Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6D4tMTQWqlqqvV6OUQDcbyNBDc.cer
File: -6D4tMTQWqlqqvV6OUQDcbyNBDc.cer (raw, json)
Hash identifier: agtA3SkiwuyRWv0i4rBdarAd7tGGG1FSU6jEOHOE3e0=
Subject key identifier: FB:A0:F8:B4:C4:D0:5A:A9:6A:AA:F5:7A:39:44:03:71:BC:8D:04:37
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E5A5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 20 Mar 2024 20:45:52 +0000
Certificate not after: Wed 28 May 2025 00:00:00 +0000
Subordinate resources: AS: 137481
IP: 103.110.52.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Apr 2024 23:35:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124325 (0x1e5a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 20 20:45:52 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=A91F9ECA/serialNumber=FBA0F8B4C4D05AA96AAAF57A39440371BC8D0437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a4:8a:a4:39:cf:7d:cb:09:b4:8e:ad:8d:33:
49:5c:96:1c:fe:b6:94:d6:eb:12:24:7d:af:88:04:
30:b8:ec:d8:2a:9d:f2:ca:5e:d7:da:eb:08:70:99:
d3:7f:94:66:50:c6:53:d2:24:8b:76:ec:72:4d:0f:
09:9c:12:66:fe:d9:61:d7:e1:06:eb:ff:f5:05:90:
42:02:ab:94:a0:d6:3f:9e:25:33:35:5a:fa:5a:7e:
03:b5:4b:48:28:37:82:22:dc:9c:25:2a:3b:b8:d9:
e0:a7:41:4c:74:98:0b:64:6d:68:e5:a2:d8:30:5e:
4e:5a:46:c5:77:84:64:63:07:84:97:1f:a2:3a:85:
d9:99:29:58:14:e2:cb:59:82:c8:21:ef:6e:0d:3f:
aa:82:06:cd:f5:47:8d:43:49:bc:5d:00:d6:8f:f7:
2e:48:a4:f5:95:09:35:fe:72:af:d0:69:50:22:91:
64:a1:41:2e:cc:89:9f:35:6b:17:26:bc:fd:22:c2:
ac:cd:e9:63:8d:7a:89:4b:dc:ca:e7:0e:d7:85:a1:
ef:ee:2c:a6:b2:89:97:2e:fe:7e:0c:9d:8a:b9:11:
8d:36:28:4c:6c:f0:6a:de:93:7b:e9:af:c1:d2:8f:
4f:e9:b7:89:73:5c:34:be:03:49:00:0d:d6:8f:fa:
d1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A0:F8:B4:C4:D0:5A:A9:6A:AA:F5:7A:39:44:03:71:BC:8D:04:37
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137481
sbgp-ipAddrBlock: critical
IPv4:
103.110.52.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:44:45:4e:a7:1f:d3:fa:b4:2f:88:f0:1b:84:8f:bc:e1:4b:
b4:3c:b9:88:67:d0:1e:19:18:c6:44:f9:01:14:c3:11:99:3a:
ec:24:dc:d1:76:a3:04:7e:08:c9:c5:c2:40:68:94:9a:75:f0:
8c:bc:cc:95:32:a3:94:10:04:42:7f:6e:64:fd:c6:23:e6:3b:
b6:37:69:34:48:ee:06:ae:b4:00:a1:34:f2:52:3b:46:8a:72:
02:d6:fa:45:08:a5:bd:d9:e3:bb:c0:62:c1:d0:20:a5:f5:fe:
81:67:1f:6d:a1:4e:9b:61:5b:f6:98:30:37:8f:20:ef:58:22:
db:cc:d7:88:50:53:cc:22:7a:f4:90:70:90:2d:f3:aa:cd:22:
a4:9d:ca:9a:58:92:52:17:ae:a0:70:a7:17:22:7d:9e:b1:b8:
d7:24:cd:f4:ac:03:e5:96:af:a0:39:54:b0:50:ef:1e:80:4f:
e3:9d:25:de:88:c7:c5:ce:3d:f9:8d:a7:d7:ae:f7:88:3f:a0:
bd:3f:4d:6e:dc:df:8d:25:9c:98:0b:4c:b6:d8:c4:ca:76:5d:
9d:78:c0:bd:95:fc:07:7c:4c:f0:7b:e1:23:1e:95:ab:1a:6c:
9c:b5:0b:2e:ed:96:83:ad:bd:74:2b:a8:2d:43:65:3b:ad:cf:
45:7f:3a:ad
-----BEGIN CERTIFICATE-----
MIIGGjCCBQKgAwIBAgIDAeWlMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDMyMDIwNDU1MloXDTI1MDUyODAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRjlFQ0ExMTAvBgNVBAUTKEZCQTBGOEI0QzREMDVBQTk2QUFBRjU3
QTM5NDQwMzcxQkM4RDA0MzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDdpIqkOc99ywm0jq2NM0lclhz+tpTW6xIkfa+IBDC47NgqnfLKXtfa6whwmdN/
lGZQxlPSJIt27HJNDwmcEmb+2WHX4Qbr//UFkEICq5Sg1j+eJTM1WvpafgO1S0go
N4Ii3JwlKju42eCnQUx0mAtkbWjlotgwXk5aRsV3hGRjB4SXH6I6hdmZKVgU4stZ
gsgh724NP6qCBs31R41DSbxdANaP9y5IpPWVCTX+cq/QaVAikWShQS7MiZ81axcm
vP0iwqzN6WONeolL3MrnDteFoe/uLKayiZcu/n4MnYq5EY02KExs8Grek3vpr8HS
j0/pt4lzXDS+A0kADdaP+tE7AgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQU+6D4tMTQ
WqlqqvV6OUQDcbyNBDcwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUY5RUNBL0UxRUNFMEEyRjkwMzExRUJCMDdBMDM3QUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFGOUVDQS9FMUVDRTBBMkY5MDMxMUVCQjA3QTAzN0FDNEY5QUUwMi8tNkQ0dE1U
UVdxbHFxdlY2T1VRRGNieU5CRGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhkJMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ240MA0GCSqG
SIb3DQEBCwUAA4IBAQDJREVOpx/T+rQviPAbhI+84Uu0PLmIZ9AeGRjGRPkBFMMR
mTrsJNzRdqMEfgjJxcJAaJSadfCMvMyVMqOUEARCf25k/cYj5ju2N2k0SO4GrrQA
oTTyUjtGinIC1vpFCKW92eO7wGLB0CCl9f6BZx9toU6bYVv2mDA3jyDvWCLbzNeI
UFPMInr0kHCQLfOqzSKkncqaWJJSF66gcKcXIn2esbjXJM30rAPllq+gOVSwUO8e
gE/jnSXeiMfFzj35jafXrveIP6C9P01u3N+NJZyYC0y22MTKdl2deMC9lfwHfEzw
e+EjHpWrGmyctQsu7ZaDrb10K6gtQ2U7rc9Ffzqt
-----END CERTIFICATE-----
Generated at Sat Apr 20 01:02:43 2024 by rpki-client on console-fra.rpki-client.org