Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38I-PZBdDoNoEhlZbQgimmlPrxM.cer
File: 38I-PZBdDoNoEhlZbQgimmlPrxM.cer (raw, json)
Hash identifier: 0S1dpTPepZinX78NMhXXVXw1EixCxbGbs5C2ZbbnsnE=
Subject key identifier: DF:C2:3E:3D:90:5D:0E:83:68:12:19:59:6D:08:22:9A:69:4F:AF:13
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E89F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 02 Apr 2024 06:06:14 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 132459
AS: 142128 -- 142129
IP: 103.137.220.0/22
IP: 2404:b940::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 May 2024 18:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125087 (0x1e89f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 2 06:06:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A91E3D04/serialNumber=DFC23E3D905D0E83681219596D08229A694FAF13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:78:24:3e:62:82:25:f3:ca:1c:3b:7b:24:97:
29:ab:d5:32:49:25:5b:b8:54:73:ee:22:d4:1f:ef:
c1:42:2b:9e:a7:eb:13:84:81:d2:3d:8f:39:ca:95:
bd:55:99:40:f7:71:cc:db:d2:54:aa:40:af:99:6a:
ef:58:63:0f:47:5f:b1:4b:77:0a:bd:1c:f5:44:97:
65:84:7e:92:2a:0e:ef:f8:5d:3b:e7:97:b2:8c:0f:
db:76:de:79:25:5a:db:b7:f8:2f:b1:20:67:17:64:
7a:62:4d:7b:67:e4:a8:29:69:c7:ee:c9:cd:23:11:
c6:bb:a5:d0:c7:bc:18:9c:2a:2e:73:9f:b4:f6:2f:
5e:7b:c5:79:13:2a:8f:35:f8:6a:25:df:d7:a2:ec:
dd:f3:50:27:c2:e6:f3:04:54:09:bf:9d:3c:92:80:
ea:3a:03:8c:9f:81:86:b9:51:b2:03:94:1a:d2:07:
6f:af:45:bd:c5:a4:ff:00:fb:81:f4:12:2d:d3:84:
91:84:80:f0:2f:b9:46:e2:96:de:03:ab:f4:9a:ac:
04:d7:bb:83:3f:f9:8e:6d:43:e8:34:9d:8b:7f:d7:
0a:54:bb:90:cb:b7:b0:6e:47:81:63:09:26:1e:30:
d6:2c:57:82:86:fa:76:cb:e8:ea:1b:79:9f:bd:e9:
36:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C2:3E:3D:90:5D:0E:83:68:12:19:59:6D:08:22:9A:69:4F:AF:13
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132459
142128-142129
sbgp-ipAddrBlock: critical
IPv4:
103.137.220.0/22
IPv6:
2404:b940::/32
Signature Algorithm: sha256WithRSAEncryption
36:62:c6:c4:dc:62:f1:a6:90:09:c6:8b:45:60:d4:54:97:53:
bc:f0:3d:4f:31:88:4a:e7:40:f3:02:f7:14:f1:fb:96:49:47:
60:02:84:50:43:d7:46:3f:08:98:45:97:71:79:e6:35:be:9d:
8b:81:3e:57:47:1c:79:6a:d6:cb:c5:ec:16:7e:2a:35:3e:58:
88:06:ec:1d:04:44:b8:8d:96:33:3e:e0:ff:1f:da:8e:4e:21:
7a:70:91:5a:52:de:1c:0a:dd:19:d5:6e:6e:5a:51:54:d9:6c:
e6:25:4c:14:30:42:80:4a:05:e5:e3:d1:b9:05:ed:b7:98:57:
57:4a:ee:6d:58:50:db:95:51:f1:81:ac:e0:07:d8:3c:49:69:
ca:0a:88:86:f5:8d:c9:c6:45:f0:a7:fb:51:5d:f5:2e:e4:4e:
14:d6:7b:50:8f:2d:66:cc:46:22:2a:4e:d1:0b:26:9f:df:74:
9b:4c:2d:f7:8b:ae:bd:b3:8b:05:45:75:d8:82:e8:28:c0:bc:
79:bc:4c:13:14:ac:c4:19:97:c7:2a:94:0b:1a:39:56:9d:6e:
18:3c:ae:f6:08:07:c0:dd:97:fb:bc:5d:3f:0f:aa:ca:70:6a:
b4:04:cc:2d:6e:f9:be:de:36:e2:a4:c0:97:0b:9c:08:aa:0c:
38:7c:09:08
-----BEGIN CERTIFICATE-----
MIIGNTCCBR2gAwIBAgIDAeifMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDQwMjA2MDYxNFoXDTI1MDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRTNEMDQxMTAvBgNVBAUTKERGQzIzRTNEOTA1RDBFODM2ODEyMTk1
OTZEMDgyMjlBNjk0RkFGMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDLeCQ+YoIl88ocO3sklymr1TJJJVu4VHPuItQf78FCK56n6xOEgdI9jznKlb1V
mUD3cczb0lSqQK+Zau9YYw9HX7FLdwq9HPVEl2WEfpIqDu/4XTvnl7KMD9t23nkl
Wtu3+C+xIGcXZHpiTXtn5Kgpacfuyc0jEca7pdDHvBicKi5zn7T2L157xXkTKo81
+Gol39ei7N3zUCfC5vMEVAm/nTySgOo6A4yfgYa5UbIDlBrSB2+vRb3FpP8A+4H0
Ei3ThJGEgPAvuUbilt4Dq/SarATXu4M/+Y5tQ+g0nYt/1wpUu5DLt7BuR4FjCSYe
MNYsV4KG+nbL6OobeZ+96TZRAgMBAAGjggMqMIIDJjAdBgNVHQ4EFgQU38I+PZBd
DoNoEhlZbQgimmlPrxMwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUUzRDA0LzdBMTdGRThFQUREOTExRTlCNzQwOUE3MkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFFM0QwNC83QTE3RkU4RUFERDkxMUU5Qjc0MDlBNzJDNEY5QUUwMi8zOEktUFpC
ZERvTm9FaGxaYlFnaW1tbFByeE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJgYIKwYBBQUHAQgBAf8EFzAV
oBMwEQIDAgVrMAoCAwIrMAIDAisxMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG
AwQCZ4ncMA0EAgACMAcDBQAkBLlAMA0GCSqGSIb3DQEBCwUAA4IBAQA2YsbE3GLx
ppAJxotFYNRUl1O88D1PMYhK50DzAvcU8fuWSUdgAoRQQ9dGPwiYRZdxeeY1vp2L
gT5XRxx5atbLxewWfio1PliIBuwdBES4jZYzPuD/H9qOTiF6cJFaUt4cCt0Z1W5u
WlFU2WzmJUwUMEKASgXl49G5Be23mFdXSu5tWFDblVHxgazgB9g8SWnKCoiG9Y3J
xkXwp/tRXfUu5E4U1ntQjy1mzEYiKk7RCyaf33SbTC33i669s4sFRXXYgugowLx5
vEwTFKzEGZfHKpQLGjlWnW4YPK72CAfA3Zf7vF0/D6rKcGq0BMwtbvm+3jbipMCX
C5wIqgw4fAkI
-----END CERTIFICATE-----
Generated at Wed Apr 24 21:18:27 2024 by rpki-client on console-ams.rpki-client.org