Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer
File: JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer (raw, json)
Hash identifier: meVORGSEZg+wzX7W3uIljeXyT+MbDnLOHrTPs/puQZ4=
Subject key identifier: 25:21:ED:A4:6C:D7:0B:83:97:26:06:D3:0D:88:0D:70:34:95:B8:B3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01F14B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 12 May 2024 16:15:02 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 137532
IP: 103.112.64.0/23
IP: 2405:e6c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127307 (0x1f14b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: May 12 16:15:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A9185B41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7e:50:24:c4:da:58:5c:37:56:97:60:b6:98:
bf:05:06:ea:e7:a7:59:e6:4e:47:a4:6f:60:1b:ef:
d2:32:bf:75:67:ba:7f:04:e1:0f:c8:58:59:73:3b:
c6:c4:0f:ed:36:9a:44:03:d4:03:5e:d5:2f:6c:09:
76:d4:86:83:e4:2a:37:89:f8:50:d0:53:01:61:d8:
81:67:16:f2:64:7f:ad:cd:aa:4d:2c:0c:24:98:ba:
25:65:b9:60:f4:fe:c9:0d:3e:2d:fd:ca:9a:97:49:
f4:42:a9:26:3e:ca:69:25:f2:17:2e:d4:ef:49:63:
33:e3:58:54:40:67:30:14:c6:7a:84:f8:2a:7e:ac:
71:d7:05:8a:4b:49:bb:04:5a:5e:84:fb:b1:8a:40:
f4:bc:00:a3:eb:f2:be:01:5d:ce:8b:ca:f8:7b:05:
3c:b6:63:d9:2d:7a:7e:44:3e:e0:17:5f:ff:6c:d0:
97:af:ed:e6:7b:05:f2:0d:35:91:ef:de:84:94:84:
ea:1d:c5:a6:06:9f:44:cd:0b:d3:b1:94:2f:2a:59:
1f:78:0f:64:fa:e7:6a:33:3c:8f:88:ad:1c:02:a0:
cb:72:78:4f:d6:59:d6:ee:02:b2:d5:1c:82:87:66:
f1:2d:c6:81:0e:f3:1f:01:2f:fe:c9:28:91:5e:ba:
d7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:21:ED:A4:6C:D7:0B:83:97:26:06:D3:0D:88:0D:70:34:95:B8:B3
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137532
sbgp-ipAddrBlock: critical
IPv4:
103.112.64.0/23
IPv6:
2405:e6c0::/32
Signature Algorithm: sha256WithRSAEncryption
83:b1:b8:a2:f4:69:29:67:e6:c4:d5:4d:0f:16:b3:cd:44:82:
07:e3:3d:9f:c8:88:bc:34:2c:fc:cf:34:43:8d:bb:6c:28:22:
27:51:ee:c5:c9:c6:a6:9d:e7:bf:bf:9a:17:be:7a:a0:df:9e:
fd:d3:36:ec:40:71:3d:43:70:d4:7f:f6:3b:98:8e:a8:d2:23:
76:b7:07:e4:2f:c8:30:e7:bd:1a:30:e7:09:70:c8:18:b0:a1:
3e:e1:68:d7:06:7a:84:db:64:7f:6c:c7:fe:a5:7e:e7:c2:53:
12:41:97:e0:5b:69:62:49:5a:62:fd:06:9e:8a:da:fc:fc:99:
e6:f4:90:04:04:d3:bb:16:d6:c0:20:02:91:18:bd:d7:41:ba:
0d:ea:72:3b:85:3f:31:b3:94:58:4e:cf:f1:4a:25:e0:a9:d2:
76:f7:eb:cb:47:e7:c1:c0:21:4e:84:5a:50:97:34:ae:5d:03:
56:53:fa:1f:cd:db:13:30:40:d8:2e:43:1e:a3:18:0d:10:76:
ff:6d:88:18:29:20:16:8a:e1:3c:ac:14:e5:55:eb:22:7c:40:
40:55:16:e0:de:40:73:e8:47:cf:f3:5f:fc:d7:5b:9d:ca:74:
e0:f4:82:5e:58:40:11:2c:20:52:5a:50:d2:5d:cf:10:be:81:
71:c8:a4:4e
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAfFLMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDUxMjE2MTUwMloXDTI1MDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxODVCNDExMTAvBgNVBAUTKDI1MjFFREE0NkNENzBCODM5NzI2MDZE
MzBEODgwRDcwMzQ5NUI4QjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC/flAkxNpYXDdWl2C2mL8FBurnp1nmTkekb2Ab79Iyv3Vnun8E4Q/IWFlzO8bE
D+02mkQD1ANe1S9sCXbUhoPkKjeJ+FDQUwFh2IFnFvJkf63Nqk0sDCSYuiVluWD0
/skNPi39ypqXSfRCqSY+ymkl8hcu1O9JYzPjWFRAZzAUxnqE+Cp+rHHXBYpLSbsE
Wl6E+7GKQPS8AKPr8r4BXc6Lyvh7BTy2Y9kten5EPuAXX/9s0Jev7eZ7BfINNZHv
3oSUhOodxaYGn0TNC9OxlC8qWR94D2T652ozPI+IrRwCoMtyeE/WWdbuArLVHIKH
ZvEtxoEO8x8BL/7JKJFeutd9AgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUJSHtpGzX
C4OXJgbTDYgNcDSVuLMwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTg1QjQxL0ExRURDRkZFNjc5OTExRUFCNjdCMzQ4NEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE4NUI0MS9BMUVEQ0ZGRTY3OTkxMUVBQjY3QjM0ODRDNEY5QUUwMi9KU0h0cEd6
WEM0T1hKZ2JURFlnTmNEU1Z1TE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhk8MC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZ3BAMA0EAgAC
MAcDBQAkBebAMA0GCSqGSIb3DQEBCwUAA4IBAQCDsbii9GkpZ+bE1U0PFrPNRIIH
4z2fyIi8NCz8zzRDjbtsKCInUe7Fycamnee/v5oXvnqg35790zbsQHE9Q3DUf/Y7
mI6o0iN2twfkL8gw570aMOcJcMgYsKE+4WjXBnqE22R/bMf+pX7nwlMSQZfgW2li
SVpi/Qaeitr8/Jnm9JAEBNO7FtbAIAKRGL3XQboN6nI7hT8xs5RYTs/xSiXgqdJ2
9+vLR+fBwCFOhFpQlzSuXQNWU/ofzdsTMEDYLkMeoxgNEHb/bYgYKSAWiuE8rBTl
VesifEBAVRbg3kBz6EfP81/811udynTg9IJeWEARLCBSWlDSXc8QvoFxyKRO
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:29 2025 by rpki-client