Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer
File: aHvrJ3oFne_qK-3WevsbgjiOXrE.cer (raw, json)
Hash identifier: BQveJ4eWGrNJK5XhcN2H1X/KyZ2xeyZ2TKoNy4lbdTg=
Subject key identifier: 68:7B:EB:27:7A:05:9D:EF:EA:2B:ED:D6:7A:FB:1B:82:38:8E:5E:B1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022148
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 07 Dec 2024 14:17:14 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 141215
IP: 103.156.152.0/23
IP: 2001:df2:89c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Apr 2025 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139592 (0x22148)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 7 14:17:14 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A9165FAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ff:bf:ad:87:ec:ba:6b:63:8a:e1:6a:30:dd:
d2:05:22:e9:3b:a0:0a:53:33:4f:d1:55:ea:1c:b4:
0b:bd:72:93:14:6d:85:c6:2e:67:fa:bd:c8:52:e8:
82:7e:1c:94:67:c8:24:59:53:f8:78:11:1f:4b:f7:
4d:f2:f2:aa:02:96:27:b6:15:80:1b:21:4a:3b:8f:
ed:94:af:e8:27:48:52:e7:93:37:56:98:a0:12:b4:
1b:c0:93:dc:a9:2e:27:4b:83:cc:cc:79:58:bc:58:
89:b9:4c:24:44:34:64:f4:5b:a8:ca:46:a5:8e:18:
82:aa:34:4b:e4:07:e7:49:61:5a:06:55:3a:98:a9:
86:06:26:24:f0:da:23:bc:dc:8f:2e:64:6f:b8:69:
e3:48:6d:f7:63:15:ac:d9:e4:33:c8:74:d3:65:f4:
91:2f:3b:af:8a:8f:0d:4e:92:6c:f6:d0:33:31:07:
1f:6d:4e:d6:01:b1:dc:eb:60:8e:ce:4c:15:2d:d4:
2d:0d:1b:28:92:a0:ae:25:3b:34:d7:1f:77:48:ce:
f4:ed:81:cb:79:a0:b4:89:6e:a7:a7:db:e6:e4:1d:
42:eb:6d:62:18:d2:52:76:87:67:98:f0:91:6e:ab:
e2:3e:e3:b8:35:59:a9:c3:8f:7b:2c:43:15:fc:64:
4b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:7B:EB:27:7A:05:9D:EF:EA:2B:ED:D6:7A:FB:1B:82:38:8E:5E:B1
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
141215
sbgp-ipAddrBlock: critical
IPv4:
103.156.152.0/23
IPv6:
2001:df2:89c0::/48
Signature Algorithm: sha256WithRSAEncryption
86:cc:6f:7b:fa:a5:80:eb:38:06:98:ee:77:5a:e8:31:3f:9d:
62:68:75:bf:cd:0e:e8:aa:11:a3:1c:bf:5a:f7:26:ad:e9:0d:
34:35:57:64:49:68:02:4f:fd:1e:c0:3c:6a:e4:53:cc:a2:13:
bd:07:a4:3b:4e:dc:c8:ef:ee:24:5e:6f:25:b4:a4:3d:7e:66:
74:10:24:6c:a1:9f:dc:d2:2a:a0:b6:29:c3:ca:f9:38:71:1a:
8d:69:fa:56:07:a2:7a:62:e6:af:49:07:a6:95:6e:54:b1:c7:
c4:47:7a:dd:e3:17:4b:6b:97:88:2e:78:1e:3d:1f:fa:f8:ec:
26:6c:86:0b:16:e9:e4:69:fd:84:50:cd:36:8e:01:06:d5:8e:
e3:8d:95:72:a6:71:ef:50:4b:84:f2:ab:2d:4b:00:bd:d7:7a:
db:5d:52:c4:81:4b:29:0a:75:a4:8c:c0:f5:95:a4:00:54:47:
f2:7b:08:14:2c:ac:8d:72:7c:f3:57:96:4c:eb:75:5a:b0:93:
7f:94:3b:ec:e0:e2:94:78:e3:f6:4b:f8:69:70:d9:da:2f:19:
71:59:0f:c2:89:ed:04:f5:aa:0e:a7:d3:20:bf:15:06:08:ae:
2a:9c:67:58:1b:d3:3a:f8:01:f3:3e:c3:6c:98:f6:ec:56:cb:
28:0c:ac:b7
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAiFIMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MTIwNzE0MTcxNFoXDTI1MTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNjVGQUQxMTAvBgNVBAUTKDY4N0JFQjI3N0EwNTlERUZFQTJCRURE
NjdBRkIxQjgyMzg4RTVFQjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDY/7+th+y6a2OK4Wow3dIFIuk7oApTM0/RVeoctAu9cpMUbYXGLmf6vchS6IJ+
HJRnyCRZU/h4ER9L903y8qoClie2FYAbIUo7j+2Ur+gnSFLnkzdWmKAStBvAk9yp
LidLg8zMeVi8WIm5TCRENGT0W6jKRqWOGIKqNEvkB+dJYVoGVTqYqYYGJiTw2iO8
3I8uZG+4aeNIbfdjFazZ5DPIdNNl9JEvO6+Kjw1Okmz20DMxBx9tTtYBsdzrYI7O
TBUt1C0NGyiSoK4lOzTXH3dIzvTtgct5oLSJbqen2+bkHULrbWIY0lJ2h2eY8JFu
q+I+47g1WanDj3ssQxX8ZEsBAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUaHvrJ3oF
ne/qK+3WevsbgjiOXrEwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTY1RkFEL0E0RDc4OTlFMDg2NjExRUI4QTJEMTUzNUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE2NUZBRC9BNEQ3ODk5RTA4NjYxMUVCOEEyRDE1MzVDNEY5QUUwMi9hSHZySjNv
Rm5lX3FLLTNXZXZzYmdqaU9YckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAiefMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ5yYMA8EAgAC
MAkDBwAgAQ3yicAwDQYJKoZIhvcNAQELBQADggEBAIbMb3v6pYDrOAaY7nda6DE/
nWJodb/NDuiqEaMcv1r3Jq3pDTQ1V2RJaAJP/R7APGrkU8yiE70HpDtO3Mjv7iRe
byW0pD1+ZnQQJGyhn9zSKqC2KcPK+ThxGo1p+lYHonpi5q9JB6aVblSxx8RHet3j
F0trl4gueB49H/r47CZshgsW6eRp/YRQzTaOAQbVjuONlXKmce9QS4Tyqy1LAL3X
ettdUsSBSykKdaSMwPWVpABUR/J7CBQsrI1yfPNXlkzrdVqwk3+UO+zg4pR44/ZL
+Glw2dovGXFZD8KJ7QT1qg6n0yC/FQYIriqcZ1gb0zr4AfM+w2yY9uxWyygMrLc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 05:27:22 2025 by rpki-client