Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer
File: kSlbu3W_quuVMbObNux1Id3jDWM.cer (raw, json)
Hash identifier: /4YFO69vTIwLYEAoiWfDil+bMb47HfoLyyf8G6T4zPU=
Subject key identifier: 91:29:5B:BB:75:BF:AA:EB:95:31:B3:9B:36:EC:75:21:DD:E3:0D:63
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02243F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 23 Dec 2024 05:54:51 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 139601
IP: 103.96.80.0/22
IP: 103.131.130.0/23
IP: 103.141.235.0/24
IP: 103.142.167.0/24
IP: 103.144.51.0/24
IP: 103.199.98.0/23
IP: 2401:3a60::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Apr 2025 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140351 (0x2243f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 23 05:54:51 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A911D9B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:db:e9:5d:17:4a:06:4e:5f:a2:6f:1c:54:8c:
f7:97:d3:66:ab:5a:c1:b4:61:30:32:e0:e0:46:31:
6d:0a:bf:e7:ce:4d:d2:46:bd:b1:95:9d:4f:4c:4d:
47:29:93:be:4c:8e:93:68:10:24:76:16:21:cd:c9:
d3:b6:d1:4f:70:3c:6b:15:fe:98:7c:62:b5:f6:e3:
64:4e:41:3e:5c:5b:f9:db:33:b1:6e:8f:2d:be:e4:
8a:3d:c6:1d:ce:3d:52:1c:de:7e:b8:c4:9a:cc:d4:
ff:48:34:bf:31:c3:26:9c:73:e6:69:cc:22:48:cf:
fc:77:35:e5:a1:d2:77:31:c2:fa:4d:47:98:5e:f5:
d4:4d:20:51:82:b8:a8:95:ee:2c:2b:87:01:79:4e:
81:7b:ab:81:08:31:ae:ab:1e:6d:59:07:62:42:f0:
5e:d1:f2:91:2f:fd:36:77:c9:c4:03:a7:9a:88:56:
8b:4b:05:1d:08:37:50:aa:24:b6:73:97:d5:54:23:
c5:48:b0:08:ff:51:d4:2d:3b:d2:91:2a:56:21:09:
27:65:38:8b:b5:ed:cd:06:21:50:ba:a0:ab:56:b0:
58:84:77:9f:cf:f3:f6:0e:72:86:76:2b:6c:bb:5e:
6f:64:3e:2b:0f:ad:f6:01:e6:e3:14:ae:63:67:c8:
99:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:29:5B:BB:75:BF:AA:EB:95:31:B3:9B:36:EC:75:21:DD:E3:0D:63
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139601
sbgp-ipAddrBlock: critical
IPv4:
103.96.80.0/22
103.131.130.0/23
103.141.235.0/24
103.142.167.0/24
103.144.51.0/24
103.199.98.0/23
IPv6:
2401:3a60::/32
Signature Algorithm: sha256WithRSAEncryption
97:b1:8e:6b:18:af:27:44:10:7c:31:7a:2f:86:26:d9:86:55:
ad:7d:2a:cd:aa:00:08:42:c7:58:47:8c:17:f1:3a:c9:85:18:
0d:c7:21:11:e1:04:0f:c4:a1:c9:ed:55:56:f4:50:47:f2:98:
87:ec:04:cb:67:bd:0b:d6:87:15:0c:7e:de:ec:91:05:26:83:
b4:49:32:6f:c2:69:e5:30:1e:ed:cf:e1:67:2e:36:92:7c:5e:
da:d8:61:60:ac:2a:4e:bd:35:e2:89:b1:61:c3:f4:cd:c7:74:
94:b0:c9:31:ef:47:ba:b9:ff:aa:11:61:dc:1c:77:dd:e1:7c:
c8:a8:54:a6:c5:5a:39:a7:20:fe:a7:50:87:42:20:2c:09:cf:
ed:43:2e:12:c5:f6:82:5b:ef:2e:87:db:3c:b5:11:4f:f5:45:
70:92:47:b9:c4:cf:7a:bb:b4:dd:79:4d:0b:b3:f7:18:a4:9c:
76:dc:7f:1f:59:d4:d1:3a:17:72:cc:41:ab:a3:4b:55:ab:ff:
23:b8:4e:f6:2b:0f:7f:65:01:f9:f7:a5:ff:f9:17:9c:ef:f5:
ea:16:da:90:53:dc:a5:90:a8:6e:04:39:a9:c1:78:76:8c:27:
fb:6d:34:1e:d3:72:08:b9:f4:8b:91:03:2e:20:27:dc:7e:89:
12:e7:61:e3
-----BEGIN CERTIFICATE-----
MIIGRzCCBS+gAwIBAgIDAiQ/MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MTIyMzA1NTQ1MVoXDTI1MTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMUQ5QjIxMTAvBgNVBAUTKDkxMjk1QkJCNzVCRkFBRUI5NTMxQjM5
QjM2RUM3NTIxRERFMzBENjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDO2+ldF0oGTl+ibxxUjPeX02arWsG0YTAy4OBGMW0Kv+fOTdJGvbGVnU9MTUcp
k75MjpNoECR2FiHNydO20U9wPGsV/ph8YrX242ROQT5cW/nbM7Fujy2+5Io9xh3O
PVIc3n64xJrM1P9INL8xwyacc+ZpzCJIz/x3NeWh0ncxwvpNR5he9dRNIFGCuKiV
7iwrhwF5ToF7q4EIMa6rHm1ZB2JC8F7R8pEv/TZ3ycQDp5qIVotLBR0IN1CqJLZz
l9VUI8VIsAj/UdQtO9KRKlYhCSdlOIu17c0GIVC6oKtWsFiEd5/P8/YOcoZ2K2y7
Xm9kPisPrfYB5uMUrmNnyJkzAgMBAAGjggM8MIIDODAdBgNVHQ4EFgQUkSlbu3W/
quuVMbObNux1Id3jDWMwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTFEOUIyLzBBNkYzQjQyOTE1NTExRUVBNEMwRjY2OEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTExRDlCMi8wQTZGM0I0MjkxNTUxMUVFQTRDMEY2NjhDNEY5QUUwMi9rU2xidTNX
X3F1dVZNYk9iTnV4MUlkM2pEV00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAiFRMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQCZ2BQAwQBZ4OC
AwQAZ43rAwQAZ46nAwQAZ5AzAwQBZ8diMA0EAgACMAcDBQAkATpgMA0GCSqGSIb3
DQEBCwUAA4IBAQCXsY5rGK8nRBB8MXovhibZhlWtfSrNqgAIQsdYR4wX8TrJhRgN
xyER4QQPxKHJ7VVW9FBH8piH7ATLZ70L1ocVDH7e7JEFJoO0STJvwmnlMB7tz+Fn
LjaSfF7a2GFgrCpOvTXiibFhw/TNx3SUsMkx70e6uf+qEWHcHHfd4XzIqFSmxVo5
pyD+p1CHQiAsCc/tQy4SxfaCW+8uh9s8tRFP9UVwkke5xM96u7TdeU0Ls/cYpJx2
3H8fWdTROhdyzEGro0tVq/8juE72Kw9/ZQH596X/+Rec7/XqFtqQU9ylkKhuBDmp
wXh2jCf7bTQe03IIufSLkQMuICfcfokS52Hj
-----END CERTIFICATE-----
Generated at Sat Apr 5 05:27:28 2025 by rpki-client