Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer
File: cjdHbP3kFQq5UJerug_t7UKtuas.cer (raw, json)
Hash identifier: j/t9L4mv2qp0YLZT+4d737ntVWk/H4UXbdHj2z7Yk5E=
Subject key identifier: 72:37:47:6C:FD:E4:15:0A:B9:50:97:AB:BA:0F:ED:ED:42:AD:B9:AB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01A9EC
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 14 Jun 2023 00:57:45 +0000
Certificate not after: Tue 30 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 103.54.111.0/24
IP: 103.67.167.0/24
IP: 2001:df2:ea00::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109036 (0x1a9ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 14 00:57:45 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=A91F4FE6/serialNumber=7237476CFDE4150AB95097ABBA0FEDED42ADB9AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f1:54:c7:6c:5e:ec:d2:aa:2b:74:40:df:59:
ce:26:dc:30:a7:c2:a2:10:0e:0d:b7:60:95:46:8b:
cd:26:7d:c6:3a:6b:9b:90:ab:8e:6f:82:27:86:8e:
3f:ad:a2:bf:79:d6:40:42:f3:67:e9:3b:ac:ed:8e:
d2:a7:d4:2a:45:6d:96:f5:9a:57:2f:30:9a:ec:00:
e3:b4:e1:ca:da:46:79:35:74:d9:61:30:54:cd:a5:
cf:ef:38:da:85:19:ff:f3:6f:9e:33:c2:fb:2d:34:
1c:82:64:54:01:60:f8:b5:cb:24:26:1c:8e:b3:93:
ce:8f:b4:ea:f3:09:12:f5:67:ab:f7:ab:48:8d:4d:
ee:6c:c8:a0:e4:33:9d:05:86:cb:53:f9:88:4d:17:
78:ce:dc:89:3f:9e:26:8c:8d:cb:5d:56:5d:5c:f7:
67:cb:9f:15:cd:2c:84:6a:bf:5b:be:ea:53:2f:59:
bd:9f:26:df:e7:d3:6c:ba:cf:18:00:4a:33:ca:9e:
82:5b:73:af:73:4c:15:e1:db:58:38:2d:54:25:b5:
42:1b:6e:1d:ea:1d:3e:f6:95:71:7b:f6:d3:a8:30:
4e:6f:25:52:07:93:1d:33:48:5a:30:d8:46:d2:b7:
e7:1f:df:3a:c9:da:a0:dc:31:f4:a7:2a:b5:75:36:
ef:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:37:47:6C:FD:E4:15:0A:B9:50:97:AB:BA:0F:ED:ED:42:AD:B9:AB
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.54.111.0/24
103.67.167.0/24
IPv6:
2001:df2:ea00::/48
Signature Algorithm: sha256WithRSAEncryption
be:c1:9a:74:53:a4:07:a5:ff:61:3f:48:72:d9:49:f0:60:40:
3a:d7:b0:12:97:e6:d9:3d:61:27:9a:5c:10:b5:6d:0f:45:e5:
9e:05:d9:d0:7e:f2:31:a4:95:05:3d:41:b9:6b:78:46:42:af:
47:e4:b8:2f:f4:7d:f8:e8:31:9f:54:b5:e1:36:d9:a4:7b:6d:
aa:9e:28:c7:2f:64:82:68:83:8d:8c:b2:49:7c:d4:f8:2f:8c:
24:38:7b:73:0a:c1:c8:12:f6:88:cc:7a:a5:c5:0a:34:95:10:
1a:21:19:8f:3d:e7:1b:dd:2f:61:13:eb:26:4e:31:12:a5:85:
38:ac:ab:2b:d4:c2:6b:d6:50:b5:b4:e4:7b:e7:2b:8a:20:52:
d8:14:99:37:64:f2:fd:ec:88:b9:8b:6f:45:35:ef:df:fc:4b:
5a:a6:e8:53:d0:f3:d2:f1:bf:2d:30:6d:80:c2:53:47:8d:5c:
b8:68:64:d3:40:e5:29:64:55:64:7e:74:a1:50:a1:7b:07:99:
6e:3f:fa:09:5d:93:ea:ac:83:7c:ee:5e:0a:35:cc:e2:02:07:
df:b0:7b:4b:06:c8:48:70:00:58:15:1b:e4:a5:f6:33:d2:b0:
33:4f:a0:c0:9e:b3:2f:97:1c:5a:92:d5:ec:56:58:62:be:47:
83:68:e5:5c
-----BEGIN CERTIFICATE-----
MIIGFTCCBP2gAwIBAgIDAansMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMDYxNDAwNTc0NVoXDTI0MDczMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRjRGRTYxMTAvBgNVBAUTKDcyMzc0NzZDRkRFNDE1MEFCOTUwOTdB
QkJBMEZFREVENDJBREI5QUIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDT8VTHbF7s0qordEDfWc4m3DCnwqIQDg23YJVGi80mfcY6a5uQq45vgieGjj+t
or951kBC82fpO6ztjtKn1CpFbZb1mlcvMJrsAOO04craRnk1dNlhMFTNpc/vONqF
Gf/zb54zwvstNByCZFQBYPi1yyQmHI6zk86PtOrzCRL1Z6v3q0iNTe5syKDkM50F
hstT+YhNF3jO3Ik/niaMjctdVl1c92fLnxXNLIRqv1u+6lMvWb2fJt/n02y6zxgA
SjPKnoJbc69zTBXh21g4LVQltUIbbh3qHT72lXF79tOoME5vJVIHkx0zSFow2EbS
t+cf3zrJ2qDcMfSnKrV1Nu8lAgMBAAGjggMKMIIDBjAdBgNVHQ4EFgQUcjdHbP3k
FQq5UJerug/t7UKtuaswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUY0RkU2L0JCMDk1ODJDN0RENDExRUE5NEJFQUY3OUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFGNEZFNi9CQjA5NTgyQzdERDQxMUVBOTRCRUFGNzlDNEY5QUUwMi9jamRIYlAz
a0ZRcTVVSmVydWdfdDdVS3R1YXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8EJzAl
MBIEAgABMAwDBABnNm8DBABnQ6cwDwQCAAIwCQMHACABDfLqADANBgkqhkiG9w0B
AQsFAAOCAQEAvsGadFOkB6X/YT9IctlJ8GBAOtewEpfm2T1hJ5pcELVtD0XlngXZ
0H7yMaSVBT1BuWt4RkKvR+S4L/R9+Ogxn1S14TbZpHttqp4oxy9kgmiDjYyySXzU
+C+MJDh7cwrByBL2iMx6pcUKNJUQGiEZjz3nG90vYRPrJk4xEqWFOKyrK9TCa9ZQ
tbTke+criiBS2BSZN2Ty/eyIuYtvRTXv3/xLWqboU9Dz0vG/LTBtgMJTR41cuGhk
00DlKWRVZH50oVCheweZbj/6CV2T6qyDfO5eCjXM4gIH37B7SwbISHAAWBUb5KX2
M9KwM0+gwJ6zL5ccWpLV7FZYYr5Hg2jlXA==
-----END CERTIFICATE-----
Generated at Thu May 9 17:48:28 2024 by rpki-client on console-ams.rpki-client.org