Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A47Arrg1DJ2n5vILJtLzULpsJAk.cer
File: A47Arrg1DJ2n5vILJtLzULpsJAk.cer (raw, json)
Hash identifier: v7JZnTU3xPJCJXltGghsMw2dynxNqoNBOidAJIrQYd4=
Subject key identifier: 03:8E:C0:AE:B8:35:0C:9D:A7:E6:F2:0B:26:D2:F3:50:BA:6C:24:09
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0191F9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 20 Mar 2023 10:19:31 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 134122
IP: 103.105.122.0/23
IP: 2400:eb20::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 May 2024 02:50:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102905 (0x191f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 20 10:19:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=A911B8D9/serialNumber=038EC0AEB8350C9DA7E6F20B26D2F350BA6C2409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:25:ec:e3:a7:e8:02:96:e9:16:fe:79:91:dc:
45:85:aa:f4:1d:c0:75:2a:9a:15:bd:d3:79:54:60:
f5:dc:eb:f0:a9:4b:fd:31:3c:7a:ab:9e:fe:0c:c2:
53:3f:91:74:95:b0:32:a0:c0:ca:02:4e:f4:7d:fd:
24:9e:67:ec:e2:06:13:16:55:b5:df:49:77:4d:ac:
ac:9a:5c:70:5b:bf:bb:e1:fd:aa:b2:28:1f:59:d3:
f0:25:20:57:28:d5:d8:4d:1d:90:73:18:2c:8a:0d:
c1:96:19:f3:bf:b3:c7:29:1b:17:de:9a:13:28:90:
ad:78:50:b9:02:28:34:fc:70:52:cd:47:d5:de:e0:
c9:85:17:37:a8:a3:49:6c:fc:09:37:ca:33:9b:26:
32:19:54:71:48:95:16:aa:fe:c5:a6:8a:54:56:5d:
4d:4b:a0:fc:fa:96:0d:36:53:d3:30:cc:53:ab:61:
c6:3c:50:a9:1b:12:8b:ef:7d:56:70:a7:df:ef:6c:
31:4b:03:f6:93:9a:19:39:31:2d:bd:43:77:bd:b0:
29:46:93:cd:ea:0d:d8:75:85:84:f3:91:ab:04:cd:
9d:a0:4a:3d:1c:05:bf:6f:a9:ac:7f:db:76:13:8c:
b7:74:df:6b:ea:8e:ff:42:40:78:28:a3:d8:de:d9:
65:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:8E:C0:AE:B8:35:0C:9D:A7:E6:F2:0B:26:D2:F3:50:BA:6C:24:09
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
134122
sbgp-ipAddrBlock: critical
IPv4:
103.105.122.0/23
IPv6:
2400:eb20::/32
Signature Algorithm: sha256WithRSAEncryption
02:53:d4:ea:02:76:5e:7a:32:69:29:7f:8b:24:30:67:f6:9b:
60:2b:49:75:ee:dd:0d:2f:32:ed:88:3d:df:4b:71:f7:ea:f1:
9d:18:10:bc:38:74:68:80:c6:fe:77:f9:f1:f9:3c:bc:30:7a:
1b:13:3e:b6:25:61:8d:f8:3b:36:e5:1b:f7:36:12:56:4a:c8:
b1:d9:58:84:b6:ac:16:1d:63:53:a9:43:a5:4e:c9:45:83:d1:
ce:52:e5:e4:e7:3d:19:64:9c:84:14:9a:8c:91:5a:dc:b8:b8:
1e:26:b0:a0:0c:a0:ae:91:3f:a7:df:ca:fc:50:f3:af:71:32:
79:11:b5:a1:6f:cf:df:fe:86:12:32:e2:e1:26:fd:d0:24:20:
1c:e4:84:e1:0b:1b:4a:fa:65:d2:f5:f7:e5:d2:e6:6e:3d:02:
1a:e6:13:44:54:31:5a:d2:f2:28:c8:cf:c3:51:45:f5:d5:c9:
03:a3:5d:c1:c4:10:91:b6:99:77:87:25:a7:56:46:8b:ac:b4:
8c:7d:eb:42:8b:f1:b9:83:82:81:23:80:61:46:f8:f1:0f:1b:
2f:95:22:08:b2:3f:7e:b4:cc:52:5b:1b:cd:be:20:3f:9f:a5:
01:94:b0:6d:1b:fc:a5:2a:36:54:d6:58:cd:44:c7:d8:a8:96:
89:0e:31:ee
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAZH5MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMDMyMDEwMTkzMVoXDTI0MDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMUI4RDkxMTAvBgNVBAUTKDAzOEVDMEFFQjgzNTBDOURBN0U2RjIw
QjI2RDJGMzUwQkE2QzI0MDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDJJezjp+gClukW/nmR3EWFqvQdwHUqmhW903lUYPXc6/CpS/0xPHqrnv4MwlM/
kXSVsDKgwMoCTvR9/SSeZ+ziBhMWVbXfSXdNrKyaXHBbv7vh/aqyKB9Z0/AlIFco
1dhNHZBzGCyKDcGWGfO/s8cpGxfemhMokK14ULkCKDT8cFLNR9Xe4MmFFzeoo0ls
/Ak3yjObJjIZVHFIlRaq/sWmilRWXU1LoPz6lg02U9MwzFOrYcY8UKkbEovvfVZw
p9/vbDFLA/aTmhk5MS29Q3e9sClGk83qDdh1hYTzkasEzZ2gSj0cBb9vqax/23YT
jLd032vqjv9CQHgoo9je2WWJAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUA47Arrg1
DJ2n5vILJtLzULpsJAkwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTFCOEQ5L0FGNUNEQjA0QzcwODExRURBODc0QUU4NUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTExQjhEOS9BRjVDREIwNEM3MDgxMUVEQTg3NEFFODVDNEY5QUUwMi9BNDdBcnJn
MURKMm41dklMSnRMelVMcHNKQWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAgvqMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZ2l6MA0EAgAC
MAcDBQAkAOsgMA0GCSqGSIb3DQEBCwUAA4IBAQACU9TqAnZeejJpKX+LJDBn9ptg
K0l17t0NLzLtiD3fS3H36vGdGBC8OHRogMb+d/nx+Ty8MHobEz62JWGN+Ds25Rv3
NhJWSsix2ViEtqwWHWNTqUOlTslFg9HOUuXk5z0ZZJyEFJqMkVrcuLgeJrCgDKCu
kT+n38r8UPOvcTJ5EbWhb8/f/oYSMuLhJv3QJCAc5IThCxtK+mXS9ffl0uZuPQIa
5hNEVDFa0vIoyM/DUUX11ckDo13BxBCRtpl3hyWnVkaLrLSMfetCi/G5g4KBI4Bh
RvjxDxsvlSIIsj9+tMxSWxvNviA/n6UBlLBtG/ylKjZU1ljNRMfYqJaJDjHu
-----END CERTIFICATE-----
Generated at Wed Apr 24 04:47:43 2024 by rpki-client on console-fra.rpki-client.org