Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer
File: 5Otd-leSQpC7j-xFuZd_xsf2-jc.cer (raw, json)
Hash identifier: bT61tfFBjo2xfcB7yyQqo8Zhhsq9ml9W6dKDxzcHmsQ=
Subject key identifier: E4:EB:5D:FA:57:92:42:90:BB:8F:EC:45:B9:97:7F:C6:C7:F6:FA:37
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01F0E3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 09 May 2024 19:36:32 +0000
Certificate not after: Wed 30 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 7605
AS: 138985
IP: 103.138.50.0/23
IP: 2001:df0:2c80::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Dec 2024 17:05:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127203 (0x1f0e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 9 19:36:32 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=A91A8B0B/serialNumber=E4EB5DFA57924290BB8FEC45B9977FC6C7F6FA37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:46:c1:c0:74:48:5c:25:46:88:31:9e:3a:15:
db:66:a1:fc:90:44:bd:66:a7:1b:11:6f:31:a7:bd:
2a:ee:ac:78:76:df:31:b7:ac:03:6d:8e:61:86:00:
9e:e2:e7:98:d0:2f:61:cb:32:3b:84:e9:78:20:10:
47:7b:a5:b7:f6:a9:b8:ae:88:b3:17:e2:0b:68:82:
7e:50:6d:55:5f:3f:69:95:f5:45:44:24:38:07:6c:
cb:16:71:e2:8c:7c:9b:1f:6e:10:0f:e1:c0:2c:ec:
44:2e:b8:5b:00:db:15:1d:0f:e9:b9:29:21:b5:c1:
49:db:a8:d3:31:72:67:f6:c3:49:68:b7:8f:72:a3:
9f:16:f6:2f:56:c5:47:ce:73:fe:f7:d7:68:3a:de:
5a:05:c3:32:fc:fc:04:bc:a0:9d:61:da:1f:23:d7:
c2:77:11:f2:cf:5d:f4:ca:93:ef:48:6d:25:9e:6b:
08:2a:3c:bd:09:1c:d6:09:f5:49:80:f6:4a:ef:6b:
0d:bd:6d:16:83:be:0b:a5:d5:08:ea:57:3d:ce:b0:
14:a0:93:e9:99:b3:b0:2b:63:90:f4:31:0d:de:6f:
bc:f1:4f:5d:e3:89:8f:7d:7d:9e:27:a2:a7:28:12:
55:fa:82:f6:84:85:76:e4:16:c2:4f:37:5d:2d:51:
40:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:EB:5D:FA:57:92:42:90:BB:8F:EC:45:B9:97:7F:C6:C7:F6:FA:37
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
7605
138985
sbgp-ipAddrBlock: critical
IPv4:
103.138.50.0/23
IPv6:
2001:df0:2c80::/48
Signature Algorithm: sha256WithRSAEncryption
a9:d2:12:06:ce:a1:a9:3e:58:67:6c:f7:f4:b1:a3:10:8c:6e:
7b:c2:a2:01:4a:eb:2e:77:f2:ea:3e:b1:79:b0:51:75:4f:25:
6f:66:46:78:d2:d8:c0:5f:b5:80:d3:d9:19:16:bd:23:8a:83:
0c:09:e7:82:e0:4e:4b:f3:c7:20:45:c2:02:66:0e:a6:21:51:
e7:87:47:85:16:e8:fe:df:66:55:f6:10:ed:63:67:5a:47:85:
91:a2:9e:a2:28:a5:11:84:0b:9c:b4:2e:f0:82:31:bb:37:2d:
e8:e4:58:4b:26:e2:0f:b5:36:a3:7b:4e:1d:b3:c9:60:0b:76:
48:74:93:57:ef:1d:22:ea:dd:2e:17:79:74:e6:58:c5:c6:49:
ca:5a:9b:2c:ce:1b:d0:50:bd:10:a4:d9:dc:a8:75:27:c5:71:
fc:3f:be:8b:9c:a4:2d:5e:39:43:0a:e1:9c:6d:a9:23:ee:92:
72:93:b6:42:a4:3d:af:2b:6d:24:56:5a:cb:19:54:e9:c9:92:
fb:a5:f7:75:58:04:db:42:df:b5:7c:78:9b:91:0e:12:de:84:
e4:73:3e:f1:a3:be:5f:61:ec:78:2a:c4:27:88:3b:a8:1a:1c:
68:c6:c1:fc:b9:d1:bd:eb:ad:92:4e:d8:77:33:bb:55:02:35:
25:38:ba:43
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIDAfDjMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDUwOTE5MzYzMloXDTI1MDczMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQThCMEIxMTAvBgNVBAUTKEU0RUI1REZBNTc5MjQyOTBCQjhGRUM0
NUI5OTc3RkM2QzdGNkZBMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC6RsHAdEhcJUaIMZ46FdtmofyQRL1mpxsRbzGnvSrurHh23zG3rANtjmGGAJ7i
55jQL2HLMjuE6XggEEd7pbf2qbiuiLMX4gtogn5QbVVfP2mV9UVEJDgHbMsWceKM
fJsfbhAP4cAs7EQuuFsA2xUdD+m5KSG1wUnbqNMxcmf2w0lot49yo58W9i9WxUfO
c/7312g63loFwzL8/AS8oJ1h2h8j18J3EfLPXfTKk+9IbSWeawgqPL0JHNYJ9UmA
9krvaw29bRaDvgul1QjqVz3OsBSgk+mZs7ArY5D0MQ3eb7zxT13jiY99fZ4noqco
ElX6gvaEhXbkFsJPN10tUUChAgMBAAGjggMkMIIDIDAdBgNVHQ4EFgQU5Otd+leS
QpC7j+xFuZd/xsf2+jcwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUE4QjBCLzVBRUI1RUIyRkNDNTExRTk5ODU4QTkxRUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFBOEIwQi81QUVCNUVCMkZDQzUxMUU5OTg1OEE5MUVDNEY5QUUwMi81T3RkLWxl
U1FwQzdqLXhGdVpkX3hzZjItamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQgBAf8EDzAN
oAswCQICHbUCAwIe6TAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAWeKMjAP
BAIAAjAJAwcAIAEN8CyAMA0GCSqGSIb3DQEBCwUAA4IBAQCp0hIGzqGpPlhnbPf0
saMQjG57wqIBSusud/LqPrF5sFF1TyVvZkZ40tjAX7WA09kZFr0jioMMCeeC4E5L
88cgRcICZg6mIVHnh0eFFuj+32ZV9hDtY2daR4WRop6iKKURhAuctC7wgjG7Ny3o
5FhLJuIPtTaje04ds8lgC3ZIdJNX7x0i6t0uF3l05ljFxknKWpsszhvQUL0QpNnc
qHUnxXH8P76LnKQtXjlDCuGcbakj7pJyk7ZCpD2vK20kVlrLGVTpyZL7pfd1WATb
Qt+1fHibkQ4S3oTkcz7xo75fYex4KsQniDuoGhxoxsH8udG9662STth3M7tVAjUl
OLpD
-----END CERTIFICATE-----
Generated at Mon Nov 25 18:48:59 2024 by rpki-client on console-ams.rpki-client.org