Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if6Hw1yRomVecR6xVLheb47OI1M.cer
File: if6Hw1yRomVecR6xVLheb47OI1M.cer (raw, json)
Hash identifier: aGkh/mYLEYl7lcghBBSYMIFLiBQSi2cOnt3p7vbaSWU=
Subject key identifier: 89:FE:87:C3:5C:91:A2:65:5E:71:1E:B1:54:B8:5E:6F:8E:CE:23:53
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0212B6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912E5AE/33F74DDC3DCC11EF89B5B073C4F9AE02/if6Hw1yRomVecR6xVLheb47OI1M.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912E5AE/33F74DDC3DCC11EF89B5B073C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 08 Oct 2024 13:42:27 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 132392
IP: 103.20.18.0/23
IP: 2001:df0:402::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 06:14:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135862 (0x212b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 8 13:42:27 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A912E5AE/serialNumber=89FE87C35C91A2655E711EB154B85E6F8ECE2353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a6:8d:14:7c:bc:a5:cb:60:bf:2f:d8:5e:74:
c0:0a:63:48:67:1f:6f:c5:c7:ae:21:e7:df:d1:7e:
c5:4a:55:b6:c0:c7:38:07:d8:6b:f8:03:8f:0c:ab:
a4:10:8b:95:6d:53:3d:af:f2:9b:33:90:84:5f:3f:
e3:ad:f5:d3:e8:5e:71:c3:91:f5:96:a4:d0:d4:e5:
31:ec:67:59:56:30:93:03:9d:c2:80:37:89:9e:ec:
8b:6f:d5:7e:41:b7:c5:a9:54:91:1d:35:a6:a0:32:
0c:3c:bf:1c:dd:9e:74:02:b4:0b:df:34:b5:eb:89:
45:f9:92:74:0b:71:28:d5:6d:bd:1c:8f:2c:ac:32:
ff:35:29:d6:36:23:78:e5:d3:1d:ff:eb:4c:ac:8f:
e5:ca:c9:3d:0a:09:c1:f6:4d:8c:2f:ce:48:2a:42:
cd:cd:1b:45:dc:27:3a:fc:42:cd:d0:20:28:97:95:
dd:4a:13:6a:7c:b6:d2:6a:61:3c:de:f0:b2:dc:64:
d7:8d:68:6f:74:ba:18:89:ee:e5:68:d0:b6:d1:b0:
26:62:ce:97:81:f6:72:16:a3:b0:45:9b:4e:73:65:
02:43:79:49:0e:80:06:29:d1:f8:7c:1e:29:c9:d0:
e6:c6:66:72:0a:1f:bd:7c:99:61:83:5a:6e:91:17:
dd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:FE:87:C3:5C:91:A2:65:5E:71:1E:B1:54:B8:5E:6F:8E:CE:23:53
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912E5AE/33F74DDC3DCC11EF89B5B073C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912E5AE/33F74DDC3DCC11EF89B5B073C4F9AE02/if6Hw1yRomVecR6xVLheb47OI1M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132392
sbgp-ipAddrBlock: critical
IPv4:
103.20.18.0/23
IPv6:
2001:df0:402::/48
Signature Algorithm: sha256WithRSAEncryption
7b:20:73:65:3d:34:48:d1:ef:06:8c:54:9b:f3:ac:5b:2d:f3:
30:2f:b7:be:de:4e:b5:09:4e:8c:16:41:c6:9e:8c:39:b3:c1:
b0:c5:33:bd:a8:ed:97:b7:b2:0c:d4:da:fa:13:1a:35:50:f3:
44:66:91:ce:0c:cf:e8:62:bd:db:a8:95:b7:fc:af:79:cc:b0:
84:81:06:ac:4e:4e:53:dd:05:bd:63:42:ae:1e:54:45:a4:f1:
14:80:36:72:c6:6b:91:6f:91:52:7c:63:c1:04:07:bd:88:77:
cc:3a:55:57:75:fb:68:f7:a7:c2:09:c4:fd:8d:c6:81:33:21:
72:4f:a7:f4:b8:99:5e:f7:9e:91:05:4c:11:30:b6:b2:06:67:
d8:42:1a:bd:7f:32:17:42:a6:03:63:39:4d:70:bb:96:8b:d9:
2f:c6:c5:83:f0:ec:31:9e:f7:be:58:29:07:35:db:84:73:15:
d4:96:42:e6:3b:bb:71:6b:99:4c:e7:2c:ee:74:a8:0b:7e:a1:
c9:76:8b:71:f8:ae:67:96:c4:85:2d:d7:5e:11:3d:b9:83:97:
0a:6c:d3:0e:46:2c:84:80:f9:1d:9b:47:25:4e:c0:d5:ca:8b:
f6:ca:08:57:ed:e8:3a:f4:79:7c:bd:dd:aa:e3:1b:b6:94:87:
05:ab:03:d6
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAhK2MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MTAwODEzNDIyN1oXDTI1MTIwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMkU1QUUxMTAvBgNVBAUTKDg5RkU4N0MzNUM5MUEyNjU1RTcxMUVC
MTU0Qjg1RTZGOEVDRTIzNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC0po0UfLyly2C/L9hedMAKY0hnH2/Fx64h59/RfsVKVbbAxzgH2Gv4A48Mq6QQ
i5VtUz2v8pszkIRfP+Ot9dPoXnHDkfWWpNDU5THsZ1lWMJMDncKAN4me7Itv1X5B
t8WpVJEdNaagMgw8vxzdnnQCtAvfNLXriUX5knQLcSjVbb0cjyysMv81KdY2I3jl
0x3/60ysj+XKyT0KCcH2TYwvzkgqQs3NG0XcJzr8Qs3QICiXld1KE2p8ttJqYTze
8LLcZNeNaG90uhiJ7uVo0LbRsCZizpeB9nIWo7BFm05zZQJDeUkOgAYp0fh8HinJ
0ObGZnIKH718mWGDWm6RF93zAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUif6Hw1yR
omVecR6xVLheb47OI1MwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTJFNUFFLzMzRjc0RERDM0RDQzExRUY4OUI1QjA3M0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEyRTVBRS8zM0Y3NEREQzNEQ0MxMUVGODlCNUIwNzNDNEY5QUUwMi9pZjZIdzF5
Um9tVmVjUjZ4VkxoZWI0N09JMU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAgUoMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZxQSMA8EAgAC
MAkDBwAgAQ3wBAIwDQYJKoZIhvcNAQELBQADggEBAHsgc2U9NEjR7waMVJvzrFst
8zAvt77eTrUJTowWQcaejDmzwbDFM72o7Ze3sgzU2voTGjVQ80Rmkc4Mz+hivduo
lbf8r3nMsISBBqxOTlPdBb1jQq4eVEWk8RSANnLGa5FvkVJ8Y8EEB72Id8w6VVd1
+2j3p8IJxP2NxoEzIXJPp/S4mV73npEFTBEwtrIGZ9hCGr1/MhdCpgNjOU1wu5aL
2S/GxYPw7DGe975YKQc124RzFdSWQuY7u3FrmUznLO50qAt+ocl2i3H4rmeWxIUt
114RPbmDlwps0w5GLISA+R2bRyVOwNXKi/bKCFft6Dr0eXy93arjG7aUhwWrA9Y=
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:01 2024 by rpki-client on console-fra.rpki-client.org