Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HVZ7loiUGA5czj8qjgD_6pLI1c.cer
File: 3HVZ7loiUGA5czj8qjgD_6pLI1c.cer (raw, json)
Hash identifier: 9mKqaYj/VNjbbJQeq17i7dvrnjWbAm4QJ8a8TLSSx8Q=
Subject key identifier: DC:75:59:EE:5A:22:50:60:39:73:38:FC:AA:38:03:FF:AA:4B:23:57
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 020968
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 28 Aug 2024 05:39:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 132158
IP: 114.30.64.0/21
IP: 2400:8c80::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133480 (0x20968)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Aug 28 05:39:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A91FA56C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f3:f0:ec:6b:0e:62:dc:86:e8:42:ab:6e:af:
92:65:b6:6d:89:6a:9c:2b:1d:0d:6d:40:5f:11:ae:
b1:0f:61:c0:8f:f5:7f:2c:08:3b:ff:82:5d:2b:12:
e0:84:1c:fe:c0:36:f0:2d:c0:f7:68:f4:b7:48:d0:
ca:df:54:d0:8e:d2:db:dd:5b:44:de:35:87:c2:90:
72:d5:84:30:79:fd:86:44:42:37:98:76:0f:a3:0d:
92:ba:0b:b6:b7:8d:cf:63:4d:13:c6:46:dc:f0:66:
5f:c1:cf:ad:18:a1:a1:92:03:bc:90:3c:d7:94:30:
49:c0:f1:bb:65:ca:48:97:31:7e:ee:a7:11:19:0d:
98:ce:77:39:bd:20:39:71:c6:2d:f3:37:30:81:1b:
a4:0a:23:1e:fa:50:a6:dc:82:23:57:26:63:17:a8:
b3:48:42:e2:9f:8c:1a:03:67:cf:af:86:0c:25:f8:
14:5c:1c:e3:d9:33:a7:bb:58:17:90:08:c7:2e:e8:
5e:f7:59:e2:70:f3:44:3f:05:d9:29:c2:5a:4a:81:
23:29:9d:66:d6:2a:2b:fb:75:df:82:f1:47:71:0d:
a6:2f:8d:94:f3:38:8b:50:01:db:df:7b:8e:d3:f4:
fd:66:64:b3:98:3f:56:70:06:fe:6a:9c:5a:64:29:
f8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:75:59:EE:5A:22:50:60:39:73:38:FC:AA:38:03:FF:AA:4B:23:57
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132158
sbgp-ipAddrBlock: critical
IPv4:
114.30.64.0/21
IPv6:
2400:8c80::/32
Signature Algorithm: sha256WithRSAEncryption
68:13:a9:f9:fc:ac:16:57:4f:f0:53:20:83:af:f3:26:ef:e9:
fb:2d:c9:32:9c:8c:d6:24:42:d9:93:e2:ee:d1:62:98:45:bc:
66:33:cc:c2:01:00:67:b1:42:50:9a:49:d8:9e:9b:cd:28:28:
e0:7d:f1:33:e6:c3:61:0b:5d:f4:08:ba:58:65:5f:2f:48:77:
81:bf:d3:6f:ac:d5:61:69:4d:92:f0:4b:28:5e:01:25:74:f4:
c4:7e:42:9a:e0:a8:48:72:cd:22:90:a7:db:fb:f4:e5:a8:d2:
26:58:97:91:a9:b7:b4:fe:e9:da:ae:56:11:7e:44:c7:6f:53:
8f:ac:d8:73:5e:e1:13:cb:6b:ff:b5:27:aa:66:68:fc:fa:cc:
fd:5d:72:d5:8d:87:8c:07:58:89:f2:55:82:d3:25:f8:78:e7:
05:4c:23:8f:c4:1e:5e:c2:f6:ac:8c:5f:fa:0b:8c:1d:82:cc:
da:c9:e8:c6:90:1a:f2:10:ae:6a:21:1e:2c:11:91:f2:e8:83:
7b:cc:a4:03:0f:5b:6e:95:16:bb:fb:ee:ff:54:c1:af:ce:ba:
0f:55:3d:68:3a:22:76:cb:81:0e:1c:70:92:8a:13:69:6c:c2:
99:9c:07:a6:ff:60:6f:c5:03:0a:ee:aa:34:75:f7:71:60:27:
14:c0:98:9c
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAgloMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDgyODA1MzkyM1oXDTI1MDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRkE1NkMxMTAvBgNVBAUTKERDNzU1OUVFNUEyMjUwNjAzOTczMzhG
Q0FBMzgwM0ZGQUE0QjIzNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC28/Dsaw5i3IboQqtur5Jltm2JapwrHQ1tQF8RrrEPYcCP9X8sCDv/gl0rEuCE
HP7ANvAtwPdo9LdI0MrfVNCO0tvdW0TeNYfCkHLVhDB5/YZEQjeYdg+jDZK6C7a3
jc9jTRPGRtzwZl/Bz60YoaGSA7yQPNeUMEnA8btlykiXMX7upxEZDZjOdzm9IDlx
xi3zNzCBG6QKIx76UKbcgiNXJmMXqLNIQuKfjBoDZ8+vhgwl+BRcHOPZM6e7WBeQ
CMcu6F73WeJw80Q/BdkpwlpKgSMpnWbWKiv7dd+C8UdxDaYvjZTzOItQAdvfe47T
9P1mZLOYP1ZwBv5qnFpkKfgFAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQU3HVZ7loi
UGA5czj8qjgD/6pLI1cwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUZBNTZDL0REREU4QzQ4NjRGRjExRUZBNUE4MTE1OEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFGQTU2Qy9ERERFOEM0ODY0RkYxMUVGQTVBODExNThDNEY5QUUwMi8zSFZaN2xv
aVVHQTVjemo4cWpnRF82cExJMWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAgQ+MC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDch5AMA0EAgAC
MAcDBQAkAIyAMA0GCSqGSIb3DQEBCwUAA4IBAQBoE6n5/KwWV0/wUyCDr/Mm7+n7
LckynIzWJELZk+Lu0WKYRbxmM8zCAQBnsUJQmknYnpvNKCjgffEz5sNhC130CLpY
ZV8vSHeBv9NvrNVhaU2S8EsoXgEldPTEfkKa4KhIcs0ikKfb+/TlqNImWJeRqbe0
/unarlYRfkTHb1OPrNhzXuETy2v/tSeqZmj8+sz9XXLVjYeMB1iJ8lWC0yX4eOcF
TCOPxB5ewvasjF/6C4wdgszayejGkBryEK5qIR4sEZHy6IN7zKQDD1tulRa7++7/
VMGvzroPVT1oOiJ2y4EOHHCSihNpbMKZnAem/2BvxQMK7qo0dfdxYCcUwJic
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:15 2025 by rpki-client