Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gEnQNykk8ziA6-q3o68cZqsI7Q.cer
File: -gEnQNykk8ziA6-q3o68cZqsI7Q.cer (raw, json)
Hash identifier: U5QtftXlT0kraMweJ6LXh4n2AWpBc8n9NkLAQWYo8j4=
Subject key identifier: FA:01:27:40:DC:A4:93:CC:E2:03:AF:AA:DE:8E:BC:71:9A:AC:23:B4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01A8A7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 06 Jun 2023 23:52:45 +0000
Certificate not after: Tue 30 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 135327
AS: 151328
IP: 103.197.104.0/23
IP: 2400:fe20::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 May 2024 07:49:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108711 (0x1a8a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 6 23:52:45 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=A91AF404/serialNumber=FA012740DCA493CCE203AFAADE8EBC719AAC23B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:44:a7:c4:ac:3d:c8:4d:02:d2:04:56:4d:03:
1a:5f:d0:e8:23:b2:78:00:4d:9c:26:77:04:67:9c:
08:52:4a:d0:d5:99:08:82:c8:d6:e1:e1:58:fa:ac:
87:d7:f5:73:de:8e:5a:49:25:fd:21:53:4c:39:7b:
5c:72:05:6c:42:c6:ee:76:9b:c8:9e:7f:42:8e:3e:
30:9a:30:59:b9:ee:f5:f8:08:1f:e7:1a:e4:c7:e8:
d8:e8:05:3a:b2:7a:48:da:48:95:95:f4:cc:e7:da:
d3:76:25:1a:e8:98:1d:55:67:3a:4c:d7:97:f7:17:
8a:c5:a5:5d:17:bb:09:fd:2a:34:a4:af:c7:7a:4a:
01:48:eb:8e:65:27:de:14:41:53:2f:23:dd:78:eb:
5d:e1:e8:47:f4:ca:1f:8d:83:fe:91:75:35:eb:6b:
e3:31:36:bc:49:e2:8e:b6:ad:3a:5e:43:3d:cc:ae:
dc:dc:c1:66:34:b6:d4:d3:58:81:2a:21:22:d4:43:
a2:4c:9b:90:b2:b0:f6:e8:63:70:1b:52:d7:01:f1:
d8:d7:61:01:d6:af:52:02:39:e7:43:ec:07:76:33:
6f:88:9f:08:c4:b9:0c:65:97:76:aa:41:67:11:cc:
ce:5f:84:16:3b:6c:b1:ef:fd:b6:ee:7f:42:41:8c:
75:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:01:27:40:DC:A4:93:CC:E2:03:AF:AA:DE:8E:BC:71:9A:AC:23:B4
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
135327
151328
sbgp-ipAddrBlock: critical
IPv4:
103.197.104.0/23
IPv6:
2400:fe20::/32
Signature Algorithm: sha256WithRSAEncryption
25:e1:01:98:08:2a:8d:a4:2b:7b:5a:02:e7:31:15:c6:d0:ad:
63:00:30:13:c0:4e:d9:3c:02:db:62:10:40:bd:7c:f8:63:6d:
b8:1f:a7:f5:c8:0c:77:fb:a2:29:1b:d0:fb:2b:a6:a1:63:22:
bf:8f:40:ab:4c:58:29:fe:75:53:3d:d3:5b:82:52:4c:b6:b3:
2b:13:b7:07:e3:dd:14:79:34:44:82:6f:62:47:03:d9:9c:de:
83:85:ba:32:75:72:82:55:ea:9c:cd:a5:85:3c:79:89:06:93:
ec:8d:41:7b:13:9d:10:91:bb:da:45:ac:fc:42:e2:e5:ff:19:
87:1c:35:c1:79:f0:a1:09:81:49:7b:01:74:10:06:ae:76:05:
f0:2c:0d:2d:4d:75:51:a5:2d:52:b8:c5:73:8e:ff:c2:d2:54:
d0:4d:f6:43:6f:4c:06:38:ca:88:76:17:fa:d4:37:3c:aa:8f:
b2:3e:b9:7d:5a:18:af:00:9b:55:a6:83:03:0a:b9:57:9d:65:
20:7b:49:fc:b7:72:f6:df:5d:f7:06:19:a7:a2:3d:b5:13:e4:
04:db:19:6d:4b:d1:c5:e7:7c:5b:34:8d:44:c9:73:c4:13:c7:
d1:e7:1d:2e:cc:6d:75:4e:cc:03:86:f5:30:24:26:e3:09:c8:
f2:4f:ba:64
-----BEGIN CERTIFICATE-----
MIIGLjCCBRagAwIBAgIDAainMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMDYwNjIzNTI0NVoXDTI0MDczMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQUY0MDQxMTAvBgNVBAUTKEZBMDEyNzQwRENBNDkzQ0NFMjAzQUZB
QURFOEVCQzcxOUFBQzIzQjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDARKfErD3ITQLSBFZNAxpf0OgjsngATZwmdwRnnAhSStDVmQiCyNbh4Vj6rIfX
9XPejlpJJf0hU0w5e1xyBWxCxu52m8ief0KOPjCaMFm57vX4CB/nGuTH6NjoBTqy
ekjaSJWV9Mzn2tN2JRromB1VZzpM15f3F4rFpV0Xuwn9KjSkr8d6SgFI645lJ94U
QVMvI914613h6Ef0yh+Ng/6RdTXra+MxNrxJ4o62rTpeQz3MrtzcwWY0ttTTWIEq
ISLUQ6JMm5CysPboY3AbUtcB8djXYQHWr1ICOedD7Ad2M2+InwjEuQxll3aqQWcR
zM5fhBY7bLHv/bbuf0JBjHURAgMBAAGjggMjMIIDHzAdBgNVHQ4EFgQU+gEnQNyk
k8ziA6+q3o68cZqsI7QwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUFGNDA0LzU0NDA4MUQyRjREODExRUQ5ODA0NkM0QUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFBRjQwNC81NDQwODFEMkY0RDgxMUVEOTgwNDZDNEFDNEY5QUUwMi8tZ0VuUU55
a2s4emlBNi1xM282OGNacXNJN1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO
oAwwCgIDAhCfAgMCTyAwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAFnxWgw
DQQCAAIwBwMFACQA/iAwDQYJKoZIhvcNAQELBQADggEBACXhAZgIKo2kK3taAucx
FcbQrWMAMBPATtk8AttiEEC9fPhjbbgfp/XIDHf7oikb0PsrpqFjIr+PQKtMWCn+
dVM901uCUky2sysTtwfj3RR5NESCb2JHA9mc3oOFujJ1coJV6pzNpYU8eYkGk+yN
QXsTnRCRu9pFrPxC4uX/GYccNcF58KEJgUl7AXQQBq52BfAsDS1NdVGlLVK4xXOO
/8LSVNBN9kNvTAY4yoh2F/rUNzyqj7I+uX1aGK8Am1WmgwMKuVedZSB7Sfy3cvbf
XfcGGaeiPbUT5ATbGW1L0cXnfFs0jUTJc8QTx9HnHS7MbXVOzAOG9TAkJuMJyPJP
umQ=
-----END CERTIFICATE-----
Generated at Fri Apr 26 11:02:39 2024 by rpki-client on console-ams.rpki-client.org