Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQFHuU3J1svowLDxrQwBg6YHfDQ.cer
File: BQFHuU3J1svowLDxrQwBg6YHfDQ.cer (raw, json)
Hash identifier: aKXf15su3wX2f8wH/D/Jy8ieeeMfDshWhMG/aGP7sHo=
Subject key identifier: 05:01:47:B9:4D:C9:D6:CB:E8:C0:B0:F1:AD:0C:01:83:A6:07:7C:34
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E5B7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/BQFHuU3J1svowLDxrQwBg6YHfDQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 21 Mar 2024 06:08:08 +0000
Certificate not after: Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources: AS: 131282
IP: 103.68.178.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 May 2024 08:07:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124343 (0x1e5b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 21 06:08:08 2024 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=A91629AA/serialNumber=050147B94DC9D6CBE8C0B0F1AD0C0183A6077C34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b7:0d:60:16:69:f4:2f:1b:e1:8e:72:c8:dc:
41:9c:ee:b9:23:6d:ef:7e:89:07:77:9f:87:65:40:
78:a7:6e:a1:b0:43:ed:44:38:a3:19:9b:41:93:90:
a9:f1:c4:8b:12:10:48:02:9e:be:9a:71:78:1d:7c:
7e:81:79:7e:67:ff:d4:c4:8f:b4:ab:18:24:3d:c9:
8b:66:ca:65:28:94:8e:2f:ab:49:77:30:39:ac:c3:
22:b3:5a:c7:57:c7:45:84:ac:7d:e0:78:99:65:88:
e8:b7:02:fe:93:2b:66:3e:d4:63:3d:f6:f7:83:3b:
35:73:55:1b:8c:70:e2:51:bd:f5:be:27:51:0e:af:
5e:f5:51:1f:ee:33:da:3f:ee:92:ad:9b:93:29:dd:
4e:2c:f3:00:f4:eb:89:27:14:1f:1c:a1:99:67:d0:
ae:31:cd:43:7d:60:fb:bf:b7:10:b5:8b:5d:2a:7b:
12:09:1d:ed:08:c5:25:23:f8:76:8f:09:46:a4:f0:
7e:1c:64:13:3d:32:34:60:f5:10:bc:76:ae:d7:80:
b4:44:11:4c:f6:8d:20:5d:7b:76:76:ec:1b:38:86:
ff:c6:ac:32:57:07:f8:fa:9f:57:78:e3:8c:5b:db:
62:f9:87:e3:db:c3:23:50:2b:c4:87:ba:36:05:7c:
88:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:01:47:B9:4D:C9:D6:CB:E8:C0:B0:F1:AD:0C:01:83:A6:07:7C:34
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/BQFHuU3J1svowLDxrQwBg6YHfDQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131282
sbgp-ipAddrBlock: critical
IPv4:
103.68.178.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:0b:86:22:09:62:12:7a:53:96:94:cc:51:85:28:a4:09:14:
aa:c0:66:1b:23:c3:27:b0:e5:27:36:68:e1:8f:f0:8d:58:d7:
56:77:b1:b4:12:56:e8:77:14:41:6d:6f:ac:74:43:a6:70:bd:
be:95:a6:b1:21:73:27:e2:2c:fa:e9:c9:69:4e:ec:18:65:31:
6f:90:03:43:05:43:f8:06:45:a5:cb:f1:bb:6c:3b:84:3e:b2:
b0:60:0b:ce:07:90:99:2c:ca:ff:b5:1e:06:43:93:33:4c:7f:
08:33:24:40:bf:13:a8:4d:ce:b4:73:ee:d4:85:f4:de:20:10:
05:b3:d1:08:c7:5f:a2:23:8c:99:df:64:a4:b3:48:1e:c5:70:
dc:e4:ae:db:98:63:d9:08:0b:1b:15:14:ff:ca:d4:60:cc:d0:
85:65:52:45:b9:c6:03:ee:e7:82:bf:a9:39:d2:a1:4a:bb:ec:
87:47:56:e1:36:4f:a4:fe:d4:49:f3:3b:fc:13:35:61:29:83:
20:5c:fc:18:71:a2:9c:69:27:d5:bd:e5:7b:50:de:0d:ae:34:
23:28:56:e3:02:9b:91:81:27:52:5c:21:b6:b9:d6:48:d1:1f:
17:6b:ea:83:79:25:cb:14:2f:10:fd:cf:b7:47:4a:fa:b9:6e:
50:43:3f:25
-----BEGIN CERTIFICATE-----
MIIGGjCCBQKgAwIBAgIDAeW3MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDMyMTA2MDgwOFoXDTI0MDkzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNjI5QUExMTAvBgNVBAUTKDA1MDE0N0I5NERDOUQ2Q0JFOEMwQjBG
MUFEMEMwMTgzQTYwNzdDMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC1tw1gFmn0LxvhjnLI3EGc7rkjbe9+iQd3n4dlQHinbqGwQ+1EOKMZm0GTkKnx
xIsSEEgCnr6acXgdfH6BeX5n/9TEj7SrGCQ9yYtmymUolI4vq0l3MDmswyKzWsdX
x0WErH3geJlliOi3Av6TK2Y+1GM99veDOzVzVRuMcOJRvfW+J1EOr171UR/uM9o/
7pKtm5Mp3U4s8wD064knFB8coZln0K4xzUN9YPu/txC1i10qexIJHe0IxSUj+HaP
CUak8H4cZBM9MjRg9RC8dq7XgLREEUz2jSBde3Z27Bs4hv/GrDJXB/j6n1d444xb
22L5h+PbwyNQK8SHujYFfIiFAgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUBQFHuU3J
1svowLDxrQwBg6YHfDQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTYyOUFBLzVGMDY5M0Y0RTc0OTExRUVCQzUyNkYyOUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE2MjlBQS81RjA2OTNGNEU3NDkxMUVFQkM1MjZGMjlDNEY5QUUwMi9CUUZIdVUz
SjFzdm93TER4clF3Qmc2WUhmRFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAgDSMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ0SyMA0GCSqG
SIb3DQEBCwUAA4IBAQA7C4YiCWISelOWlMxRhSikCRSqwGYbI8MnsOUnNmjhj/CN
WNdWd7G0ElbodxRBbW+sdEOmcL2+laaxIXMn4iz66clpTuwYZTFvkANDBUP4BkWl
y/G7bDuEPrKwYAvOB5CZLMr/tR4GQ5MzTH8IMyRAvxOoTc60c+7UhfTeIBAFs9EI
x1+iI4yZ32Sks0gexXDc5K7bmGPZCAsbFRT/ytRgzNCFZVJFucYD7ueCv6k50qFK
u+yHR1bhNk+k/tRJ8zv8EzVhKYMgXPwYcaKcaSfVveV7UN4NrjQjKFbjApuRgSdS
XCG2udZI0R8Xa+qDeSXLFC8Q/c+3R0r6uW5QQz8l
-----END CERTIFICATE-----
Generated at Thu May 2 08:52:20 2024 by rpki-client on console-fra.rpki-client.org