Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1AwbOf4FNm7Ysj4IgLaet198kOI.cer
File: 1AwbOf4FNm7Ysj4IgLaet198kOI.cer (raw, json)
Hash identifier: jjy/LSQKNLr+ZfdfG05kasXohJLqp1B6D5TV+gSPYrU=
Subject key identifier: D4:0C:1B:39:FE:05:36:6E:D8:B2:3E:08:80:B6:9E:B7:5F:7C:90:E2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0216BB
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9171A26/BE5312A245C111EA8D0BDD34C4F9AE02/1AwbOf4FNm7Ysj4IgLaet198kOI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9171A26/BE5312A245C111EA8D0BDD34C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 28 Oct 2024 17:15:00 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 138198
IP: 103.122.28.0/22
IP: 2403:87c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 11:16:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136891 (0x216bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 28 17:15:00 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A9171A26/serialNumber=D40C1B39FE05366ED8B23E0880B69EB75F7C90E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:74:48:e0:30:80:00:f9:d7:93:f7:5c:0e:aa:
62:3b:86:ac:93:9d:c8:ee:ad:b5:ca:7d:f2:a7:74:
09:fe:a2:b4:29:63:4b:6f:58:58:f7:88:f4:d5:26:
be:63:92:d7:d1:34:b6:0b:d9:8d:ae:9a:72:a5:63:
fa:7c:75:68:60:9d:1f:75:03:11:af:24:29:f9:75:
50:2c:8e:62:c1:75:49:1d:06:b9:07:e1:1d:75:df:
d4:b3:0b:c9:94:ad:a8:42:32:05:5f:a0:93:00:d9:
bf:c0:ee:4e:2e:4e:7b:30:32:b4:48:30:f2:d6:7f:
0f:61:24:3b:c5:c6:07:38:c4:fd:8b:fb:dd:99:49:
7d:9c:02:62:5a:e7:61:64:97:a6:7c:22:17:09:d1:
5e:df:bb:9d:c2:e6:78:1a:ea:1a:97:c5:41:45:d6:
d6:e1:c8:d9:cd:40:4e:36:60:20:95:71:69:34:27:
f6:b2:03:45:af:62:f2:f5:7b:94:1e:0f:cb:91:aa:
90:0d:27:1e:3f:15:7f:7f:4e:74:7a:c9:05:e3:8a:
af:95:f4:61:26:1e:63:2d:f3:01:b3:69:77:a1:d8:
36:92:09:f8:47:0e:3a:bf:3b:e8:8b:17:30:03:69:
43:48:b4:ab:84:bf:95:e8:e5:c2:76:23:49:84:d7:
ee:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:0C:1B:39:FE:05:36:6E:D8:B2:3E:08:80:B6:9E:B7:5F:7C:90:E2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9171A26/BE5312A245C111EA8D0BDD34C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9171A26/BE5312A245C111EA8D0BDD34C4F9AE02/1AwbOf4FNm7Ysj4IgLaet198kOI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138198
sbgp-ipAddrBlock: critical
IPv4:
103.122.28.0/22
IPv6:
2403:87c0::/32
Signature Algorithm: sha256WithRSAEncryption
35:49:36:73:d5:23:3e:2c:ab:2f:79:2c:8e:4f:9a:48:4f:2c:
06:93:01:3a:dd:c4:22:32:b3:15:42:67:35:8a:97:f3:43:e0:
20:74:96:99:7c:65:2d:7a:e6:15:2d:0b:55:10:b6:b9:37:30:
9b:c5:93:de:43:f2:17:2d:18:f2:7d:77:7c:f6:66:3b:19:0f:
e2:03:c3:f4:38:6f:92:dd:87:d3:6a:7a:a5:19:a2:4b:26:06:
5b:35:58:10:75:79:1c:a5:a0:09:9f:0b:05:50:ce:58:b1:98:
a9:ce:51:f7:d5:a2:02:ba:11:84:4c:80:e3:56:67:86:92:30:
80:d2:af:c2:c8:e7:5f:c6:ea:66:89:39:72:0c:88:a4:b6:cf:
cf:b6:c6:75:3d:ec:d4:21:9e:d1:dc:bd:b3:43:8d:6f:c8:94:
5d:60:92:29:1c:16:50:75:76:ea:a4:9d:71:eb:ec:a0:b1:e3:
5c:ac:24:3b:3c:b3:fa:d7:e2:59:cc:bf:f3:77:1c:90:a1:06:
56:29:bb:83:2f:69:0e:1f:bd:83:9a:71:4a:ba:e0:a2:72:b0:
66:66:7f:d4:b3:c6:a2:56:87:bb:88:85:af:9f:6b:70:93:94:
37:cf:a3:48:0f:b3:d0:53:a9:39:72:8f:e8:22:63:41:af:93:
57:88:77:46
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAha7MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MTAyODE3MTUwMFoXDTI1MTIwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNzFBMjYxMTAvBgNVBAUTKEQ0MEMxQjM5RkUwNTM2NkVEOEIyM0Uw
ODgwQjY5RUI3NUY3QzkwRTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDEdEjgMIAA+deT91wOqmI7hqyTncjurbXKffKndAn+orQpY0tvWFj3iPTVJr5j
ktfRNLYL2Y2umnKlY/p8dWhgnR91AxGvJCn5dVAsjmLBdUkdBrkH4R1139SzC8mU
rahCMgVfoJMA2b/A7k4uTnswMrRIMPLWfw9hJDvFxgc4xP2L+92ZSX2cAmJa52Fk
l6Z8IhcJ0V7fu53C5nga6hqXxUFF1tbhyNnNQE42YCCVcWk0J/ayA0WvYvL1e5Qe
D8uRqpANJx4/FX9/TnR6yQXjiq+V9GEmHmMt8wGzaXeh2DaSCfhHDjq/O+iLFzAD
aUNItKuEv5Xo5cJ2I0mE1+59AgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQU1AwbOf4F
Nm7Ysj4IgLaet198kOIwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTcxQTI2L0JFNTMxMkEyNDVDMTExRUE4RDBCREQzNEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE3MUEyNi9CRTUzMTJBMjQ1QzExMUVBOEQwQkREMzRDNEY5QUUwMi8xQXdiT2Y0
Rk5tN1lzajRJZ0xhZXQxOThrT0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhvWMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZ3ocMA0EAgAC
MAcDBQAkA4fAMA0GCSqGSIb3DQEBCwUAA4IBAQA1STZz1SM+LKsveSyOT5pITywG
kwE63cQiMrMVQmc1ipfzQ+AgdJaZfGUteuYVLQtVELa5NzCbxZPeQ/IXLRjyfXd8
9mY7GQ/iA8P0OG+S3YfTanqlGaJLJgZbNVgQdXkcpaAJnwsFUM5YsZipzlH31aIC
uhGETIDjVmeGkjCA0q/CyOdfxupmiTlyDIikts/PtsZ1PezUIZ7R3L2zQ41vyJRd
YJIpHBZQdXbqpJ1x6+ygseNcrCQ7PLP61+JZzL/zdxyQoQZWKbuDL2kOH72DmnFK
uuCicrBmZn/Us8aiVoe7iIWvn2twk5Q3z6NID7PQU6k5co/oImNBr5NXiHdG
-----END CERTIFICATE-----
Generated at Sat Nov 23 12:37:08 2024 by rpki-client on console-ams.rpki-client.org