Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjfskegn4WnIYrRM2Hax03ZBNzQ.cer
File: Cjfskegn4WnIYrRM2Hax03ZBNzQ.cer (raw, json)
Hash identifier: 5LzQk3Zz1BQo4Bt/w6+rmBX3zT5JSi7N4pxjTxXhBbk=
Subject key identifier: 0A:37:EC:91:E8:27:E1:69:C8:62:B4:4C:D8:76:B1:D3:76:41:37:34
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 020CC2
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 09 Sep 2024 21:07:33 +0000
Certificate not after: Fri 31 Oct 2025 00:00:00 +0000
Subordinate resources: AS: 137985
IP: 103.119.100.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Dec 2024 01:13:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134338 (0x20cc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 9 21:07:33 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=A91CC1BE/serialNumber=0A37EC91E827E169C862B44CD876B1D376413734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b6:48:bd:64:9a:09:31:04:65:7a:d0:54:4e:
d0:3a:c0:67:9b:a3:b4:7c:72:c1:22:55:8c:bb:c1:
0a:e3:f2:1a:9d:20:33:99:ff:83:6c:b6:1d:e3:b4:
b4:6a:79:45:cf:64:c0:12:24:c0:26:65:e8:cf:59:
ff:23:c5:55:2f:c0:c7:09:74:0b:f4:69:85:95:da:
b5:2a:1a:76:bc:dd:32:d9:13:78:82:3c:2d:17:78:
14:40:34:8b:58:6f:61:69:c2:0d:33:ed:dd:63:65:
5b:60:b8:4d:9f:a7:c1:8d:6a:ac:3a:65:46:92:75:
d9:49:90:ae:d6:0c:75:8a:88:44:bd:41:fd:5e:13:
fb:80:5d:44:07:55:63:3f:f8:38:45:ee:b8:a0:54:
5c:85:b0:68:3c:2b:60:2a:7f:37:31:3c:dc:05:55:
c9:1b:e6:ce:9f:68:7d:ab:24:34:2b:8e:12:b8:e2:
1e:b6:a3:59:33:c9:76:d1:ea:74:87:89:56:88:37:
aa:64:f9:19:7e:5b:a3:d5:e1:d2:68:89:84:a8:d5:
07:22:c0:0c:91:7d:8d:2f:d3:6c:e9:86:f9:6e:0b:
fb:dd:9c:d2:9d:86:68:47:be:a8:2f:24:06:ec:32:
5f:f4:df:4d:49:fb:a6:6e:44:ee:5e:81:9e:58:95:
a9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:37:EC:91:E8:27:E1:69:C8:62:B4:4C:D8:76:B1:D3:76:41:37:34
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137985
sbgp-ipAddrBlock: critical
IPv4:
103.119.100.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:58:f1:ab:23:f3:f8:16:2e:d2:16:bb:93:75:02:9b:52:0b:
1c:4d:99:ef:b6:a8:2d:b4:c6:d5:03:89:8e:cd:bc:8c:29:70:
2f:6f:78:93:3e:53:fe:99:e8:62:6e:5f:fa:0a:fa:58:63:42:
3e:5a:04:b4:32:5d:a4:26:d1:8d:9a:b8:30:c8:07:b2:d3:9d:
4c:81:06:2d:69:1b:42:46:56:3d:34:db:12:f8:55:91:6f:fb:
c3:b9:e5:50:a4:22:a1:f7:da:00:35:13:61:ba:94:54:bb:9e:
24:e4:18:ed:9e:e7:a7:98:6f:74:cb:9e:06:3e:26:bc:b9:0e:
43:28:85:41:0c:b3:d5:66:3c:5f:bd:c1:f8:b3:c1:02:59:72:
5c:e2:33:26:87:41:a8:93:97:c8:01:2f:99:5c:f5:1e:fa:3f:
77:5a:f6:91:3f:20:31:2a:1a:57:ff:50:a6:a2:59:36:32:ae:
4d:b9:3a:94:79:ea:25:5a:1c:bf:32:09:10:63:5d:16:61:ca:
09:48:88:72:6c:61:be:d7:68:86:56:8c:d9:9c:38:f4:72:aa:
ce:1b:57:94:e2:7f:9a:dd:28:a2:88:38:84:24:32:70:8e:02:
38:2d:df:06:65:f8:4a:5e:cd:a3:43:dc:0d:de:7f:19:39:5a:
47:ce:bd:c7
-----BEGIN CERTIFICATE-----
MIIGGjCCBQKgAwIBAgIDAgzCMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDkwOTIxMDczM1oXDTI1MTAzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQ0MxQkUxMTAvBgNVBAUTKDBBMzdFQzkxRTgyN0UxNjlDODYyQjQ0
Q0Q4NzZCMUQzNzY0MTM3MzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDStki9ZJoJMQRletBUTtA6wGebo7R8csEiVYy7wQrj8hqdIDOZ/4Nsth3jtLRq
eUXPZMASJMAmZejPWf8jxVUvwMcJdAv0aYWV2rUqGna83TLZE3iCPC0XeBRANItY
b2Fpwg0z7d1jZVtguE2fp8GNaqw6ZUaSddlJkK7WDHWKiES9Qf1eE/uAXUQHVWM/
+DhF7rigVFyFsGg8K2AqfzcxPNwFVckb5s6faH2rJDQrjhK44h62o1kzyXbR6nSH
iVaIN6pk+Rl+W6PV4dJoiYSo1QciwAyRfY0v02zphvluC/vdnNKdhmhHvqgvJAbs
Ml/0301J+6ZuRO5egZ5Ylal3AgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUCjfskegn
4WnIYrRM2Hax03ZBNzQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUNDMUJFL0UxRUFCRjBBMDQ4MzExRUE4MDI4QkUyRkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFDQzFCRS9FMUVBQkYwQTA0ODMxMUVBODAyOEJFMkZDNEY5QUUwMi9DamZza2Vn
bjRXbklZclJNMkhheDAzWkJOelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhsBMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ3dkMA0GCSqG
SIb3DQEBCwUAA4IBAQB8WPGrI/P4Fi7SFruTdQKbUgscTZnvtqgttMbVA4mOzbyM
KXAvb3iTPlP+mehibl/6CvpYY0I+WgS0Ml2kJtGNmrgwyAey051MgQYtaRtCRlY9
NNsS+FWRb/vDueVQpCKh99oANRNhupRUu54k5BjtnuenmG90y54GPia8uQ5DKIVB
DLPVZjxfvcH4s8ECWXJc4jMmh0Gok5fIAS+ZXPUe+j93WvaRPyAxKhpX/1Cmolk2
Mq5NuTqUeeolWhy/MgkQY10WYcoJSIhybGG+12iGVozZnDj0cqrOG1eU4n+a3Sii
iDiEJDJwjgI4Ld8GZfhKXs2jQ9wN3n8ZOVpHzr3H
-----END CERTIFICATE-----
Generated at Wed Nov 27 02:04:51 2024 by rpki-client on console-ams.rpki-client.org