Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Grie9bKOyC1q4hD8Kb3opxdWsbA.cer
File: Grie9bKOyC1q4hD8Kb3opxdWsbA.cer (raw, json)
Hash identifier: JYPl2H3lZxG3TnFLVbsYy3IvNMn8FcuDyMnVEbD1mLk=
Subject key identifier: 1A:B8:9E:F5:B2:8E:C8:2D:6A:E2:10:FC:29:BD:E8:A7:17:56:B1:B0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022377
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 18 Dec 2024 21:29:48 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 137078
IP: 103.175.130.0/23
IP: 2400:1a20::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140151 (0x22377)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 18 21:29:48 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91E90DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:90:3d:88:33:a7:46:ce:8e:e7:8e:8f:a1:6f:
20:d7:38:f9:e3:3c:ad:b8:fe:6b:7b:d8:c9:5f:28:
c9:6f:ca:13:56:2f:fd:12:19:cf:f3:57:ee:04:ba:
62:35:39:c4:9d:c6:6e:54:87:e2:28:e0:ef:73:7f:
8b:d8:e7:c7:fa:e5:84:1a:ef:6a:a8:84:5e:28:ef:
33:95:52:99:7e:bb:21:af:ce:80:be:1d:12:dd:a0:
7b:68:e7:0a:6c:a7:ed:84:58:0a:2b:7f:6a:f7:8d:
80:5b:25:76:cb:22:1d:fe:2f:04:72:94:81:f0:9d:
21:3d:12:e4:7c:64:35:0a:61:3e:05:32:f3:bc:b9:
51:79:57:16:8c:09:ed:5f:7a:cc:fb:e4:d2:17:a6:
ea:bc:8e:92:0e:8a:94:43:53:8a:3e:c2:3a:f8:d0:
f1:10:91:c2:36:8e:ac:80:35:0f:95:73:56:21:61:
06:c5:c7:3b:bc:a5:3b:3b:24:6f:d3:af:ad:67:ad:
db:c8:c5:44:e0:c0:7a:98:c1:59:63:62:cd:b0:a1:
2b:70:c6:0a:fa:f9:d2:a4:b3:b5:c7:d6:a2:3a:6a:
55:6a:fc:1e:7d:d2:fc:f0:87:11:8d:eb:34:43:a7:
47:48:fa:4e:d5:eb:87:aa:71:9d:db:3f:10:10:5f:
d6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B8:9E:F5:B2:8E:C8:2D:6A:E2:10:FC:29:BD:E8:A7:17:56:B1:B0
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137078
sbgp-ipAddrBlock: critical
IPv4:
103.175.130.0/23
IPv6:
2400:1a20::/32
Signature Algorithm: sha256WithRSAEncryption
6d:10:d4:5d:a5:e0:3a:6d:3a:58:26:2f:a1:10:3b:86:02:f6:
ff:3c:1b:23:ac:78:ec:cc:90:fa:d2:e5:04:7b:ff:e0:25:26:
79:6b:3e:3f:ec:ac:22:91:fb:be:4e:e2:06:a5:8a:06:ec:fb:
b7:01:9f:a7:65:09:11:9d:7c:70:f2:84:31:7a:2d:09:3f:4b:
db:4e:b3:8d:f9:8a:73:4f:4b:19:85:4e:18:84:9b:17:c0:e6:
cd:c9:8b:20:5f:ef:64:dc:ff:dc:24:27:10:8b:5e:b6:c1:f9:
50:f6:24:47:07:8d:30:0e:03:63:df:18:cb:18:e0:0e:42:82:
4f:31:5e:86:2e:e4:20:ef:4f:5a:b5:fd:e3:76:1f:f2:e5:fe:
d7:aa:fb:cb:13:54:b8:d0:6e:02:d9:9b:06:0e:ef:6f:b1:53:
18:8f:3f:31:e3:8a:71:f5:2a:75:42:18:b2:15:79:bf:9b:23:
fd:aa:0f:ba:13:49:45:b6:d7:5f:95:c6:da:5d:2c:61:d0:cd:
c4:9a:09:24:97:23:6d:db:71:7d:2c:83:39:bc:c7:8c:01:4a:
d7:67:04:fd:e3:a6:d4:a1:ed:c1:3d:62:fd:80:79:99:0c:2f:
0a:e7:cd:65:06:f8:a0:df:0c:4d:72:f1:42:ab:35:7a:f7:3b:
c0:ae:f1:d1
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAiN3MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MTIxODIxMjk0OFoXDTI2MDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRTkwREQxMTAvBgNVBAUTKDFBQjg5RUY1QjI4RUM4MkQ2QUUyMTBG
QzI5QkRFOEE3MTc1NkIxQjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCqkD2IM6dGzo7njo+hbyDXOPnjPK24/mt72MlfKMlvyhNWL/0SGc/zV+4EumI1
OcSdxm5Uh+Io4O9zf4vY58f65YQa72qohF4o7zOVUpl+uyGvzoC+HRLdoHto5wps
p+2EWAorf2r3jYBbJXbLIh3+LwRylIHwnSE9EuR8ZDUKYT4FMvO8uVF5VxaMCe1f
esz75NIXpuq8jpIOipRDU4o+wjr40PEQkcI2jqyANQ+Vc1YhYQbFxzu8pTs7JG/T
r61nrdvIxUTgwHqYwVljYs2woStwxgr6+dKks7XH1qI6alVq/B590vzwhxGN6zRD
p0dI+k7V64eqcZ3bPxAQX9aBAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUGrie9bKO
yC1q4hD8Kb3opxdWsbAwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUU5MERELzZEODdFRDAyNERFNDExRUNBMzE3OTE1REM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFFOTBERC82RDg3RUQwMjRERTQxMUVDQTMxNzkxNURDNEY5QUUwMi9HcmllOWJL
T3lDMXE0aEQ4S2Izb3B4ZFdzYkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhd2MC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZ6+CMA0EAgAC
MAcDBQAkABogMA0GCSqGSIb3DQEBCwUAA4IBAQBtENRdpeA6bTpYJi+hEDuGAvb/
PBsjrHjszJD60uUEe//gJSZ5az4/7Kwikfu+TuIGpYoG7Pu3AZ+nZQkRnXxw8oQx
ei0JP0vbTrON+YpzT0sZhU4YhJsXwObNyYsgX+9k3P/cJCcQi162wflQ9iRHB40w
DgNj3xjLGOAOQoJPMV6GLuQg709atf3jdh/y5f7XqvvLE1S40G4C2ZsGDu9vsVMY
jz8x44px9Sp1QhiyFXm/myP9qg+6E0lFttdflcbaXSxh0M3EmgkklyNt23F9LIM5
vMeMAUrXZwT946bUoe3BPWL9gHmZDC8K581lBvig3wxNcvFCqzV69zvArvHR
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:45 2025 by rpki-client