Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer
File: GyXsWdB_k0JLkMItNOyrIq2FKpc.cer (raw, json)
Hash identifier: UK4f24t+2doBy7a7PMeMfeiFgwlAU8Diy4gHEoXPcWA=
Subject key identifier: 1B:25:EC:59:D0:7F:93:42:4B:90:C2:2D:34:EC:AB:22:AD:85:2A:97
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01C938
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 06 Nov 2023 17:55:46 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: AS: 137028
AS: 142601
IP: 103.102.108.0/22
IP: 2001:df7:980::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 03:16:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117048 (0x1c938)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 6 17:55:46 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A91886EA/serialNumber=1B25EC59D07F93424B90C22D34ECAB22AD852A97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:35:b7:f2:da:cb:52:9f:26:54:d2:23:9d:61:
0f:3d:b0:73:05:9e:f8:f9:93:17:75:a4:e1:06:51:
ab:68:f8:b0:14:32:d7:8b:b8:dc:30:ee:fc:93:56:
f2:0c:13:d1:c6:b2:a7:e3:9c:46:c1:a0:4e:ef:fa:
e9:b2:c7:bb:03:27:f5:3e:16:36:9c:63:70:f6:44:
87:8d:d2:dc:cd:d9:47:fc:9b:6f:5c:a4:d3:0a:e0:
9f:34:b7:d7:41:db:5b:03:d9:2c:9b:bd:5e:37:36:
c9:c8:a4:9c:7d:3a:ee:e0:7d:b8:0a:a6:c0:ee:86:
4d:d4:88:f9:93:b1:b0:be:95:b4:cb:36:47:29:9a:
b5:2d:e2:60:e5:26:31:0e:ac:dc:92:c9:65:be:34:
b2:2f:df:15:39:51:17:94:46:51:eb:6e:8a:90:f2:
df:a5:44:55:53:37:c8:8b:b4:b4:56:14:6a:55:34:
26:fc:70:d8:a5:81:18:55:0e:54:52:5f:20:6b:f4:
74:6a:2d:b5:9c:3d:b1:4e:d6:e1:a2:cb:a4:35:45:
db:23:6a:74:ad:b7:65:1e:03:07:a6:41:89:74:10:
9c:91:30:9e:f9:d3:6d:fd:00:21:d0:b5:2d:e9:33:
ce:20:62:28:98:ca:e0:b7:e4:81:c5:42:da:1a:e8:
cb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:25:EC:59:D0:7F:93:42:4B:90:C2:2D:34:EC:AB:22:AD:85:2A:97
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137028
142601
sbgp-ipAddrBlock: critical
IPv4:
103.102.108.0/22
IPv6:
2001:df7:980::/48
Signature Algorithm: sha256WithRSAEncryption
30:c2:08:7b:cd:51:dc:94:78:8d:50:5e:76:bd:a8:c7:79:7c:
51:f9:20:53:69:51:12:f4:e6:bc:73:95:59:06:31:c9:f6:c0:
3f:96:d0:2d:6a:ea:9c:da:f4:05:54:14:d6:34:69:77:3e:8d:
25:0b:e7:ac:55:56:d1:41:5a:1e:1a:d0:53:85:11:e7:ce:5f:
de:ed:9b:38:24:d4:7d:ba:1a:60:90:27:73:17:b0:f9:71:6a:
82:0e:69:a9:64:4f:c2:13:9c:91:d6:65:ad:46:51:cb:6a:07:
af:b3:cf:93:d2:f2:d6:ed:c6:60:c3:20:16:57:71:38:ea:00:
8b:de:4d:53:f1:93:a7:0f:15:4b:8a:de:98:d9:09:ad:d3:4b:
b5:a3:e9:73:35:99:17:ea:56:fa:ab:80:ff:bc:a4:c1:b2:41:
67:87:56:77:d2:de:82:4a:0d:48:53:5d:9b:8f:46:ee:7b:1a:
70:a1:10:71:2c:ef:7d:d0:3d:28:b4:28:4c:52:5d:66:76:0c:
ed:06:fd:60:86:a9:2b:e9:60:cd:53:21:03:c1:61:2a:2e:6b:
8f:a6:34:e4:a4:f9:ad:b3:42:96:e4:1b:b7:f2:0e:9c:57:30:
58:85:68:ba:ee:c9:c5:4e:06:12:c4:91:0c:70:2f:94:ad:d6:
f3:90:89:99
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIDAck4MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMTEwNjE3NTU0NloXDTI1MDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxODg2RUExMTAvBgNVBAUTKDFCMjVFQzU5RDA3RjkzNDI0QjkwQzIy
RDM0RUNBQjIyQUQ4NTJBOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDvNbfy2stSnyZU0iOdYQ89sHMFnvj5kxd1pOEGUato+LAUMteLuNww7vyTVvIM
E9HGsqfjnEbBoE7v+umyx7sDJ/U+FjacY3D2RIeN0tzN2Uf8m29cpNMK4J80t9dB
21sD2SybvV43NsnIpJx9Ou7gfbgKpsDuhk3UiPmTsbC+lbTLNkcpmrUt4mDlJjEO
rNySyWW+NLIv3xU5UReURlHrboqQ8t+lRFVTN8iLtLRWFGpVNCb8cNilgRhVDlRS
XyBr9HRqLbWcPbFO1uGiy6Q1RdsjanStt2UeAwemQYl0EJyRMJ750239ACHQtS3p
M84gYiiYyuC35IHFQtoa6MsVAgMBAAGjggMlMIIDITAdBgNVHQ4EFgQUGyXsWdB/
k0JLkMItNOyrIq2FKpcwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTg4NkVBLzUyOTg4NEUwNkY2MDExRURBNUZGRkYwOUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE4ODZFQS81Mjk4ODRFMDZGNjAxMUVEQTVGRkZGMDlDNEY5QUUwMi9HeVhzV2RC
X2swSkxrTUl0Tk95cklxMkZLcGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO
oAwwCgIDAhdEAgMCLQkwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAJnZmww
DwQCAAIwCQMHACABDfcJgDANBgkqhkiG9w0BAQsFAAOCAQEAMMIIe81R3JR4jVBe
dr2ox3l8UfkgU2lREvTmvHOVWQYxyfbAP5bQLWrqnNr0BVQU1jRpdz6NJQvnrFVW
0UFaHhrQU4UR585f3u2bOCTUfboaYJAncxew+XFqgg5pqWRPwhOckdZlrUZRy2oH
r7PPk9Ly1u3GYMMgFldxOOoAi95NU/GTpw8VS4remNkJrdNLtaPpczWZF+pW+quA
/7ykwbJBZ4dWd9LegkoNSFNdm49G7nsacKEQcSzvfdA9KLQoTFJdZnYM7Qb9YIap
K+lgzVMhA8FhKi5rj6Y05KT5rbNCluQbt/IOnFcwWIVouu7JxU4GEsSRDHAvlK3W
85CJmQ==
-----END CERTIFICATE-----
Generated at Thu Apr 25 03:53:23 2024 by rpki-client on console-fra.rpki-client.org