Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-Y1KUbGhKfM2ux39TjRj_NTeHM.cer
File: J-Y1KUbGhKfM2ux39TjRj_NTeHM.cer (raw, json)
Hash identifier: S+CxzWovYDG78geEZarSrDeDhWQb2VvXO3mipPIVGJ8=
Subject key identifier: 27:E6:35:29:46:C6:84:A7:CC:DA:EC:77:F5:38:D1:8F:F3:53:78:73
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0214FB
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 21 Oct 2024 14:34:09 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 147005
IP: 103.172.180.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Dec 2024 01:13:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136443 (0x214fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 21 14:34:09 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A913F133/serialNumber=27E6352946C684A7CCDAEC77F538D18FF3537873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:f1:64:ca:01:a0:ae:be:14:e6:06:4f:0a:f4:
ff:19:09:05:a4:04:0b:ac:68:cd:cf:0a:e9:e8:dc:
e9:53:a2:76:84:7e:39:e4:2f:cb:9f:3a:69:59:f4:
d3:ee:66:aa:ff:9c:5e:da:29:df:f5:21:1e:12:ba:
f4:51:b5:b2:0c:46:88:72:62:fc:f6:3e:23:65:98:
5f:07:91:5b:d9:64:23:a0:40:6e:8a:fe:cb:b8:c7:
13:c3:c2:b7:30:54:6e:2c:26:b5:b2:11:64:c5:aa:
43:90:45:48:d6:d1:4d:db:09:cf:2e:b0:6a:ef:8e:
7c:2d:fa:ef:db:d2:83:bf:26:9d:bd:12:5c:fe:1b:
30:4b:fe:f4:6a:63:df:ad:45:00:3c:a1:c5:2f:ef:
9a:0a:63:88:26:53:0c:f7:74:74:a6:96:a5:35:d7:
4a:35:5b:ed:95:62:79:c9:e4:1c:72:c6:4c:43:18:
f3:e4:45:5a:2e:24:9a:28:c9:93:2f:3d:0d:9d:22:
dc:12:aa:4d:d8:60:4d:f9:44:43:29:9a:de:ec:a9:
62:6f:67:f8:50:de:53:48:6f:e7:c5:64:96:6d:ce:
4d:37:67:ff:92:b2:e8:f0:88:d1:bc:66:02:23:dd:
a7:ff:96:a2:bf:29:ea:72:0e:48:d8:4e:8a:55:12:
f3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E6:35:29:46:C6:84:A7:CC:DA:EC:77:F5:38:D1:8F:F3:53:78:73
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
147005
sbgp-ipAddrBlock: critical
IPv4:
103.172.180.0/23
Signature Algorithm: sha256WithRSAEncryption
35:e6:55:25:74:17:f4:80:e5:69:ab:12:05:56:80:8d:00:4f:
c0:2d:9f:d9:27:04:2f:9e:7f:b3:09:28:c4:e7:32:e4:c1:94:
e3:e1:0b:2c:ec:5d:a3:70:42:fd:eb:b3:18:69:cf:66:61:1b:
01:1a:18:67:58:15:e0:08:fa:1a:46:e6:36:c7:39:bf:f7:7b:
dc:35:a7:0c:6a:4b:12:09:ae:29:58:be:a5:6a:c4:0d:75:48:
d0:f7:5f:d4:f5:22:3e:e6:2b:b0:8f:f8:e3:69:03:3c:c6:e7:
b9:02:cd:9e:b5:40:79:d0:a8:81:de:03:72:e4:9e:4f:ae:4d:
db:94:2d:2e:f8:1c:54:10:5e:65:cc:b0:01:48:72:e0:54:73:
33:4b:18:01:cb:77:2a:04:57:c1:2d:43:f7:73:f1:0b:d8:c6:
26:02:d8:dc:22:8b:41:b0:e9:18:7a:c2:1c:04:64:39:41:89:
4e:85:db:43:6a:9c:73:29:46:c4:52:df:f7:bb:f0:31:66:fc:
0e:07:11:4d:22:bb:d9:ed:58:74:df:89:36:e4:6f:db:86:7c:
45:34:be:00:4f:f2:86:bb:f4:2f:16:52:9d:82:4b:35:dc:13:
a6:a0:07:d9:b3:12:a9:42:67:45:7c:a7:e5:ed:76:46:49:3e:
79:b0:95:c8
-----BEGIN CERTIFICATE-----
MIIGGjCCBQKgAwIBAgIDAhT7MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MTAyMTE0MzQwOVoXDTI1MTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxM0YxMzMxMTAvBgNVBAUTKDI3RTYzNTI5NDZDNjg0QTdDQ0RBRUM3
N0Y1MzhEMThGRjM1Mzc4NzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDy8WTKAaCuvhTmBk8K9P8ZCQWkBAusaM3PCuno3OlTonaEfjnkL8ufOmlZ9NPu
Zqr/nF7aKd/1IR4SuvRRtbIMRohyYvz2PiNlmF8HkVvZZCOgQG6K/su4xxPDwrcw
VG4sJrWyEWTFqkOQRUjW0U3bCc8usGrvjnwt+u/b0oO/Jp29Elz+GzBL/vRqY9+t
RQA8ocUv75oKY4gmUwz3dHSmlqU110o1W+2VYnnJ5BxyxkxDGPPkRVouJJooyZMv
PQ2dItwSqk3YYE35REMpmt7sqWJvZ/hQ3lNIb+fFZJZtzk03Z/+SsujwiNG8ZgIj
3af/lqK/KepyDkjYTopVEvM5AgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUJ+Y1KUbG
hKfM2ux39TjRj/NTeHMwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTNGMTMzLzgyNjg2M0Q2MEM0RjExRUM4QkUwRjk1OUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEzRjEzMy84MjY4NjNENjBDNEYxMUVDOEJFMEY5NTlDNEY5QUUwMi9KLVkxS1Vi
R2hLZk0ydXgzOVRqUmpfTlRlSE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAj49MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ6y0MA0GCSqG
SIb3DQEBCwUAA4IBAQA15lUldBf0gOVpqxIFVoCNAE/ALZ/ZJwQvnn+zCSjE5zLk
wZTj4Qss7F2jcEL967MYac9mYRsBGhhnWBXgCPoaRuY2xzm/93vcNacMaksSCa4p
WL6lasQNdUjQ91/U9SI+5iuwj/jjaQM8xue5As2etUB50KiB3gNy5J5Prk3blC0u
+BxUEF5lzLABSHLgVHMzSxgBy3cqBFfBLUP3c/EL2MYmAtjcIotBsOkYesIcBGQ5
QYlOhdtDapxzKUbEUt/3u/AxZvwOBxFNIrvZ7Vh034k25G/bhnxFNL4AT/KGu/Qv
FlKdgks13BOmoAfZsxKpQmdFfKfl7XZGST55sJXI
-----END CERTIFICATE-----
Generated at Wed Nov 27 02:21:40 2024 by rpki-client on console-fra.rpki-client.org