Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4CEd1HfFtNoX56IChgOs2OcWZrU.cer
File: 4CEd1HfFtNoX56IChgOs2OcWZrU.cer (raw, json)
Hash identifier: c5MWZHeLLRVDHMHS1mzGgMUeC45SELe0MicDighvNlA=
Subject key identifier: E0:21:1D:D4:77:C5:B4:DA:17:E7:A2:02:86:03:AC:D8:E7:16:66:B5
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01CC53
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 22 Nov 2023 17:37:29 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: AS: 137442
IP: 103.191.142.0/23
IP: 203.12.229.0 -- 203.12.230.255
IP: 2001:df0:ca00::/46
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Apr 2024 06:50:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117843 (0x1cc53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 22 17:37:29 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A91EB1BE/serialNumber=E0211DD477C5B4DA17E7A2028603ACD8E71666B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dc:6c:c0:67:63:32:ca:16:56:73:b5:75:40:
b9:f2:de:34:cc:dd:4d:c8:18:ed:c0:3d:81:d1:ac:
30:6b:b8:48:3b:24:2b:21:87:e0:b8:79:93:57:95:
5b:65:1a:56:0e:c3:15:aa:9c:a6:87:75:2a:f7:83:
64:ff:e6:ed:9b:20:5a:0d:3e:61:f0:29:0f:fc:c7:
ad:b8:55:f8:14:80:7e:03:ab:59:f0:43:d6:41:3c:
f4:81:26:b7:f7:78:6e:cf:32:65:c4:03:c4:9b:40:
e7:7c:c7:11:7b:50:5a:4e:65:f0:a0:4d:f9:2b:e9:
cd:56:c7:2f:05:02:8f:ac:e4:1c:28:53:b6:16:ab:
40:ed:d1:c6:8e:8f:d1:07:90:9f:84:bb:cc:03:e8:
28:19:41:c1:a0:ed:c1:69:20:74:67:43:77:c2:b4:
8c:4a:f0:8f:42:aa:df:33:4d:26:90:02:59:e5:1e:
53:96:14:8c:fa:c0:39:aa:03:8e:1d:a4:28:dd:2a:
d9:5d:8b:37:86:ba:95:8e:c9:0a:e1:d2:dd:08:a2:
29:a4:0e:e2:cc:58:3d:b8:2c:f1:59:86:b5:5e:a2:
8d:86:6d:79:ee:2b:49:e2:d5:27:0b:ca:e5:dd:b3:
7e:bd:19:df:99:ab:a0:01:44:c2:91:1d:a8:5c:0a:
13:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:21:1D:D4:77:C5:B4:DA:17:E7:A2:02:86:03:AC:D8:E7:16:66:B5
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137442
sbgp-ipAddrBlock: critical
IPv4:
103.191.142.0/23
203.12.229.0-203.12.230.255
IPv6:
2001:df0:ca00::/46
Signature Algorithm: sha256WithRSAEncryption
8c:80:ff:0f:9b:17:fa:99:a3:56:94:98:42:22:97:32:44:7f:
ec:bc:b4:21:29:33:1c:93:bb:72:21:fa:45:03:9e:10:25:eb:
89:4c:89:e3:2f:13:c1:32:10:19:4f:50:c4:82:4e:a5:20:d5:
1d:b0:ec:7a:c8:b2:ce:2b:97:92:82:9e:13:17:42:4d:59:bd:
88:1c:3c:90:36:a3:a7:6f:ae:eb:24:a8:6d:69:99:a8:3a:00:
ec:46:8b:a9:fa:f0:28:26:fb:5f:3e:12:b8:20:82:e8:dc:3d:
98:11:88:1c:38:f3:50:4a:f9:b4:e9:26:48:19:8e:03:fc:16:
dc:e0:c3:9e:a1:47:a4:2a:47:3f:5c:5e:b7:8f:cb:9c:47:8f:
44:de:09:8f:2b:5a:90:4a:4e:f4:1e:4f:c6:74:93:ff:85:87:
eb:1b:cb:36:79:98:78:e1:e9:4a:c5:a3:80:d4:35:01:f9:71:
df:d9:77:3a:ad:40:49:e9:03:c4:09:f9:c2:ce:c8:ab:b2:33:
c6:6f:38:86:df:a6:cd:43:39:f3:4f:48:a9:37:eb:77:9e:d7:
69:9d:c0:3f:64:76:c3:4d:9f:2a:ac:c7:70:c7:ba:9d:83:b7:
17:7f:ae:47:da:a5:a4:a8:3b:02:7b:f7:d4:a7:75:4a:29:6f:
96:d3:0f:28
-----BEGIN CERTIFICATE-----
MIIGOTCCBSGgAwIBAgIDAcxTMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMTEyMjE3MzcyOVoXDTI1MDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRUIxQkUxMTAvBgNVBAUTKEUwMjExREQ0NzdDNUI0REExN0U3QTIw
Mjg2MDNBQ0Q4RTcxNjY2QjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC03GzAZ2MyyhZWc7V1QLny3jTM3U3IGO3APYHRrDBruEg7JCshh+C4eZNXlVtl
GlYOwxWqnKaHdSr3g2T/5u2bIFoNPmHwKQ/8x624VfgUgH4Dq1nwQ9ZBPPSBJrf3
eG7PMmXEA8SbQOd8xxF7UFpOZfCgTfkr6c1Wxy8FAo+s5BwoU7YWq0Dt0caOj9EH
kJ+Eu8wD6CgZQcGg7cFpIHRnQ3fCtIxK8I9Cqt8zTSaQAlnlHlOWFIz6wDmqA44d
pCjdKtldizeGupWOyQrh0t0IoimkDuLMWD24LPFZhrVeoo2GbXnuK0ni1ScLyuXd
s369Gd+Zq6ABRMKRHahcChPfAgMBAAGjggMuMIIDKjAdBgNVHQ4EFgQU4CEd1HfF
tNoX56IChgOs2OcWZrUwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUVCMUJFLzVBNTc3ODZDQzBDODExRThBRTgwNTMzNEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFFQjFCRS81QTU3Nzg2Q0MwQzgxMUU4QUU4MDUzMzRDNEY5QUUwMi80Q0VkMUhm
RnROb1g1NklDaGdPczJPY1daclUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhjiMD4GCCsGAQUFBwEHAQH/BC8wLTAaBAIAATAUAwQBZ7+OMAwDBADL
DOUDBADLDOYwDwQCAAIwCQMHAiABDfDKADANBgkqhkiG9w0BAQsFAAOCAQEAjID/
D5sX+pmjVpSYQiKXMkR/7Ly0ISkzHJO7ciH6RQOeECXriUyJ4y8TwTIQGU9QxIJO
pSDVHbDsesiyziuXkoKeExdCTVm9iBw8kDajp2+u6ySobWmZqDoA7EaLqfrwKCb7
Xz4SuCCC6Nw9mBGIHDjzUEr5tOkmSBmOA/wW3ODDnqFHpCpHP1xet4/LnEePRN4J
jytakEpO9B5PxnST/4WH6xvLNnmYeOHpSsWjgNQ1Aflx39l3Oq1ASekDxAn5ws7I
q7Izxm84ht+mzUM5809IqTfrd57XaZ3AP2R2w02fKqzHcMe6nYO3F3+uR9qlpKg7
Anv31Kd1SilvltMPKA==
-----END CERTIFICATE-----
Generated at Fri Apr 19 07:40:54 2024 by rpki-client on console-ams.rpki-client.org