Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0SSGB7Dd0KIW6Nf6xeLC53cKETk.cer
File: 0SSGB7Dd0KIW6Nf6xeLC53cKETk.cer (raw, json)
Hash identifier: WEX1SRikjGkugtZRmuy6GSE/pSdb9+/atCK3NrqPqwA=
Subject key identifier: D1:24:86:07:B0:DD:D0:A2:16:E8:D7:FA:C5:E2:C2:E7:77:0A:11:39
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01F423
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.cernet.edu.cn/repo/cernet/1/D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139.mft
caRepository: rsync://rpki.cernet.edu.cn/repo/cernet/1/
Notify URL: https://rpki.cernet.edu.cn/rrdp/notification.xml
Certificate not before: Tue 28 May 2024 09:08:19 +0000
Certificate not after: Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources: AS: 144699
IP: 103.165.110.0/23
IP: 240a:a801::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Sep 2024 20:15:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128035 (0x1f423)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 28 09:08:19 2024 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=A91E5D610000/serialNumber=D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:19:8c:21:32:e5:12:99:ef:d3:39:59:8a:ab:
71:99:75:c1:5e:32:d5:8a:44:1d:6e:2b:c0:f6:b9:
07:1f:4c:46:d1:de:e4:a0:3f:0b:5e:9e:c8:99:7a:
7f:48:e4:33:9d:83:61:bb:f0:95:8a:2b:fa:84:84:
c1:71:6f:4d:3c:0c:49:da:d5:54:1f:fa:6e:b6:fe:
14:69:10:d0:8e:63:ae:d0:45:c0:e7:89:ae:a5:90:
3b:ac:30:3b:7c:c6:e1:3d:9f:a0:cc:c0:f4:df:6c:
a3:5d:cb:62:0b:e8:95:75:3b:c2:62:09:fa:8a:1c:
b5:e8:c0:02:be:5a:86:22:e7:20:3c:32:14:7b:f0:
a6:47:b9:17:fc:ed:d1:34:9b:b9:c4:c2:e9:62:7a:
a1:da:c4:ad:d9:3e:ee:d8:4f:8f:cb:12:fa:aa:cc:
e1:2f:f0:60:e6:a1:ce:e2:32:25:eb:41:72:71:10:
4b:a1:c5:00:dd:b9:9b:13:fd:cf:f8:57:d8:66:94:
d8:1c:a3:f6:30:cd:96:8a:7c:14:c5:0e:61:01:c5:
fe:19:30:36:fc:11:55:8c:81:c6:72:b7:0c:11:d8:
87:f7:35:cd:1f:e0:f7:74:31:0e:11:be:05:e4:a3:
b9:f7:a1:17:00:94:2a:d7:8e:7c:ea:a3:11:4a:ef:
07:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:24:86:07:B0:DD:D0:A2:16:E8:D7:FA:C5:E2:C2:E7:77:0A:11:39
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.cernet.edu.cn/repo/cernet/1/
RPKI Manifest - URI:rsync://rpki.cernet.edu.cn/repo/cernet/1/D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139.mft
RPKI Notify - URI:https://rpki.cernet.edu.cn/rrdp/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
144699
sbgp-ipAddrBlock: critical
IPv4:
103.165.110.0/23
IPv6:
240a:a801::/32
Signature Algorithm: sha256WithRSAEncryption
cd:7e:dd:6b:c0:fa:ad:48:cb:af:d7:80:52:0c:3e:e2:b3:87:
ab:e9:5e:59:1b:e9:41:c7:9f:99:29:64:44:ac:45:57:43:dd:
62:0d:24:c2:79:c9:fc:79:af:c5:cc:4e:d5:06:93:8f:02:20:
d6:89:6e:45:5c:eb:96:83:d9:76:be:40:10:75:0c:29:8a:60:
36:79:00:91:fa:10:0c:b3:ac:66:89:5d:ca:5d:50:22:ed:fc:
