Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DMXblmum0dk6179BKQ2hWKrXiE.cer
File: 5DMXblmum0dk6179BKQ2hWKrXiE.cer (raw, json)
Hash identifier: DMkwArsH/M9GXloLQA4HcxUB1YTWqkTewOul4Iikehg=
Subject key identifier: E4:33:17:6E:59:AE:9B:47:64:EB:5E:FD:04:A4:36:85:62:AB:5E:21
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021D0A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 22 Nov 2024 14:41:07 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 24187
AS: 133540
IP: 27.131.128.0/18
IP: 103.109.60.0/22
IP: 202.173.208.0/20
IP: 2407:7a00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138506 (0x21d0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 22 14:41:07 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A9180318/serialNumber=E433176E59AE9B4764EB5EFD04A4368562AB5E21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4d:b3:d1:aa:b6:45:45:58:58:10:d3:bc:4c:
01:2e:14:53:57:49:26:fb:91:1c:99:e6:b7:ab:2e:
54:a4:b8:fa:cf:7b:70:b3:93:de:ec:ad:f5:70:d6:
e2:59:4e:38:ea:76:a6:04:ee:c4:46:22:bd:c5:f5:
d7:19:ef:94:90:d3:30:23:65:a3:16:96:21:86:9f:
98:9b:36:0f:0e:dd:d7:d3:c6:1b:92:d8:49:e6:5b:
bb:44:4c:2e:30:f9:40:fc:67:38:cd:99:cc:08:7c:
f7:6c:1f:09:6f:a4:68:88:17:0b:b1:b8:72:0c:df:
2c:30:3e:df:61:f8:a2:2a:fa:d2:5e:c4:fa:13:40:
28:f0:f3:82:16:4a:c9:09:e0:16:a2:78:c5:cc:de:
1e:51:32:c8:6b:fa:9c:27:6f:7d:e9:a5:8c:b3:bf:
03:c0:5b:0b:14:e4:2a:7d:69:9d:db:d1:1f:aa:3a:
00:b8:8a:42:e6:62:ed:9e:2e:cb:dc:97:e8:88:ef:
c6:6e:ff:90:7e:64:fa:81:ed:c4:ba:5e:b7:32:dd:
16:7b:12:1d:f4:84:fc:02:3b:41:bd:3f:52:4c:8f:
b5:3e:2f:05:6d:49:45:e8:3e:3c:9f:23:be:52:6b:
d8:19:b4:4e:9c:68:e4:0a:50:ba:05:bf:47:0d:85:
b2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:33:17:6E:59:AE:9B:47:64:EB:5E:FD:04:A4:36:85:62:AB:5E:21
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24187
133540
sbgp-ipAddrBlock: critical
IPv4:
27.131.128.0/18
103.109.60.0/22
202.173.208.0/20
IPv6:
2407:7a00::/32
Signature Algorithm: sha256WithRSAEncryption
17:9d:5d:60:75:40:6e:c0:82:2a:bf:27:00:79:0f:ac:26:7e:
0b:c3:22:37:03:47:53:50:ee:ea:f4:7f:d9:f9:21:25:ac:d5:
09:1c:08:f2:4e:e3:bd:9e:b2:8e:0e:ec:e5:b4:5a:5b:9c:88:
1f:6e:e9:0d:9b:4e:04:5b:9b:0c:8f:71:09:ef:bd:ff:36:f4:
0b:05:a7:8a:fd:ef:7a:34:c2:11:62:1e:a6:5e:05:18:31:18:
90:92:7b:d4:33:ff:98:d2:a2:b2:1b:02:77:d4:87:05:8c:40:
c0:a0:6c:75:ac:11:1d:b1:2f:dc:da:13:c2:a0:8e:41:3a:f5:
3a:6c:3e:0b:e3:46:aa:df:07:98:74:41:19:d9:b4:72:0f:6e:
83:48:22:f3:c2:56:42:cf:6d:50:b5:5d:fa:be:34:9e:b8:1c:
b9:1c:fe:c0:66:ba:4e:38:18:ba:84:e0:72:a4:0b:31:1c:4c:
66:5c:17:be:35:da:56:af:f6:c4:2e:a8:38:e7:b0:ca:85:e5:
48:e0:3c:53:9b:86:3d:53:2b:8b:9d:d9:c6:e3:75:c0:9b:f4:
e7:ac:19:eb:a7:d0:c9:f7:f2:f4:7b:89:dc:67:db:e0:19:f0:
86:09:3d:16:00:97:13:d5:46:65:19:5b:a3:e4:5b:0c:57:41:
9f:d3:9b:95
-----BEGIN CERTIFICATE-----
MIIGOTCCBSGgAwIBAgIDAh0KMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MTEyMjE0NDEwN1oXDTI2MDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxODAzMTgxMTAvBgNVBAUTKEU0MzMxNzZFNTlBRTlCNDc2NEVCNUVG
RDA0QTQzNjg1NjJBQjVFMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC4TbPRqrZFRVhYENO8TAEuFFNXSSb7kRyZ5rerLlSkuPrPe3Czk97srfVw1uJZ
TjjqdqYE7sRGIr3F9dcZ75SQ0zAjZaMWliGGn5ibNg8O3dfTxhuS2EnmW7tETC4w
+UD8ZzjNmcwIfPdsHwlvpGiIFwuxuHIM3ywwPt9h+KIq+tJexPoTQCjw84IWSskJ
4BaieMXM3h5RMshr+pwnb33ppYyzvwPAWwsU5Cp9aZ3b0R+qOgC4ikLmYu2eLsvc
l+iI78Zu/5B+ZPqB7cS6Xrcy3RZ7Eh30hPwCO0G9P1JMj7U+LwVtSUXoPjyfI75S
a9gZtE6caOQKULoFv0cNhbKJAgMBAAGjggMuMIIDKjAdBgNVHQ4EFgQU5DMXblmu
m0dk6179BKQ2hWKrXiEwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTgwMzE4L0I1NzE5REQyMUQ4RjExRTJCMDU3MDdFRjA4QjAyQ0QyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE4MDMxOC9CNTcxOUREMjFEOEYxMUUyQjA1NzA3RUYwOEIwMkNEMi81RE1YYmxt
dW0wZGs2MTc5QktRMmhXS3JYaUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQgBAf8EDzAN
oAswCQICXnsCAwIJpDA6BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEBhuDgAME
AmdtPAMEBMqt0DANBAIAAjAHAwUAJAd6ADANBgkqhkiG9w0BAQsFAAOCAQEAF51d
YHVAbsCCKr8nAHkPrCZ+C8MiNwNHU1Du6vR/2fkhJazVCRwI8k7jvZ6yjg7s5bRa
W5yIH27pDZtOBFubDI9xCe+9/zb0CwWniv3vejTCEWIepl4FGDEYkJJ71DP/mNKi
shsCd9SHBYxAwKBsdawRHbEv3NoTwqCOQTr1Omw+C+NGqt8HmHRBGdm0cg9ug0gi
88JWQs9tULVd+r40nrgcuRz+wGa6TjgYuoTgcqQLMRxMZlwXvjXaVq/2xC6oOOew
yoXlSOA8U5uGPVMri53ZxuN1wJv056wZ66fQyffy9HuJ3Gfb4Bnwhgk9FgCXE9VG
ZRlbo+RbDFdBn9OblQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:59:15 2024 by rpki-client on console-ams.rpki-client.org