Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5sRskdEtWFoSsFVpYh3uGtP4kI4.cer
File: 5sRskdEtWFoSsFVpYh3uGtP4kI4.cer (raw, json)
Hash identifier: SGeH5r1XNycflK3COTqtPGKeHZl5cBSZAXNXeCgsqQ8=
Subject key identifier: E6:C4:6C:91:D1:2D:58:5A:12:B0:55:69:62:1D:EE:1A:D3:F8:90:8E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01C5F0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 25 Oct 2023 06:09:49 +0000
Certificate not after: Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources: IP: 103.130.12.0/22
IP: 2403:ae40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 May 2024 08:07:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116208 (0x1c5f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 25 06:09:49 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=A917A362/serialNumber=E6C46C91D12D585A12B05569621DEE1AD3F8908E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e4:8e:43:d3:3a:62:d4:f1:a7:bd:08:59:d4:
d7:53:01:9a:cc:80:d5:c2:76:ad:11:1e:62:22:ab:
4f:2d:ba:a0:f7:06:93:be:31:32:f1:41:d7:58:6f:
34:14:7e:62:42:65:d6:93:28:26:16:e6:ea:53:0f:
c9:81:31:98:00:3a:9a:e4:a0:1c:7f:8f:13:85:9d:
7d:15:ff:83:ab:25:4a:7f:07:28:a5:9c:38:23:aa:
42:01:e4:93:b9:64:f2:c3:24:71:66:3e:2b:a4:ce:
07:39:58:54:76:82:1f:de:67:6c:b6:b7:87:d0:fc:
8b:b0:f5:19:88:18:ff:0c:0d:3d:b1:d2:22:b6:8e:
fb:8a:dc:4c:c1:03:d7:39:39:aa:1a:a1:4a:f7:30:
19:6c:e6:0a:78:c7:04:8a:bc:62:56:bf:31:5d:e5:
bd:9c:90:94:f3:5a:04:ac:ce:88:e2:b1:64:3c:74:
01:9e:7a:ef:d8:fc:92:23:80:23:05:65:09:cc:1e:
ab:0a:1f:54:3f:e1:89:02:3c:f2:2e:f7:8a:f7:1b:
64:b5:82:b6:f0:24:75:e7:13:a9:f2:0c:16:4f:0f:
24:e2:a8:3d:67:0e:59:2b:f5:61:64:79:50:de:9d:
1d:3c:aa:21:cc:f5:9d:45:54:43:af:71:c3:96:49:
b4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C4:6C:91:D1:2D:58:5A:12:B0:55:69:62:1D:EE:1A:D3:F8:90:8E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.12.0/22
IPv6:
2403:ae40::/32
Signature Algorithm: sha256WithRSAEncryption
67:f3:ac:8d:f5:ba:60:c7:7d:4d:a7:0f:c8:a3:f2:b3:0c:07:
90:d3:15:3b:69:e6:63:58:d8:6e:4f:a4:95:84:7d:84:0c:b7:
31:9f:42:cc:12:c0:aa:a3:fb:23:00:6d:89:e1:d4:4f:21:36:
03:74:7c:3f:a2:ac:e5:c0:07:1f:d8:78:21:80:9e:78:4a:37:
e0:4b:b7:30:c6:9f:7e:d1:e4:5d:7b:52:81:da:54:08:56:58:
59:36:48:1e:cd:10:7b:f6:03:58:f3:4c:74:eb:48:0b:c3:48:
25:a8:fb:a3:09:4b:01:4d:db:62:74:02:40:31:a0:d6:2b:86:
8c:b4:93:24:5b:01:d1:0f:79:4d:89:f0:76:a7:01:95:85:b3:
2a:ea:87:15:1f:7f:f6:7e:99:03:35:08:5f:30:31:fa:79:50:
5c:e1:d4:d1:af:10:41:ca:9e:8d:3a:d1:e1:4f:b5:92:71:e0:
95:29:29:58:df:b2:8b:32:15:77:60:4a:65:4d:39:98:68:c0:
62:05:c0:14:ad:55:f6:66:ee:89:9e:50:a2:15:d3:15:8c:ef:
e6:db:13:ae:b5:1c:11:6b:91:bb:d0:71:4a:3e:79:0b:36:25:
05:31:58:d3:e8:59:18:58:66:02:c9:0f:07:61:bb:6c:8e:d1:
39:fa:67:86
-----BEGIN CERTIFICATE-----
MIIGDTCCBPWgAwIBAgIDAcXwMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMTAyNTA2MDk0OVoXDTI0MTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxN0EzNjIxMTAvBgNVBAUTKEU2QzQ2QzkxRDEyRDU4NUExMkIwNTU2
OTYyMURFRTFBRDNGODkwOEUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC/5I5D0zpi1PGnvQhZ1NdTAZrMgNXCdq0RHmIiq08tuqD3BpO+MTLxQddYbzQU
fmJCZdaTKCYW5upTD8mBMZgAOprkoBx/jxOFnX0V/4OrJUp/ByilnDgjqkIB5JO5
ZPLDJHFmPiukzgc5WFR2gh/eZ2y2t4fQ/Iuw9RmIGP8MDT2x0iK2jvuK3EzBA9c5
OaoaoUr3MBls5gp4xwSKvGJWvzFd5b2ckJTzWgSszojisWQ8dAGeeu/Y/JIjgCMF
ZQnMHqsKH1Q/4YkCPPIu94r3G2S1grbwJHXnE6nyDBZPDyTiqD1nDlkr9WFkeVDe
nR08qiHM9Z1FVEOvccOWSbSRAgMBAAGjggMCMIIC/jAdBgNVHQ4EFgQU5sRskdEt
WFoSsFVpYh3uGtP4kI4wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTdBMzYyLzdDQkE0QzRDNzI2RTExRUU5RkUzNTA2MUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE3QTM2Mi83Q0JBNEM0QzcyNkUxMUVFOUZFMzUwNjFDNEY5QUUwMi81c1Jza2RF
dFdGb1NzRlZwWWgzdUd0UDRrSTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8EHzAd
MAwEAgABMAYDBAJnggwwDQQCAAIwBwMFACQDrkAwDQYJKoZIhvcNAQELBQADggEB
AGfzrI31umDHfU2nD8ij8rMMB5DTFTtp5mNY2G5PpJWEfYQMtzGfQswSwKqj+yMA
bYnh1E8hNgN0fD+irOXABx/YeCGAnnhKN+BLtzDGn37R5F17UoHaVAhWWFk2SB7N
EHv2A1jzTHTrSAvDSCWo+6MJSwFN22J0AkAxoNYrhoy0kyRbAdEPeU2J8HanAZWF
syrqhxUff/Z+mQM1CF8wMfp5UFzh1NGvEEHKno060eFPtZJx4JUpKVjfsosyFXdg
SmVNOZhowGIFwBStVfZm7omeUKIV0xWM7+bbE661HBFrkbvQcUo+eQs2JQUxWNPo
WRhYZgLJDwdhu2yO0Tn6Z4Y=
-----END CERTIFICATE-----
Generated at Thu May 2 10:18:11 2024 by rpki-client on console-ams.rpki-client.org