Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer
File: -XxrnwabbALLPY6tWvc-UGwIyjg.cer (raw, json)
Hash identifier: bZWefONuHRnzJANH2Yt31JbwOAMzEsgY7WghsG29RL4=
Subject key identifier: F9:7C:6B:9F:06:9B:6C:02:CB:3D:8E:AD:5A:F7:3E:50:6C:08:CA:38
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01C53A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 20 Oct 2023 14:40:55 +0000
Certificate not after: Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources: AS: 141210
IP: 103.173.188.0/23
IP: 2001:df7:a780::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 May 2024 04:27:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116026 (0x1c53a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 20 14:40:55 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=A914DB69/serialNumber=F97C6B9F069B6C02CB3D8EAD5AF73E506C08CA38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:33:eb:9e:5c:3e:dc:48:00:76:d6:4e:e4:24:
98:6d:c3:57:17:fa:35:91:a2:f5:ff:72:57:22:41:
53:36:6e:21:ef:83:15:7d:fe:6f:80:91:71:b5:5c:
98:29:72:ce:c6:3e:3f:7c:25:2c:a7:42:7d:83:0d:
1e:65:71:47:d3:9a:8a:25:7b:58:58:e6:07:8f:58:
13:55:6e:f0:14:e8:4b:68:0f:2a:73:ce:6a:37:aa:
fa:53:f1:dd:f4:c3:93:e0:a4:78:98:28:7e:ed:e9:
00:8a:33:9e:c3:2c:06:10:8e:3f:a5:09:8b:63:7e:
55:1b:d1:2b:70:ff:31:58:58:18:bd:a3:9c:5f:75:
c3:db:37:b0:99:b6:1d:d2:d4:5a:ec:e2:9f:06:b1:
5e:65:dd:80:cb:09:76:7e:0a:bc:44:61:07:71:8a:
f2:68:0e:eb:03:6b:91:16:a1:2a:c3:f6:2d:6f:c3:
a3:fa:e4:90:17:6e:4b:ee:d2:3b:c7:1f:4e:24:ab:
c3:c2:3a:a2:ab:78:4e:50:b4:af:7e:e5:ba:a8:e1:
dd:77:bc:7a:1a:20:b3:b2:92:cc:38:85:64:11:4e:
d0:de:49:0c:c7:62:81:36:3f:44:03:f9:b6:9c:07:
66:4e:3e:fa:8d:89:d6:63:1f:18:bf:04:eb:28:1c:
80:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:7C:6B:9F:06:9B:6C:02:CB:3D:8E:AD:5A:F7:3E:50:6C:08:CA:38
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
141210
sbgp-ipAddrBlock: critical
IPv4:
103.173.188.0/23
IPv6:
2001:df7:a780::/48
Signature Algorithm: sha256WithRSAEncryption
34:53:31:0a:10:de:fa:96:06:84:f8:a1:0d:e1:5a:dc:99:78:
a3:7c:c7:99:38:33:2d:c0:aa:9d:64:4c:11:65:f4:76:d9:ec:
f7:1b:8c:d4:59:09:a7:25:57:af:7f:e4:4b:a1:2a:70:56:51:
5d:21:52:c7:da:ae:41:59:b9:21:cc:4b:38:1f:02:6b:e9:ca:
d1:fe:54:36:12:a8:68:c5:c5:12:04:83:ae:2b:45:8a:3f:0d:
89:c0:1a:61:ab:cb:fb:78:b2:9b:a4:82:e0:a9:16:74:5f:8a:
4c:0e:1d:e4:ce:71:7f:65:fe:38:4a:a6:35:2c:59:85:be:45:
40:ce:35:93:2a:22:35:39:8c:a5:28:28:a2:4c:f4:c5:d0:81:
03:e2:79:48:27:6f:bd:66:04:8c:e2:29:1b:7a:2c:85:01:d0:
10:68:0b:b7:f6:4f:7a:06:a1:28:b5:b1:e0:c3:a6:d6:c8:2e:
f7:84:3d:1d:89:15:51:1d:19:3b:0d:11:b3:42:7e:04:f3:6e:
5d:79:00:8c:1e:43:ea:41:3f:9e:74:db:88:d9:14:09:8a:49:
6f:39:77:60:26:11:84:64:6a:20:4e:be:63:1c:e0:a0:b1:18:
92:1a:f1:96:ad:04:fe:5b:fb:80:29:cc:c9:3b:a3:33:36:de:
5e:60:90:d1
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAcU6MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMTAyMDE0NDA1NVoXDTI0MTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNERCNjkxMTAvBgNVBAUTKEY5N0M2QjlGMDY5QjZDMDJDQjNEOEVB
RDVBRjczRTUwNkMwOENBMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC+M+ueXD7cSAB21k7kJJhtw1cX+jWRovX/clciQVM2biHvgxV9/m+AkXG1XJgp
cs7GPj98JSynQn2DDR5lcUfTmoole1hY5gePWBNVbvAU6EtoDypzzmo3qvpT8d30
w5PgpHiYKH7t6QCKM57DLAYQjj+lCYtjflUb0Stw/zFYWBi9o5xfdcPbN7CZth3S
1Frs4p8GsV5l3YDLCXZ+CrxEYQdxivJoDusDa5EWoSrD9i1vw6P65JAXbkvu0jvH
H04kq8PCOqKreE5QtK9+5bqo4d13vHoaILOyksw4hWQRTtDeSQzHYoE2P0QD+bac
B2ZOPvqNidZjHxi/BOsoHIAVAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQU+Xxrnwab
bALLPY6tWvc+UGwIyjgwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTREQjY5L0RBODYwQ0M4NkU1QzExRUU5QzAxMzM2MUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE0REI2OS9EQTg2MENDODZFNUMxMUVFOUMwMTMzNjFDNEY5QUUwMi8tWHhybndh
YmJBTExQWTZ0V3ZjLVVHd0l5amcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAieaMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ628MA8EAgAC
MAkDBwAgAQ33p4AwDQYJKoZIhvcNAQELBQADggEBADRTMQoQ3vqWBoT4oQ3hWtyZ
eKN8x5k4My3Aqp1kTBFl9HbZ7PcbjNRZCaclV69/5EuhKnBWUV0hUsfarkFZuSHM
SzgfAmvpytH+VDYSqGjFxRIEg64rRYo/DYnAGmGry/t4spukguCpFnRfikwOHeTO
cX9l/jhKpjUsWYW+RUDONZMqIjU5jKUoKKJM9MXQgQPieUgnb71mBIziKRt6LIUB
0BBoC7f2T3oGoSi1seDDptbILveEPR2JFVEdGTsNEbNCfgTzbl15AIweQ+pBP550
24jZFAmKSW85d2AmEYRkaiBOvmMc4KCxGJIa8ZatBP5b+4ApzMk7ozM23l5gkNE=
-----END CERTIFICATE-----
Generated at Thu May 2 05:27:25 2024 by rpki-client on console-fra.rpki-client.org