Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOvueS5AUhzVGx8DIDp_jiq7EtI.cer
File: FOvueS5AUhzVGx8DIDp_jiq7EtI.cer (raw, json)
Hash identifier: yaFRKVpUhP/RizF+Hr0EbZN9L7tACEN+yAWIsbAeb2g=
Subject key identifier: 14:EB:EE:79:2E:40:52:1C:D5:1B:1F:03:20:3A:7F:8E:2A:BB:12:D2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01DE98
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 12 Feb 2024 20:53:07 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 134837
IP: 103.149.186.0/23
IP: 2001:df3:3780::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Dec 2024 01:13:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122520 (0x1de98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 12 20:53:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A912F40E/serialNumber=14EBEE792E40521CD51B1F03203A7F8E2ABB12D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bc:09:83:16:00:48:14:19:34:30:da:80:0c:
20:3c:f8:56:39:86:1d:73:e4:e4:4b:0e:e4:51:e9:
9e:07:5d:ac:48:32:78:b7:3a:eb:88:b8:79:28:cb:
28:e5:43:07:5c:1b:10:0a:df:8a:b6:00:f4:36:e1:
af:77:1d:ec:2d:d1:43:c2:4b:74:fb:7e:b3:85:91:
44:0e:34:b3:e3:43:8e:20:1d:6c:43:6c:06:aa:e7:
bb:79:30:63:fa:9a:91:55:4a:d3:44:6d:0c:e7:30:
de:07:03:1e:36:62:a1:30:90:5d:26:07:c2:06:ee:
ee:27:86:f8:08:87:09:51:72:a4:38:c0:6f:e2:ae:
13:a2:b0:19:1a:00:59:06:4a:e5:e5:f7:cb:f4:cf:
86:a2:0c:17:66:7b:45:17:e7:a3:c0:e5:1b:4a:34:
2a:6b:6c:4d:86:42:d8:c6:65:f7:dd:55:68:cc:f1:
75:78:d4:92:21:63:b4:d9:ac:a2:fb:de:3d:3d:a0:
44:91:c7:f9:8e:cc:9e:82:2a:23:97:cc:43:60:9e:
3f:ba:84:ad:fe:95:75:dd:6b:25:9b:75:ab:3c:bc:
a6:9d:e6:77:04:13:07:eb:6c:cf:49:93:a8:12:1a:
5c:99:46:4c:08:5e:94:68:86:07:64:cb:42:b4:dd:
f5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:EB:EE:79:2E:40:52:1C:D5:1B:1F:03:20:3A:7F:8E:2A:BB:12:D2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
134837
sbgp-ipAddrBlock: critical
IPv4:
103.149.186.0/23
IPv6:
2001:df3:3780::/48
Signature Algorithm: sha256WithRSAEncryption
d3:a9:59:45:f9:5b:11:84:3a:b8:d8:8c:2d:46:ea:45:b0:f6:
2e:f4:44:cf:db:fe:84:5e:39:4a:ef:59:3e:fd:5b:6c:38:ea:
c4:58:7c:bb:a3:7b:e3:32:b7:2e:b3:2e:d4:fa:4c:7a:22:16:
8b:9c:d1:c7:3d:8e:76:99:7e:2e:78:60:22:b8:39:31:0b:25:
e0:df:a0:23:fc:d4:29:a3:25:a3:2b:ef:4b:ab:d9:4e:65:d2:
9e:81:b8:55:27:da:79:94:54:a4:54:fb:29:a7:0e:54:96:fa:
19:56:7d:31:26:14:15:c5:c1:9d:ac:0f:f6:bd:67:99:01:31:
a7:2f:2c:1f:35:e0:d2:80:86:c7:0f:9c:e1:bb:0a:f0:e6:4b:
97:4d:81:fd:d6:00:4b:22:9d:1e:9b:cb:67:e4:64:6c:f5:73:
5e:c0:64:a1:96:f8:8c:32:5e:d9:ec:92:80:1b:d5:c1:5c:96:
21:ee:c3:56:ee:26:5a:bd:b7:0c:85:6b:72:1d:88:6c:8b:b0:
d7:f6:27:89:01:bb:d8:66:1f:59:92:23:f4:cf:09:90:ca:28:
10:18:14:62:81:f0:1c:de:c2:7f:b8:c5:98:c6:0a:29:8a:b2:
27:ad:02:52:9d:68:0f:68:d3:82:cd:ff:86:21:fb:52:d5:ce:
40:a3:d2:1b
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAd6YMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDIxMjIwNTMwN1oXDTI1MDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMkY0MEUxMTAvBgNVBAUTKDE0RUJFRTc5MkU0MDUyMUNENTFCMUYw
MzIwM0E3RjhFMkFCQjEyRDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDBvAmDFgBIFBk0MNqADCA8+FY5hh1z5ORLDuRR6Z4HXaxIMni3OuuIuHkoyyjl
QwdcGxAK34q2APQ24a93Hewt0UPCS3T7frOFkUQONLPjQ44gHWxDbAaq57t5MGP6
mpFVStNEbQznMN4HAx42YqEwkF0mB8IG7u4nhvgIhwlRcqQ4wG/irhOisBkaAFkG
SuXl98v0z4aiDBdme0UX56PA5RtKNCprbE2GQtjGZffdVWjM8XV41JIhY7TZrKL7
3j09oESRx/mOzJ6CKiOXzENgnj+6hK3+lXXdayWbdas8vKad5ncEEwfrbM9Jk6gS
GlyZRkwIXpRohgdky0K03fUHAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUFOvueS5A
UhzVGx8DIDp/jiq7EtIwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTJGNDBFLzMwM0IzRDc4NkI3ODExRUFBNzEzRDc3OEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEyRjQwRS8zMDNCM0Q3ODZCNzgxMUVBQTcxM0Q3NzhDNEY5QUUwMi9GT3Z1ZVM1
QVVoelZHeDhESURwX2ppcTdFdEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAg61MDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ5W6MA8EAgAC
MAkDBwAgAQ3zN4AwDQYJKoZIhvcNAQELBQADggEBANOpWUX5WxGEOrjYjC1G6kWw
9i70RM/b/oReOUrvWT79W2w46sRYfLuje+Myty6zLtT6THoiFouc0cc9jnaZfi54
YCK4OTELJeDfoCP81CmjJaMr70ur2U5l0p6BuFUn2nmUVKRU+ymnDlSW+hlWfTEm
FBXFwZ2sD/a9Z5kBMacvLB814NKAhscPnOG7CvDmS5dNgf3WAEsinR6by2fkZGz1
c17AZKGW+IwyXtnskoAb1cFcliHuw1buJlq9twyFa3IdiGyLsNf2J4kBu9hmH1mS
I/TPCZDKKBAYFGKB8Bzewn+4xZjGCimKsietAlKdaA9o04LN/4Yh+1LVzkCj0hs=
-----END CERTIFICATE-----
Generated at Wed Nov 27 02:04:53 2024 by rpki-client on console-ams.rpki-client.org