Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7VRR-GERmCtnraCkwGxR1KCAAXA.cer
File: 7VRR-GERmCtnraCkwGxR1KCAAXA.cer (raw, json)
Hash identifier: vKn1dWDagLLynMlMQ4wxYcclHyPj4hbuKlmUfpXohBM=
Subject key identifier: ED:54:51:F8:61:11:98:2B:67:AD:A0:A4:C0:6C:51:D4:A0:80:01:70
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 020D74
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 13 Sep 2024 14:41:26 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 58684
IP: 103.14.204.0/22
IP: 2407:980::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134516 (0x20d74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 13 14:41:26 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A9154786/serialNumber=ED5451F86111982B67ADA0A4C06C51D4A0800170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fe:08:6d:e9:64:20:8b:2f:db:46:f3:9b:48:
73:72:1d:23:5a:50:99:ad:91:3f:36:9a:c9:e6:e1:
a3:5c:f5:22:49:14:a6:74:f4:4d:8d:c1:97:6c:99:
31:11:e9:3a:85:8d:14:f0:e8:b6:24:f0:72:a8:bb:
31:a9:29:c5:42:dc:43:fd:80:78:16:9a:3f:97:50:
44:10:9e:2d:2e:89:7f:ab:18:96:d3:ff:42:e9:18:
7a:79:a2:82:08:16:16:ff:ed:9f:ce:73:cc:11:8e:
1a:2a:50:7f:b3:98:a8:f7:cc:2f:78:cf:7c:01:db:
f6:b3:c9:62:34:88:e4:bf:1f:16:48:f4:78:5f:28:
c8:6a:a2:88:b3:ba:5f:d5:01:d8:0b:19:73:cb:63:
70:ca:07:2c:47:2e:fb:23:1b:29:f6:80:43:4f:d0:
f9:e8:30:5f:52:c2:ff:ff:7f:d5:8c:02:08:29:6a:
1a:2e:33:82:44:0f:84:4f:e9:a6:74:34:5c:b5:8a:
55:48:3f:be:de:31:95:a9:3c:21:04:7a:be:c4:9c:
c6:c7:d6:fb:e4:b4:df:ee:e9:fd:db:de:e7:4a:9c:
8b:3b:d6:d8:56:28:e5:89:a8:bf:cc:a5:a7:9f:20:
69:a8:d9:c6:3e:f1:20:98:70:5b:16:6c:0a:9d:9a:
a9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:54:51:F8:61:11:98:2B:67:AD:A0:A4:C0:6C:51:D4:A0:80:01:70
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58684
sbgp-ipAddrBlock: critical
IPv4:
103.14.204.0/22
IPv6:
2407:980::/32
Signature Algorithm: sha256WithRSAEncryption
c4:ec:b9:d9:d1:5d:cc:60:32:77:4a:cb:80:de:ff:15:0f:da:
f4:09:aa:f1:ee:ff:43:c7:0a:1c:51:2b:03:26:63:5e:eb:e6:
e0:19:5e:16:6d:03:5d:4d:4d:bb:4c:a6:7c:58:f8:22:64:27:
dd:34:9a:54:54:b8:55:a3:a9:9b:8b:19:70:0a:9b:2e:ed:78:
22:d8:cb:44:df:15:34:f7:c6:fd:69:13:f2:77:6a:71:32:bf:
07:8b:2d:6e:2e:0d:48:b6:f9:09:84:13:5f:0f:f2:18:74:4e:
78:12:3a:82:92:47:e5:42:89:69:a0:e7:5d:00:e2:35:2a:b8:
89:e9:d9:15:9c:6f:ab:5a:b3:94:cc:9e:09:77:f5:64:6c:c7:
e3:cb:dd:66:5b:1a:0a:b5:0d:86:93:3b:24:1d:3e:ae:4d:65:
90:0f:9d:76:e8:ab:c9:ed:14:2e:c2:df:aa:4d:c9:53:e2:45:
a9:78:3e:30:99:6e:af:65:c4:fc:d5:03:a3:02:94:0b:b7:11:
75:41:b1:21:90:e6:f7:28:0b:cb:f1:9d:6e:b2:4c:e8:1e:5a:
27:5a:d5:17:8c:a8:86:41:a0:34:78:10:83:98:98:55:7a:71:
e4:63:96:13:66:69:5b:cb:09:3f:be:d5:4a:c3:fc:f0:51:6f:
1c:1c:f8:87
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAg10MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDkxMzE0NDEyNloXDTI1MTIwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNTQ3ODYxMTAvBgNVBAUTKEVENTQ1MUY4NjExMTk4MkI2N0FEQTBB
NEMwNkM1MUQ0QTA4MDAxNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDS/ght6WQgiy/bRvObSHNyHSNaUJmtkT82msnm4aNc9SJJFKZ09E2NwZdsmTER
6TqFjRTw6LYk8HKouzGpKcVC3EP9gHgWmj+XUEQQni0uiX+rGJbT/0LpGHp5ooII
Fhb/7Z/Oc8wRjhoqUH+zmKj3zC94z3wB2/azyWI0iOS/HxZI9HhfKMhqooizul/V
AdgLGXPLY3DKByxHLvsjGyn2gENP0PnoMF9Swv//f9WMAggpahouM4JED4RP6aZ0
NFy1ilVIP77eMZWpPCEEer7EnMbH1vvktN/u6f3b3udKnIs71thWKOWJqL/Mpaef
IGmo2cY+8SCYcFsWbAqdmqnpAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQU7VRR+GER
mCtnraCkwGxR1KCAAXAwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTU0Nzg2L0VFQ0Q0NjA0RTkyQjExRTI4N0YzQkQ5NDU5MTFFQTMyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE1NDc4Ni9FRUNENDYwNEU5MkIxMUUyODdGM0JEOTQ1OTExRUEzMi83VlJSLUdF
Um1DdG5yYUNrd0d4UjFLQ0FBWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAOU8MC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZw7MMA0EAgAC
MAcDBQAkBwmAMA0GCSqGSIb3DQEBCwUAA4IBAQDE7LnZ0V3MYDJ3SsuA3v8VD9r0
Carx7v9DxwocUSsDJmNe6+bgGV4WbQNdTU27TKZ8WPgiZCfdNJpUVLhVo6mbixlw
Cpsu7Xgi2MtE3xU098b9aRPyd2pxMr8Hiy1uLg1ItvkJhBNfD/IYdE54EjqCkkfl
QolpoOddAOI1KriJ6dkVnG+rWrOUzJ4Jd/VkbMfjy91mWxoKtQ2GkzskHT6uTWWQ
D5126KvJ7RQuwt+qTclT4kWpeD4wmW6vZcT81QOjApQLtxF1QbEhkOb3KAvL8Z1u
skzoHlonWtUXjKiGQaA0eBCDmJhVenHkY5YTZmlbywk/vtVKw/zwUW8cHPiH
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:03:11 2024 by rpki-client on console-fra.rpki-client.org