Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DEGkNzrfuShjaNXmsrRdIGGRqM.cer
File: 1DEGkNzrfuShjaNXmsrRdIGGRqM.cer (raw, json)
Hash identifier: 670DaC9Z/M2Hx4tI4Gxof7kyfqhmjXHKfri1xpJLsz0=
Subject key identifier: D4:31:06:90:DC:EB:7E:E4:A1:8D:A3:57:9A:CA:D1:74:81:86:46:A3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01BD70
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91BB07D/E9B4853C4AC411EE9839386FC4F9AE02/1DEGkNzrfuShjaNXmsrRdIGGRqM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91BB07D/E9B4853C4AC411EE9839386FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 14 Sep 2023 04:09:15 +0000
Certificate not after: Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources: AS: 135883
IP: 103.117.136.0/22
IP: 2403:1a40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 08 May 2024 21:44:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114032 (0x1bd70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 14 04:09:15 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=A91BB07D/serialNumber=D4310690DCEB7EE4A18DA3579ACAD174818646A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e2:6e:f3:9c:8f:65:fc:7f:91:8d:43:bb:71:
b3:ab:63:89:17:59:d3:ab:04:85:b9:08:54:fa:10:
fd:6e:5e:f7:75:eb:06:1f:91:4b:38:11:3f:4f:fa:
17:3b:2b:34:24:e7:c6:8d:2a:48:cb:25:2f:b3:fb:
08:56:50:34:3c:29:4e:51:f7:14:86:6a:ff:94:03:
df:54:ec:58:3a:3d:03:0c:30:44:9b:5a:a6:ef:b6:
22:fe:19:28:d8:cc:d0:e8:2a:15:97:e9:6b:fd:4d:
7c:10:31:ee:3e:ca:ef:e2:84:ab:8e:85:dd:aa:40:
24:1c:1a:c5:cc:12:89:14:d8:e6:e6:3a:0a:ee:0d:
bc:ed:24:1b:65:8e:99:b0:8a:87:ff:a1:c5:c3:19:
95:3e:36:66:01:cd:6c:88:f7:fb:fb:6b:1f:60:77:
b5:ca:53:5e:cc:1a:23:fd:f5:ce:e5:b4:71:2d:ad:
18:cf:06:99:88:f3:71:ff:5b:bd:c3:30:40:41:21:
f7:63:e2:63:05:cc:0c:c9:f7:73:d8:60:30:f1:74:
e1:b9:f7:b0:d3:24:df:28:1f:3d:94:a3:7e:ba:1f:
6c:a9:cd:0c:f9:db:60:b5:ef:39:cb:1e:60:81:bb:
a0:3e:c2:dc:b6:f9:4f:70:6f:69:e4:5d:3f:39:6c:
0c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:31:06:90:DC:EB:7E:E4:A1:8D:A3:57:9A:CA:D1:74:81:86:46:A3
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BB07D/E9B4853C4AC411EE9839386FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BB07D/E9B4853C4AC411EE9839386FC4F9AE02/1DEGkNzrfuShjaNXmsrRdIGGRqM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
135883
sbgp-ipAddrBlock: critical
IPv4:
103.117.136.0/22
IPv6:
2403:1a40::/32
Signature Algorithm: sha256WithRSAEncryption
a2:b9:0c:0b:f5:09:eb:d3:7e:c9:96:25:51:50:ff:cf:e1:6b:
8c:de:8b:94:91:a9:8d:c7:b6:41:9e:d3:df:8f:30:34:6f:b1:
79:e9:b4:8e:98:5d:9f:2f:a7:02:84:74:e4:98:c3:17:e9:3b:
01:0b:30:cb:85:07:03:a3:6d:46:e6:b2:2e:fa:84:f0:ef:9f:
40:54:1e:2d:a8:4b:b5:96:b2:df:2c:35:a5:19:08:f2:00:22:
e4:13:a2:16:47:c2:bf:13:bf:3e:96:07:e5:68:ad:3a:73:28:
cb:5d:26:43:ae:93:97:51:1b:6f:9c:b4:05:b7:79:35:46:7f:
5d:b2:e8:22:96:5b:51:45:cf:90:dd:cb:5f:89:f7:cf:ac:5a:
55:97:f9:86:31:8c:3d:ab:97:2d:3c:6b:b4:9b:60:6e:4a:1c:
fc:a1:4d:94:9d:ad:42:4b:3c:4b:eb:a1:1f:49:41:e7:9b:0f:
93:59:3f:b7:24:2b:c2:f5:2a:85:ad:7e:a7:22:cc:04:20:17:
95:7f:f6:c4:8b:56:7f:80:0d:f9:83:9b:cb:9d:4d:a2:4c:37:
12:0a:c8:c3:52:2d:f1:6a:e2:c5:70:00:d7:32:f2:06:89:2d:
93:4f:1a:bc:1c:f5:14:f7:98:7d:e4:77:3b:66:8d:05:5e:35:
20:8d:98:79
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAb1wMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMDkxNDA0MDkxNVoXDTI0MDkzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQkIwN0QxMTAvBgNVBAUTKEQ0MzEwNjkwRENFQjdFRTRBMThEQTM1
NzlBQ0FEMTc0ODE4NjQ2QTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDG4m7znI9l/H+RjUO7cbOrY4kXWdOrBIW5CFT6EP1uXvd16wYfkUs4ET9P+hc7
KzQk58aNKkjLJS+z+whWUDQ8KU5R9xSGav+UA99U7Fg6PQMMMESbWqbvtiL+GSjY
zNDoKhWX6Wv9TXwQMe4+yu/ihKuOhd2qQCQcGsXMEokU2ObmOgruDbztJBtljpmw
iof/ocXDGZU+NmYBzWyI9/v7ax9gd7XKU17MGiP99c7ltHEtrRjPBpmI83H/W73D
MEBBIfdj4mMFzAzJ93PYYDDxdOG597DTJN8oHz2Uo366H2ypzQz522C17znLHmCB
u6A+wty2+U9wb2nkXT85bAyLAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQU1DEGkNzr
fuShjaNXmsrRdIGGRqMwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUJCMDdEL0U5QjQ4NTNDNEFDNDExRUU5ODM5Mzg2RkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFCQjA3RC9FOUI0ODUzQzRBQzQxMUVFOTgzOTM4NkZDNEY5QUUwMi8xREVHa056
cmZ1U2hqYU5YbXNyUmRJR0dScU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhLLMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZ3WIMA0EAgAC
MAcDBQAkAxpAMA0GCSqGSIb3DQEBCwUAA4IBAQCiuQwL9Qnr037JliVRUP/P4WuM
3ouUkamNx7ZBntPfjzA0b7F56bSOmF2fL6cChHTkmMMX6TsBCzDLhQcDo21G5rIu
+oTw759AVB4tqEu1lrLfLDWlGQjyACLkE6IWR8K/E78+lgflaK06cyjLXSZDrpOX
URtvnLQFt3k1Rn9dsugilltRRc+Q3ctfiffPrFpVl/mGMYw9q5ctPGu0m2BuShz8
oU2Una1CSzxL66EfSUHnmw+TWT+3JCvC9SqFrX6nIswEIBeVf/bEi1Z/gA35g5vL
nU2iTDcSCsjDUi3xauLFcADXMvIGiS2TTxq8HPUU95h95Hc7Zo0FXjUgjZh5
-----END CERTIFICATE-----
Generated at Wed May 1 22:51:36 2024 by rpki-client on console-ams.rpki-client.org