Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHo5wcwE8nzHJmPb97rm2SqVA4A.cer
File: EHo5wcwE8nzHJmPb97rm2SqVA4A.cer (raw, json)
Hash identifier: +gg0ZpsK0s8Nt2X+rj61rKJB58bDC5y1DO5ow9TCLXc=
Subject key identifier: 10:7A:39:C1:CC:04:F2:7C:C7:26:63:DB:F7:BA:E6:D9:2A:95:03:80
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E57F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 20 Mar 2024 01:59:06 +0000
Certificate not after: Sat 31 Aug 2024 00:00:00 +0000
Subordinate resources: AS: 151213
IP: 103.226.219.0/24
IP: 2001:df2:6240::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 May 2024 00:15:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124287 (0x1e57f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 20 01:59:06 2024 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=A91AFBDA/serialNumber=107A39C1CC04F27CC72663DBF7BAE6D92A950380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:62:df:4b:2c:4c:9c:8b:2f:44:b6:56:4c:e9:
27:64:7c:e6:62:ef:e0:b6:d7:48:eb:1a:2e:99:24:
40:2f:21:bb:c1:26:b3:a0:0c:80:bf:40:e1:4f:f4:
8a:56:1a:89:54:a8:7e:a3:03:65:72:ef:3b:48:06:
66:cf:ee:02:c2:f2:b5:8a:ed:66:f0:0a:2d:b9:fe:
fe:2e:8b:a8:ab:10:de:c7:a9:60:36:e4:3d:51:d7:
1a:af:9a:6b:b3:11:48:c6:09:fa:e9:70:95:fa:15:
82:45:d8:1c:c4:2c:cf:77:21:16:a9:15:3b:00:ec:
de:27:98:18:d6:f2:ec:00:a6:79:90:6b:4f:9d:4f:
bb:07:2b:71:39:54:27:e8:f9:f6:c4:1d:4c:19:0f:
e6:c9:df:f4:b9:fa:e3:48:98:9a:3b:89:6c:5f:45:
e1:b5:18:5d:fd:4a:20:c0:b1:40:7d:98:58:9f:01:
a3:8c:30:64:73:e5:7f:e3:bc:e3:d7:e9:22:71:00:
b8:f5:b3:24:5d:5b:77:62:f1:b8:5c:7f:f3:3c:da:
4b:18:b3:81:b8:9d:0a:c3:81:3c:39:89:d6:5d:97:
07:ff:41:e1:f4:62:ce:da:9f:47:d4:db:9e:c5:66:
9f:ac:9f:b6:4a:d7:9b:f1:22:ef:4d:96:02:91:54:
b3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:7A:39:C1:CC:04:F2:7C:C7:26:63:DB:F7:BA:E6:D9:2A:95:03:80
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151213
sbgp-ipAddrBlock: critical
IPv4:
103.226.219.0/24
IPv6:
2001:df2:6240::/48
Signature Algorithm: sha256WithRSAEncryption
5c:96:10:cd:89:09:fd:b5:74:84:e1:b0:03:fa:e4:53:50:22:
f6:d4:24:df:e2:c2:bf:d4:92:1c:83:ae:37:a2:6c:86:fb:44:
dd:4b:f9:3d:a9:bd:a7:ce:a4:07:60:a9:0a:46:87:da:4a:b9:
6d:00:12:e0:2f:5c:4a:a9:bc:97:f4:04:84:4a:86:e1:c1:a4:
46:21:4f:73:39:03:6a:6a:1d:05:32:5e:c4:f7:5a:7f:c3:8e:
17:83:5f:f7:1a:06:ec:27:58:c8:94:db:64:77:f0:1a:ef:7b:
72:87:59:49:2e:de:0a:a5:b3:af:c9:b8:15:3b:8c:a7:c4:ec:
62:03:f2:68:a4:cd:d9:46:5f:ad:77:9a:b6:a6:9d:6e:9f:e3:
a8:1b:3f:3c:f8:22:e2:7e:d7:ec:6a:fc:0c:35:c2:11:f1:1b:
86:9b:92:2a:e2:5e:b6:d8:df:32:61:ed:84:02:c9:2e:6f:00:
7c:9f:27:f0:7a:25:84:08:7c:c5:95:0c:6e:e1:2c:dc:57:a4:
72:89:30:cb:88:28:65:fe:c4:b3:06:b4:38:6f:aa:07:3a:7b:
60:f0:4b:dc:8a:27:f1:ef:74:ba:66:63:fd:e2:d8:55:54:f4:
06:f7:92:bf:d6:92:4f:14:17:b5:d7:17:84:27:30:20:ad:4c:
fc:57:7f:44
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAeV/MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDMyMDAxNTkwNloXDTI0MDgzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQUZCREExMTAvBgNVBAUTKDEwN0EzOUMxQ0MwNEYyN0NDNzI2NjNE
QkY3QkFFNkQ5MkE5NTAzODAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCqYt9LLEyciy9EtlZM6SdkfOZi7+C210jrGi6ZJEAvIbvBJrOgDIC/QOFP9IpW
GolUqH6jA2Vy7ztIBmbP7gLC8rWK7WbwCi25/v4ui6irEN7HqWA25D1R1xqvmmuz
EUjGCfrpcJX6FYJF2BzELM93IRapFTsA7N4nmBjW8uwApnmQa0+dT7sHK3E5VCfo
+fbEHUwZD+bJ3/S5+uNImJo7iWxfReG1GF39SiDAsUB9mFifAaOMMGRz5X/jvOPX
6SJxALj1syRdW3di8bhcf/M82ksYs4G4nQrDgTw5idZdlwf/QeH0Ys7an0fU257F
Zp+sn7ZK15vxIu9NlgKRVLOpAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUEHo5wcwE
8nzHJmPb97rm2SqVA4AwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUFGQkRBLzZBRDM3NEFBRTY1RDExRUVCNjEyM0U0MUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFBRkJEQS82QUQzNzRBQUU2NUQxMUVFQjYxMjNFNDFDNEY5QUUwMi9FSG81d2N3
RThuekhKbVBiOTdybTJTcVZBNEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAk6tMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAZ+LbMA8EAgAC
MAkDBwAgAQ3yYkAwDQYJKoZIhvcNAQELBQADggEBAFyWEM2JCf21dIThsAP65FNQ
IvbUJN/iwr/UkhyDrjeibIb7RN1L+T2pvafOpAdgqQpGh9pKuW0AEuAvXEqpvJf0
BIRKhuHBpEYhT3M5A2pqHQUyXsT3Wn/DjheDX/caBuwnWMiU22R38Brve3KHWUku
3gqls6/JuBU7jKfE7GID8mikzdlGX613mramnW6f46gbPzz4IuJ+1+xq/Aw1whHx
G4abkiriXrbY3zJh7YQCyS5vAHyfJ/B6JYQIfMWVDG7hLNxXpHKJMMuIKGX+xLMG
tDhvqgc6e2DwS9yKJ/HvdLpmY/3i2FVU9Ab3kr/Wkk8UF7XXF4QnMCCtTPxXf0Q=
-----END CERTIFICATE-----
Generated at Thu May 2 01:06:54 2024 by rpki-client on console-fra.rpki-client.org