NV+1js5BKflGNWZUh2m
5NurDHY3zbnpot3uMIZOrf7858KZ4mF2yVQIFWxgD0PHBop4krHMy9IudIbTxqo=
-----END CERTIFICATE-----
Generated at Thu May 9 03:30:08 2024 by rpki-client on console-fra.rpki-client.org