Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A72QmhoVpFA9-tWUw8bem5RgTmY.cer
File: A72QmhoVpFA9-tWUw8bem5RgTmY.cer (raw, json)
Hash identifier: eQ+cgYDAi1rJVEYD7uh8nq+HdPnZ8FgQqKqouoW0vvQ=
Subject key identifier: 03:BD:90:9A:1A:15:A4:50:3D:FA:D5:94:C3:C6:DE:9B:94:60:4E:66
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01CD23
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 27 Nov 2023 20:29:17 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: AS: 133759
IP: 43.249.220.0/22
IP: 103.41.80.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 May 2024 07:49:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118051 (0x1cd23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 27 20:29:17 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A91D873B/serialNumber=03BD909A1A15A4503DFAD594C3C6DE9B94604E66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:37:80:7a:23:11:97:3d:b6:55:9c:ae:98:08:
07:59:c5:64:ef:51:ae:36:cf:d5:70:ce:37:e6:a7:
06:8a:0f:ac:bd:62:bd:15:33:43:6f:bf:7a:8b:73:
a6:90:91:0b:3c:75:44:2b:92:a7:d6:7c:d0:2a:e4:
14:e7:63:d5:23:47:a3:a2:e9:6f:bc:3f:41:8c:ea:
e0:07:78:4a:88:e6:2e:39:31:34:4b:8c:c0:89:c8:
69:fa:f4:cc:53:f3:9d:fc:70:5e:bb:64:ee:bb:f9:
44:52:47:8a:ec:0c:32:91:f5:4a:15:33:4a:d6:54:
81:7c:18:b8:e0:a8:58:14:31:bd:71:90:bd:34:32:
68:b4:c4:87:db:4a:08:18:ae:3a:2b:ec:24:56:0f:
0b:42:43:95:a2:02:de:49:a5:39:4a:0e:c8:de:07:
61:d5:b2:89:ae:18:de:bd:ae:be:6b:0f:28:27:6d:
45:de:d3:c4:a4:c5:d9:6d:be:5f:2b:ab:92:78:6e:
1d:97:fc:2f:31:0c:3b:88:93:26:ca:c9:28:90:d4:
16:85:f4:5d:24:79:36:f2:dd:40:76:43:34:aa:de:
c6:d8:0c:ef:70:f0:b1:6f:46:eb:13:18:39:92:c5:
dd:5a:f0:f7:bd:70:0a:4c:5d:20:b7:ae:f1:79:e8:
7d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:BD:90:9A:1A:15:A4:50:3D:FA:D5:94:C3:C6:DE:9B:94:60:4E:66
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133759
sbgp-ipAddrBlock: critical
IPv4:
43.249.220.0/22
103.41.80.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:f3:17:66:98:c2:e9:0b:95:ed:fd:65:80:43:9a:53:2a:6a:
9b:7c:05:bf:06:9d:97:37:4d:98:8d:14:54:74:86:86:c7:a2:
a5:61:ee:14:1b:b9:20:73:a7:81:8c:6f:e9:ea:f9:24:75:4f:
ea:33:0e:e6:b7:30:43:1a:3a:e7:9a:db:f8:3e:44:fb:4d:00:
3b:f3:c5:09:cd:b8:70:7d:19:5a:be:24:3e:0c:75:5f:72:e7:
1d:61:b8:14:9c:b3:76:1d:a5:62:05:a3:68:a8:d8:54:b1:c2:
42:d1:e6:73:f6:e7:40:2b:dd:b3:ff:b3:4e:73:37:b0:e8:41:
88:88:7a:33:59:bf:67:9b:00:21:1a:24:69:6b:4c:7a:2a:44:
a4:f6:b1:ae:fb:d9:02:4a:a6:f5:36:99:06:a6:e1:a4:5b:4e:
f6:26:5f:aa:41:52:72:90:5d:43:19:b4:2e:d2:fe:38:86:be:
83:76:f6:1e:f3:1a:cb:8b:52:73:5f:84:27:82:ba:b6:d2:e3:
4f:d2:f9:7f:e0:79:3a:0a:b2:0b:68:44:f6:b3:b0:d2:59:9e:
89:80:18:71:8e:78:45:1e:aa:f7:07:fb:15:5b:f4:84:02:5d:
12:7a:1d:a7:33:a8:f5:fc:fe:d6:d8:b0:80:93:e6:ff:56:04:
33:51:e6:6a
-----BEGIN CERTIFICATE-----
MIIGIDCCBQigAwIBAgIDAc0jMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMTEyNzIwMjkxN1oXDTI1MDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRDg3M0IxMTAvBgNVBAUTKDAzQkQ5MDlBMUExNUE0NTAzREZBRDU5
NEMzQzZERTlCOTQ2MDRFNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDJN4B6IxGXPbZVnK6YCAdZxWTvUa42z9VwzjfmpwaKD6y9Yr0VM0Nvv3qLc6aQ
kQs8dUQrkqfWfNAq5BTnY9UjR6Oi6W+8P0GM6uAHeEqI5i45MTRLjMCJyGn69MxT
8538cF67ZO67+URSR4rsDDKR9UoVM0rWVIF8GLjgqFgUMb1xkL00Mmi0xIfbSggY
rjor7CRWDwtCQ5WiAt5JpTlKDsjeB2HVsomuGN69rr5rDygnbUXe08Skxdltvl8r
q5J4bh2X/C8xDDuIkybKySiQ1BaF9F0keTby3UB2QzSq3sbYDO9w8LFvRusTGDmS
xd1a8Pe9cApMXSC3rvF56H1lAgMBAAGjggMVMIIDETAdBgNVHQ4EFgQUA72QmhoV
pFA9+tWUw8bem5RgTmYwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUQ4NzNCLzRBMTZCQkRBQzYwNDExRUNBQTk0NTk0QkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFEODczQi80QTE2QkJEQUM2MDQxMUVDQUE5NDU5NEJDNEY5QUUwMi9BNzJRbWhv
VnBGQTktdFdVdzhiZW01UmdUbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAgp/MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCK/ncAwQCZylQ
MA0GCSqGSIb3DQEBCwUAA4IBAQCi8xdmmMLpC5Xt/WWAQ5pTKmqbfAW/Bp2XN02Y
jRRUdIaGx6KlYe4UG7kgc6eBjG/p6vkkdU/qMw7mtzBDGjrnmtv4PkT7TQA788UJ
zbhwfRlaviQ+DHVfcucdYbgUnLN2HaViBaNoqNhUscJC0eZz9udAK92z/7NOczew
6EGIiHozWb9nmwAhGiRpa0x6KkSk9rGu+9kCSqb1NpkGpuGkW072Jl+qQVJykF1D
GbQu0v44hr6DdvYe8xrLi1JzX4Qngrq20uNP0vl/4Hk6CrILaET2s7DSWZ6JgBhx
jnhFHqr3B/sVW/SEAl0Seh2nM6j1/P7W2LCAk+b/VgQzUeZq
-----END CERTIFICATE-----
Generated at Fri Apr 26 11:02:46 2024 by rpki-client on console-ams.rpki-client.org