c1:c5:15:d7:77:05:96:fd:f1:e0:75:7c:ab:fd:79:a3:53:40:
e8:ce:82:4e:11:05:00:d0:dc:a9:19:92:40:28:09:b5:91:9d:
de:3a:1c:84:c1:0f:7f:c9:67:c0:c1:fe:4b:fc:74:77:e2:60:
a3:e0:59:5f:b1:82:28:3e:3b:10:cc:da:e3:11:55:e5:ca:a3:
4a:fe:3c:6e:aa:98:68:6c:c0:e2:1a:43:7c:52:68:6f:3f:0e:
5d:db:78:30:70:85:a3:22:ab:b1:02:31:d4:3b:85:7e:25:59:
21:51:30:72:ed:ea:6b:d5:15:f7:e8:6e:41:21:2e:f7:8e:e9:
ab:45:42:74:e5:c6:87:a1:76:9f:29:87:65:83:05:12:77:ce:
b4:5a:59:3e:96:1e:39:3d:88:4f:ef:63:c9:23:7f:d2:77:d6:
43:69:4b:d0
-----BEGIN CERTIFICATE-----
MIIF7DCCBNSgAwIBAgIDAfQjMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDUyODA5MDgxOVoXDTI0MDkzMDAwMDAwMFowSjEVMBMG
A1UEAxMMQTkxRTVENjEwMDAwMTEwLwYDVQQFEyhEMTI0ODYwN0IwREREMEEyMTZF
OEQ3RkFDNUUyQzJFNzc3MEExMTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArhmMITLlEpnv0zlZiqtxmXXBXjLVikQdbivA9rkHH0xG0d7koD8LXp7I
mXp/SOQznYNhu/CViiv6hITBcW9NPAxJ2tVUH/putv4UaRDQjmOu0EXA54mupZA7
rDA7fMbhPZ+gzMD032yjXctiC+iVdTvCYgn6ihy16MACvlqGIucgPDIUe/CmR7kX
/O3RNJu5xMLpYnqh2sSt2T7u2E+PyxL6qszhL/Bg5qHO4jIl60FycRBLocUA3bmb
E/3P+FfYZpTYHKP2MM2WinwUxQ5hAcX+GTA2/BFVjIHGcrcMEdiH9zXNH+D3dDEO
Eb4F5KO596EXAJQq14586qMRSu8HWwIDAQABo4IC3TCCAtkwHQYDVR0OBBYEFNEk
hgew3dCiFujX+sXiwud3ChE5MB8GA1UdIwQYMBaAFA5lpPX9NrW9aOs8kjQIl4yQ
eqefMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MHMGA1UdHwRsMGow
aKBmoGSGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1
ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9EbVdrOWYwMnRiMW82enlTTkFpWGpK
QjZwNTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5Lzk4MDY1MkUwQjc3RTExRTdBOTZBMzk1
MjFBNEY0RkI0L0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1OC5jZXIwSgYDVR0g
AQH/BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5h
cG5pYy5uZXQvUlBLSS9DUFMucGRmMIHoBggrBgEFBQcBCwSB2zCB2DA1BggrBgEF
BQcwBYYpcnN5bmM6Ly9ycGtpLmNlcm5ldC5lZHUuY24vcmVwby9jZXJuZXQvMS8w
YQYIKwYBBQUHMAqGVXJzeW5jOi8vcnBraS5jZXJuZXQuZWR1LmNuL3JlcG8vY2Vy
bmV0LzEvRDEyNDg2MDdCMERERDBBMjE2RThEN0ZBQzVFMkMyRTc3NzBBMTEzOS5t
ZnQwPAYIKwYBBQUHMA2GMGh0dHBzOi8vcnBraS5jZXJuZXQuZWR1LmNuL3JyZHAv
bm90aWZpY2F0aW9uLnhtbDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMCNTswLgYI
KwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAFnpW4wDQQCAAIwBwMFACQKqAEwDQYJ
KoZIhvcNAQELBQADggEBAM1+3WvA+q1Iy6/XgFIMPuKzh6vpXlkb6UHHn5kpZESs
RVdD3WINJMJ5yfx5r8XMTtUGk48CINaJbkVc65aD2Xa+QBB1DCmKYDZ5AJH6EAyz
rGaJXcpdUCLt/MHFFdd3BZb98eB1fKv9eaNTQOjOgk4RBQDQ3KkZkkAoCbWRnd46
HITBD3/JZ8DB/kv8dHfiYKPgWV+xgig+OxDM2uMRVeXKo0r+PG6qmGhswOIaQ3xS
aG8/Dl3beDBwhaMiq7ECMdQ7hX4lWSFRMHLt6mvVFffobkEhLveO6atFQnTlxoeh
dp8ph2WDBRJ3zrRaWT6WHjk9iE/vY8kjf9J31kNpS9A=
-----END CERTIFICATE-----
Generated at Sat Sep 7 22:12:16 2024 by rpki-client on console-fra.rpki-client.org