Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.cer
File: 7RHrTDSAQZnqd1AO3bvu4Qt1Sas.cer (raw, json)
Hash identifier: tRLGvCepNuJLWEYPNS+yXnYHZFkzXraYZYwstKYoRWM=
Subject key identifier: ED:11:EB:4C:34:80:41:99:EA:77:50:0E:DD:BB:EE:E1:0B:75:49:AB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E024
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 22 Feb 2024 06:41:32 +0000
Certificate not after: Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources: AS: 139613
AS: 139646
IP: 103.143.14.0/23
IP: 2407:21c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 May 2024 08:07:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122916 (0x1e024)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 22 06:41:32 2024 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=A91E96BC/serialNumber=ED11EB4C34804199EA77500EDDBBEEE10B7549AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ff:4e:6e:70:b3:16:44:2e:87:21:c6:ad:0c:
6e:91:f7:13:ac:63:13:30:5a:f6:90:71:4e:8f:36:
40:78:54:2a:13:b7:3f:b2:e1:d6:27:ee:b5:41:a3:
4c:03:28:56:22:27:97:31:e1:76:5d:53:1c:15:c4:
91:14:53:8b:88:ba:be:d1:a5:b8:92:c0:f3:bc:3f:
fb:8c:66:a5:0d:28:7f:9a:32:f2:87:5f:c9:dc:d6:
84:a0:ed:ea:1b:b9:8d:3b:34:a2:c2:e1:97:be:cf:
a4:2f:a3:da:cd:cc:69:8a:b6:96:d2:be:ec:1f:ef:
a1:f0:6d:3e:d9:d9:e7:92:6f:8e:c7:4a:77:cf:33:
2e:0b:e3:07:46:d9:32:1a:c0:b8:fa:16:97:cb:10:
03:a8:9d:ed:f8:77:09:44:6d:d0:f8:85:60:b9:60:
9f:7f:9e:31:59:67:7a:74:d8:c5:1c:ad:c9:12:1a:
46:00:f9:30:33:56:cb:60:d4:ae:e3:fe:d7:14:28:
d9:33:35:ca:3e:48:5b:b8:77:39:d8:52:62:8c:a9:
e3:41:a4:9e:0f:69:0a:7b:e6:73:4b:5e:56:8d:c7:
d2:90:68:25:c0:19:fb:00:4d:c0:53:40:7b:ed:5b:
bb:df:6f:ff:cd:07:f5:86:10:17:6b:55:c8:8c:20:
20:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:11:EB:4C:34:80:41:99:EA:77:50:0E:DD:BB:EE:E1:0B:75:49:AB
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139613
139646
sbgp-ipAddrBlock: critical
IPv4:
103.143.14.0/23
IPv6:
2407:21c0::/32
Signature Algorithm: sha256WithRSAEncryption
7e:c5:dd:eb:3a:6b:22:2a:57:e9:80:66:52:ff:cd:d0:d2:d0:
20:cc:43:e6:c4:62:98:0b:c2:39:00:1e:d1:ae:25:c6:15:16:
df:da:4e:6d:19:5c:19:2b:38:e4:8a:45:24:ad:92:0f:0f:d9:
48:24:ec:3b:8b:70:70:b3:47:0c:14:e5:51:2f:8c:41:e8:d3:
75:b6:61:33:17:02:bf:50:9b:06:3e:5d:8c:bb:5a:fa:4a:bf:
d4:36:45:e4:97:09:91:1b:7f:e5:7b:0d:e7:e8:b4:99:fe:b7:
cc:ed:9e:59:47:29:dd:23:7d:23:b0:f8:39:6a:38:cd:b5:9f:
75:1f:33:8f:dd:76:7d:fb:79:4a:97:72:cd:a5:ea:bf:90:8d:
32:95:34:df:23:ca:bc:b5:89:b7:1b:9e:4d:8c:c0:c2:99:2a:
f9:da:ee:c3:e2:a3:13:75:3b:c6:49:32:96:e0:79:9e:f0:ea:
8d:39:86:e7:ce:14:76:68:fb:66:c7:05:12:e6:84:2a:54:dd:
61:8a:28:21:1d:54:bb:8c:56:21:86:6e:8c:4e:2d:6a:8f:9b:
64:0e:dd:38:06:ae:0a:c2:77:b3:be:c1:a1:e7:2e:ed:db:9a:
bc:1b:f2:79:b9:e8:4c:0d:85:f9:ca:4e:81:de:15:7f:d6:f1:
a6:49:45:eb
-----BEGIN CERTIFICATE-----
MIIGLjCCBRagAwIBAgIDAeAkMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDIyMjA2NDEzMloXDTI0MTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRTk2QkMxMTAvBgNVBAUTKEVEMTFFQjRDMzQ4MDQxOTlFQTc3NTAw
RUREQkJFRUUxMEI3NTQ5QUIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCr/05ucLMWRC6HIcatDG6R9xOsYxMwWvaQcU6PNkB4VCoTtz+y4dYn7rVBo0wD
KFYiJ5cx4XZdUxwVxJEUU4uIur7RpbiSwPO8P/uMZqUNKH+aMvKHX8nc1oSg7eob
uY07NKLC4Ze+z6Qvo9rNzGmKtpbSvuwf76HwbT7Z2eeSb47HSnfPMy4L4wdG2TIa
wLj6FpfLEAOone34dwlEbdD4hWC5YJ9/njFZZ3p02MUcrckSGkYA+TAzVstg1K7j
/tcUKNkzNco+SFu4dznYUmKMqeNBpJ4PaQp75nNLXlaNx9KQaCXAGfsATcBTQHvt
W7vfb//NB/WGEBdrVciMICALAgMBAAGjggMjMIIDHzAdBgNVHQ4EFgQU7RHrTDSA
QZnqd1AO3bvu4Qt1SaswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUU5NkJDLzY2ODdFRjIyRDE0RDExRUU5REI0MTgwRkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFFOTZCQy82Njg3RUYyMkQxNEQxMUVFOURCNDE4MEZDNEY5QUUwMi83UkhyVERT
QVFabnFkMUFPM2J2dTRRdDFTYXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO
oAwwCgIDAiFdAgMCIX4wLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAFnjw4w
DQQCAAIwBwMFACQHIcAwDQYJKoZIhvcNAQELBQADggEBAH7F3es6ayIqV+mAZlL/
zdDS0CDMQ+bEYpgLwjkAHtGuJcYVFt/aTm0ZXBkrOOSKRSStkg8P2Ugk7DuLcHCz
RwwU5VEvjEHo03W2YTMXAr9QmwY+XYy7WvpKv9Q2ReSXCZEbf+V7DefotJn+t8zt
nllHKd0jfSOw+DlqOM21n3UfM4/ddn37eUqXcs2l6r+QjTKVNN8jyry1ibcbnk2M
wMKZKvna7sPioxN1O8ZJMpbgeZ7w6o05hufOFHZo+2bHBRLmhCpU3WGKKCEdVLuM
ViGGboxOLWqPm2QO3TgGrgrCd7O+waHnLu3bmrwb8nm56EwNhfnKToHeFX/W8aZJ
Res=
-----END CERTIFICATE-----
Generated at Thu May 2 08:52:16 2024 by rpki-client on console-fra.rpki-client.org