Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer
File: 1vBnJNCWhwftHfr9uyJYArPaoZQ.cer (raw, json)
Hash identifier: wE3cLgF4ku1aKPfe/f6u3TOAtUVj34pUhHXh5g4FkEQ=
Subject key identifier: D6:F0:67:24:D0:96:87:07:ED:1D:FA:FD:BB:22:58:02:B3:DA:A1:94
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021892
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 02 Nov 2024 12:45:45 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 147292
IP: 103.174.98.0/23
IP: 2001:df7:c480::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137362 (0x21892)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 2 12:45:45 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A91D1F95/serialNumber=D6F06724D0968707ED1DFAFDBB225802B3DAA194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:05:d4:ec:ad:0f:e0:66:31:d5:05:d1:73:01:
6a:26:7d:f4:27:75:7e:5f:7c:b7:44:ad:e1:72:12:
71:b4:55:ea:13:64:5e:f3:25:cd:3f:d5:c6:10:ac:
19:b3:26:6c:a1:4c:29:d6:d4:36:7d:ea:2c:46:d0:
5f:6b:3e:fb:ef:37:a1:81:b7:68:d1:f5:51:72:4f:
d7:fd:0a:3e:e1:61:cc:2d:b5:3a:de:62:e9:4a:4d:
de:49:fe:f5:73:0f:2f:d2:65:a4:8e:41:3f:d0:9d:
34:19:45:ee:90:ab:f9:c3:90:42:62:0e:ef:15:16:
70:f3:cf:87:3b:18:c6:db:03:c6:12:66:a5:88:1f:
57:c4:e7:32:94:6d:cc:4c:a0:dc:50:60:c6:15:aa:
71:4c:17:62:81:b2:09:cf:db:f7:9f:fd:d7:ca:c6:
15:3c:68:bd:aa:d1:1b:72:c1:13:19:d6:24:4e:20:
b5:cd:44:fa:15:e9:aa:7c:8e:ef:f3:ef:9b:7e:8b:
aa:ea:03:d4:66:e6:50:a7:32:bc:73:3c:a0:11:f8:
24:61:b8:37:7b:14:b8:f5:44:91:fd:2d:77:b5:34:
55:53:e1:59:3e:ee:d2:7f:61:61:c1:17:94:be:3a:
17:9e:76:fc:26:48:72:08:3f:0d:d9:09:4d:cc:d5:
25:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F0:67:24:D0:96:87:07:ED:1D:FA:FD:BB:22:58:02:B3:DA:A1:94
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
147292
sbgp-ipAddrBlock: critical
IPv4:
103.174.98.0/23
IPv6:
2001:df7:c480::/48
Signature Algorithm: sha256WithRSAEncryption
4f:c8:11:1c:67:20:3e:40:b5:96:d6:50:16:33:1b:f5:e6:6c:
fd:e0:05:29:8f:74:b5:fe:b0:33:96:0c:43:07:89:ac:19:0a:
f2:a0:cd:21:8c:88:a0:1b:4f:a1:ed:74:d3:33:cb:a2:aa:7a:
9a:6f:00:56:90:b9:80:99:96:07:b0:e9:7b:6b:da:94:55:35:
73:eb:80:f1:ed:16:a6:90:cf:d4:c2:f4:4c:6e:62:71:60:cf:
fd:e2:35:8b:94:ef:9f:9e:04:fb:6f:7d:fb:3c:55:da:df:3c:
b9:b7:34:cd:78:1d:54:ef:16:e5:8b:85:5d:86:d8:a2:54:cd:
70:82:68:25:b6:d0:d6:44:19:b7:93:93:32:4e:9b:19:f9:90:
0a:1a:d8:5f:fc:bb:0d:ac:06:a1:61:27:db:2a:58:6b:72:53:
0e:6e:23:f6:4a:00:6a:69:30:e9:69:fe:a0:b0:ac:4f:0f:7d:
96:c1:af:03:27:0b:5e:1b:90:8a:7a:31:f4:cc:5a:0d:09:f4:
7c:4d:0b:2f:16:70:0f:90:f7:fc:c8:b6:b6:8d:2f:eb:a6:a0:
a3:58:d3:38:6f:2e:09:25:7c:32:32:cb:47:19:c6:0a:7a:f7:
c4:3f:7e:b5:30:92:af:04:c6:01:82:c9:26:54:9c:fb:07:6c:
da:e2:26:ce
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAhiSMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MTEwMjEyNDU0NVoXDTI1MTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRDFGOTUxMTAvBgNVBAUTKEQ2RjA2NzI0RDA5Njg3MDdFRDFERkFG
REJCMjI1ODAyQjNEQUExOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDsBdTsrQ/gZjHVBdFzAWomffQndX5ffLdEreFyEnG0VeoTZF7zJc0/1cYQrBmz
JmyhTCnW1DZ96ixG0F9rPvvvN6GBt2jR9VFyT9f9Cj7hYcwttTreYulKTd5J/vVz
Dy/SZaSOQT/QnTQZRe6Qq/nDkEJiDu8VFnDzz4c7GMbbA8YSZqWIH1fE5zKUbcxM
oNxQYMYVqnFMF2KBsgnP2/ef/dfKxhU8aL2q0RtywRMZ1iROILXNRPoV6ap8ju/z
75t+i6rqA9Rm5lCnMrxzPKAR+CRhuDd7FLj1RJH9LXe1NFVT4Vk+7tJ/YWHBF5S+
OheedvwmSHIIPw3ZCU3M1SUTAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQU1vBnJNCW
hwftHfr9uyJYArPaoZQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUQxRjk1L0ZGOTNFQzcyMTk1RjExRURCMkJERjk1RUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFEMUY5NS9GRjkzRUM3MjE5NUYxMUVEQjJCREY5NUVDNEY5QUUwMi8xdkJuSk5D
V2h3ZnRIZnI5dXlKWUFyUGFvWlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAj9cMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ65iMA8EAgAC
MAkDBwAgAQ33xIAwDQYJKoZIhvcNAQELBQADggEBAE/IERxnID5AtZbWUBYzG/Xm
bP3gBSmPdLX+sDOWDEMHiawZCvKgzSGMiKAbT6HtdNMzy6KqeppvAFaQuYCZlgew
6Xtr2pRVNXPrgPHtFqaQz9TC9ExuYnFgz/3iNYuU75+eBPtvffs8VdrfPLm3NM14
HVTvFuWLhV2G2KJUzXCCaCW20NZEGbeTkzJOmxn5kAoa2F/8uw2sBqFhJ9sqWGty
Uw5uI/ZKAGppMOlp/qCwrE8PfZbBrwMnC14bkIp6MfTMWg0J9HxNCy8WcA+Q9/zI
traNL+umoKNY0zhvLgklfDIyy0cZxgp698Q/frUwkq8ExgGCySZUnPsHbNriJs4=
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:59:11 2024 by rpki-client on console-ams.rpki-client.org