Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3glSX1epVbpvLTKtIoMwQhUYLkU.cer
File: 3glSX1epVbpvLTKtIoMwQhUYLkU.cer (raw, json)
Hash identifier: ZQtikYJ67sUqlH0xHFAmjZ8ZM6H1tyPBJlEmFMq2DkA=
Subject key identifier: DE:09:52:5F:57:A9:55:BA:6F:2D:32:AD:22:83:30:42:15:18:2E:45
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01B9A3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 30 Aug 2023 03:10:33 +0000
Certificate not after: Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources: AS: 151654
IP: 103.250.122.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 May 2024 05:14:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113059 (0x1b9a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 30 03:10:33 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=A9119C32/serialNumber=DE09525F57A955BA6F2D32AD2283304215182E45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ac:48:43:32:31:e5:a6:f7:29:1e:fa:07:dd:
44:36:aa:97:28:dc:b2:ee:48:a5:78:38:53:86:da:
73:8a:83:1e:47:13:59:f9:9b:8f:61:07:60:23:a3:
f7:ed:b4:c4:6a:0e:1d:4a:a0:21:34:5d:0b:f2:03:
ef:fd:74:2b:94:69:8c:b4:ec:3c:65:c9:41:fa:38:
d6:37:50:e2:a6:54:2c:49:d6:54:d3:f6:52:3a:d0:
84:5d:64:8e:0a:08:e8:a7:fc:7c:50:0d:42:39:78:
6b:4c:60:77:f5:f0:ec:29:da:77:4a:f6:1c:d4:df:
6d:d8:5b:c5:e4:66:1f:a8:a7:f3:02:5c:23:af:71:
00:8f:6b:e3:74:21:bd:62:d6:8f:aa:b8:2a:db:77:
f1:2c:b6:1c:69:97:89:65:54:2a:03:6d:8d:86:15:
c6:51:53:b6:e0:e7:62:7a:9e:2f:a5:db:6e:1a:26:
57:5e:6b:d8:3c:63:54:aa:0a:33:76:85:9b:b1:5e:
16:dc:42:6d:97:69:07:83:74:8d:70:60:67:54:0a:
ab:70:c7:7c:7a:9f:72:d3:9c:e9:69:ce:30:60:bb:
6e:5c:af:28:c2:f7:ba:4b:2b:fa:f2:7d:33:0e:32:
85:bd:3c:10:97:8b:c0:e4:4d:01:76:6b:6e:e0:6e:
70:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:09:52:5F:57:A9:55:BA:6F:2D:32:AD:22:83:30:42:15:18:2E:45
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151654
sbgp-ipAddrBlock: critical
IPv4:
103.250.122.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:79:71:09:3e:24:ff:e4:6c:21:1a:88:a0:28:74:00:27:f1:
4e:35:5a:af:a2:c2:61:87:e6:cd:96:cb:5c:31:8b:aa:94:4f:
73:7b:7d:c4:d4:8c:0f:59:50:68:f7:01:fa:91:58:8b:fb:ac:
57:54:d1:8e:ac:37:f8:7e:51:e6:0e:8c:2f:be:b2:ad:ee:63:
7f:61:3a:72:af:82:a3:52:79:68:54:42:a8:48:9a:9d:e9:8a:
c8:78:d3:85:31:81:c9:b2:7c:65:22:11:a5:79:cb:e1:14:de:
d9:ef:e8:27:53:e6:ea:4f:3c:1d:34:9a:3a:63:64:7d:00:dd:
0d:72:a4:0b:68:1e:d9:18:d8:72:2a:9e:6b:b6:1b:f5:d3:fb:
77:bf:92:e2:76:89:63:6b:13:aa:eb:85:7b:d8:7a:73:18:79:
27:3b:07:09:36:fa:93:3b:5d:74:5d:b6:25:c6:e8:95:0e:4e:
e2:0a:93:09:3e:be:95:53:b1:3b:cb:37:db:ef:35:45:45:7b:
57:4b:64:b9:21:62:0d:8f:75:54:ec:b6:22:34:81:3b:17:e3:
70:40:2e:5f:15:7c:48:6d:32:d2:96:31:0e:88:22:79:ed:4c:
fc:1e:01:77:0e:8e:e5:10:6d:cb:b8:81:55:53:02:4b:36:7d:
f5:f8:93:37
-----BEGIN CERTIFICATE-----
MIIGGjCCBQKgAwIBAgIDAbmjMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMDgzMDAzMTAzM1oXDTI0MTIwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMTlDMzIxMTAvBgNVBAUTKERFMDk1MjVGNTdBOTU1QkE2RjJEMzJB
RDIyODMzMDQyMTUxODJFNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDBrEhDMjHlpvcpHvoH3UQ2qpco3LLuSKV4OFOG2nOKgx5HE1n5m49hB2Ajo/ft
tMRqDh1KoCE0XQvyA+/9dCuUaYy07DxlyUH6ONY3UOKmVCxJ1lTT9lI60IRdZI4K
COin/HxQDUI5eGtMYHf18Owp2ndK9hzU323YW8XkZh+op/MCXCOvcQCPa+N0Ib1i
1o+quCrbd/Esthxpl4llVCoDbY2GFcZRU7bg52J6ni+l224aJldea9g8Y1SqCjN2
hZuxXhbcQm2XaQeDdI1wYGdUCqtwx3x6n3LTnOlpzjBgu25cryjC97pLK/ryfTMO
MoW9PBCXi8DkTQF2a27gbnBDAgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQU3glSX1ep
VbpvLTKtIoMwQhUYLkUwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTE5QzMyL0M0RUExQjlFNDZFMjExRUVBMjM3MkY0MUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTExOUMzMi9DNEVBMUI5RTQ2RTIxMUVFQTIzNzJGNDFDNEY5QUUwMi8zZ2xTWDFl
cFZicHZMVEt0SW9Nd1FoVVlMa1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlBmMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ/p6MA0GCSqG
SIb3DQEBCwUAA4IBAQBeeXEJPiT/5GwhGoigKHQAJ/FONVqvosJhh+bNlstcMYuq
lE9ze33E1IwPWVBo9wH6kViL+6xXVNGOrDf4flHmDowvvrKt7mN/YTpyr4KjUnlo
VEKoSJqd6YrIeNOFMYHJsnxlIhGlecvhFN7Z7+gnU+bqTzwdNJo6Y2R9AN0NcqQL
aB7ZGNhyKp5rthv10/t3v5LidoljaxOq64V72HpzGHknOwcJNvqTO110XbYlxuiV
Dk7iCpMJPr6VU7E7yzfb7zVFRXtXS2S5IWINj3VU7LYiNIE7F+NwQC5fFXxIbTLS
ljEOiCJ57Uz8HgF3Do7lEG3LuIFVUwJLNn31+JM3
-----END CERTIFICATE-----
Generated at Thu May 2 05:58:11 2024 by rpki-client on console-ams.rpki-client.org