Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer
File: Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer (raw, json)
Hash identifier: B7t9tL57iVyN462cei+laH6iyxZp/BuaYW66YKCushs=
Subject key identifier: 22:1F:50:14:3E:1D:5F:93:C4:CD:31:C9:FE:E7:A2:4D:E8:01:F2:D7
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01D091
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 07 Dec 2023 19:16:36 +0000
Certificate not after: Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 10107
IP: 27.106.216.0/21
IP: 103.66.88.0/22
IP: 103.230.116.0/22
IP: 183.177.112.0/21
IP: 2402:ba00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Apr 2024 17:07:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118929 (0x1d091)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Dec 7 19:16:36 2023 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=A919D539/serialNumber=221F50143E1D5F93C4CD31C9FEE7A24DE801F2D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:11:4b:c4:7d:f3:b0:bc:cc:8b:4f:64:ce:2b:
a3:e7:12:09:61:a2:a9:39:75:b8:82:66:86:b9:87:
72:fc:93:99:0f:52:6d:76:3f:9c:64:83:d6:e4:d3:
50:ee:27:35:c6:0c:5e:49:65:92:a3:13:27:11:7d:
41:45:6a:31:c5:de:2e:46:0f:62:b3:94:3a:17:0f:
64:da:28:23:3d:ae:4d:bf:6a:04:ec:76:18:e3:73:
8c:f8:d7:42:a2:2e:82:bd:05:10:e5:5f:be:b0:e2:
85:f4:1c:96:3f:47:df:71:42:65:4f:08:16:64:42:
e9:ca:62:4f:88:a0:a0:65:ff:32:55:6c:a4:6d:c6:
b1:95:f7:04:f5:97:f9:7a:e4:2d:ef:34:8b:7e:9a:
7b:9f:4b:36:df:f0:2f:05:30:86:f2:5f:e1:45:09:
45:b0:86:c7:2a:12:5b:23:d5:b9:d7:60:39:6a:fb:
f8:be:95:98:d2:7a:f6:0a:3a:5d:34:8a:cc:19:91:
13:c4:f0:f1:f8:74:86:bc:d8:6e:e1:d3:de:10:ad:
35:1a:2f:65:35:d4:7b:44:bb:b8:ac:ed:48:ac:40:
3e:a7:cc:e4:5f:8f:0a:18:e8:b2:8d:99:eb:8a:ce:
02:ee:b0:64:b1:63:72:f7:52:79:61:9a:87:0b:c1:
de:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:1F:50:14:3E:1D:5F:93:C4:CD:31:C9:FE:E7:A2:4D:E8:01:F2:D7
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
10107
sbgp-ipAddrBlock: critical
IPv4:
27.106.216.0/21
103.66.88.0/22
103.230.116.0/22
183.177.112.0/21
IPv6:
2402:ba00::/32
Signature Algorithm: sha256WithRSAEncryption
67:f0:ec:a9:7b:ff:fb:21:03:97:79:d3:b2:2d:a2:6c:d8:54:
68:ba:40:91:6c:b1:3a:f8:41:57:5f:f2:92:9e:8c:51:af:19:
9e:79:cc:e6:a8:b4:58:aa:02:c7:c4:0d:22:41:8a:3a:8e:a5:
e4:88:73:a3:41:3a:90:8c:7c:ef:fd:09:29:a2:d0:1e:56:76:
8b:88:86:8a:1e:a4:f1:bd:51:86:6d:d2:f0:91:75:76:26:f8:
65:a7:af:a7:34:39:b9:d0:a9:9b:08:d2:df:75:e5:09:85:df:
71:58:21:50:c7:2c:ce:5a:b8:64:62:d1:3f:a4:e2:56:f6:74:
fa:0f:34:b2:c7:dc:10:7c:99:a3:5f:cc:e9:3d:48:bc:fb:18:
ee:0a:93:67:61:58:5f:f5:df:90:8e:7c:c2:87:ab:57:89:24:
c4:4c:a6:50:71:32:1c:ce:e0:11:7b:7c:c5:4d:d6:e7:09:52:
74:74:0b:b5:f4:c8:3d:d8:db:e1:b2:44:8a:cc:9d:cf:93:8c:
95:5a:4a:db:9c:8f:01:6a:fc:ee:54:f5:d9:26:d1:28:2d:e2:
f4:61:33:b5:97:1f:ea:16:c1:90:b9:cc:7f:b5:30:be:9e:0e:
24:a7:cc:9e:8e:f1:88:89:2a:6f:c8:cf:3d:a4:66:b8:ee:14:
b2:25:d9:07
-----BEGIN CERTIFICATE-----
MIIGOjCCBSKgAwIBAgIDAdCRMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMTIwNzE5MTYzNloXDTI1MDMwMjAwMDAwMFowRjERMA8G
A1UEAxMIQTkxOUQ1MzkxMTAvBgNVBAUTKDIyMUY1MDE0M0UxRDVGOTNDNENEMzFD
OUZFRTdBMjRERTgwMUYyRDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDuEUvEffOwvMyLT2TOK6PnEglhoqk5dbiCZoa5h3L8k5kPUm12P5xkg9bk01Du
JzXGDF5JZZKjEycRfUFFajHF3i5GD2KzlDoXD2TaKCM9rk2/agTsdhjjc4z410Ki
LoK9BRDlX76w4oX0HJY/R99xQmVPCBZkQunKYk+IoKBl/zJVbKRtxrGV9wT1l/l6
5C3vNIt+mnufSzbf8C8FMIbyX+FFCUWwhscqElsj1bnXYDlq+/i+lZjSevYKOl00
iswZkRPE8PH4dIa82G7h094QrTUaL2U11HtEu7is7UisQD6nzORfjwoY6LKNmeuK
zgLusGSxY3L3UnlhmocLwd6xAgMBAAGjggMvMIIDKzAdBgNVHQ4EFgQUIh9QFD4d
X5PEzTHJ/ueiTegB8tcwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTlENTM5L0MxMjY1REMwRTM4OTExRUFCNzNBMzY1OUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE5RDUzOS9DMTI2NURDMEUzODkxMUVBQjczQTM2NTlDNEY5QUUwMi9JaDlRRkQ0
ZFg1UEV6VEhKX3VlaVRlZ0I4dGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGQYIKwYBBQUHAQgBAf8ECjAI
oAYwBAICJ3swQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgDBAMbatgDBAJnQlgD
BAJn5nQDBAO3sXAwDQQCAAIwBwMFACQCugAwDQYJKoZIhvcNAQELBQADggEBAGfw
7Kl7//shA5d507ItomzYVGi6QJFssTr4QVdf8pKejFGvGZ55zOaotFiqAsfEDSJB
ijqOpeSIc6NBOpCMfO/9CSmi0B5WdouIhooepPG9UYZt0vCRdXYm+GWnr6c0ObnQ
qZsI0t915QmF33FYIVDHLM5auGRi0T+k4lb2dPoPNLLH3BB8maNfzOk9SLz7GO4K
k2dhWF/135COfMKHq1eJJMRMplBxMhzO4BF7fMVN1ucJUnR0C7X0yD3Y2+GyRIrM
nc+TjJVaStucjwFq/O5U9dkm0Sgt4vRhM7WXH+oWwZC5zH+1ML6eDiSnzJ6O8YiJ
Km/Izz2kZrjuFLIl2Qc=
-----END CERTIFICATE-----
Generated at Tue Apr 23 18:45:31 2024 by rpki-client on console-ams.rpki-client.org