Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer
File: Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer (raw, json)
Hash identifier: 3hBZhT6VrllVIe2kYyCnORVN+L0QHRx3J26Ry3N7d9E=
Subject key identifier: 26:C8:7D:19:66:E2:F8:35:F7:CC:8E:96:1D:02:FF:30:9C:E7:BD:20
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01C8BA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 03 Nov 2023 01:05:08 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: AS: 147189
IP: 103.174.82.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 03:16:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116922 (0x1c8ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 3 01:05:08 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A91E2412/serialNumber=26C87D1966E2F835F7CC8E961D02FF309CE7BD20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bc:ee:bf:82:44:89:58:83:a8:9e:04:15:c2:
bc:3f:f0:fc:f8:1b:00:3a:bc:8d:1b:67:4b:01:ed:
c4:88:0b:d8:f8:d6:3d:85:a4:25:97:b0:73:16:07:
cf:b9:67:cb:b6:d6:86:e1:05:df:e2:73:a6:bb:4d:
ed:9b:d2:38:ad:32:f3:7c:4e:5e:0d:2a:b5:4c:a1:
57:4b:a4:8c:c3:a1:d3:5e:7f:80:1b:bc:3f:fb:4d:
b8:1f:ff:2c:30:58:bc:1e:5c:8a:60:73:9f:63:27:
b7:d4:1b:47:21:53:fa:8c:e7:8a:bb:f7:2d:1b:4b:
12:31:cd:69:1d:e6:b5:7d:19:58:cd:22:e8:9f:fb:
f7:15:ed:52:5a:2a:12:2e:28:88:c0:c2:55:41:3c:
f5:b8:23:51:c8:87:fc:ab:7d:21:80:a0:83:83:c8:
a8:d7:52:90:21:f3:14:5c:57:1a:da:60:f8:7e:fd:
d9:10:dd:65:67:6d:0a:97:4f:56:3b:74:27:43:80:
94:4b:48:7b:de:b4:10:62:1e:3a:74:0e:db:8a:91:
97:0f:92:55:b4:58:29:26:ef:16:34:7b:c2:f2:95:
95:2d:20:e3:c3:db:a1:e6:00:a0:a1:a2:ad:a8:63:
80:45:ea:18:bd:45:73:a7:d5:ef:bf:f2:a6:df:dc:
f0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C8:7D:19:66:E2:F8:35:F7:CC:8E:96:1D:02:FF:30:9C:E7:BD:20
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
147189
sbgp-ipAddrBlock: critical
IPv4:
103.174.82.0/24
Signature Algorithm: sha256WithRSAEncryption
07:01:9c:c4:a9:91:92:04:5d:e2:d7:1b:e7:39:a2:2c:7f:c0:
65:13:ab:11:3e:6b:f1:0b:92:06:d5:55:69:ea:ad:ae:bd:38:
cf:d8:75:40:d4:f4:f9:b9:2a:e7:32:b6:44:4d:3f:89:ee:8b:
21:5e:0e:f7:79:4d:da:16:80:e5:f8:a9:d1:1a:d0:2e:18:1b:
c4:3f:4d:09:23:4f:ea:35:62:56:82:a2:2a:5d:b3:72:81:1a:
84:03:a8:21:db:5d:99:a5:05:26:89:87:44:4d:66:0d:1d:f2:
ab:b2:9b:f7:2a:1f:a4:a5:60:06:06:cc:53:f1:d3:08:bb:e0:
d6:13:e7:22:c2:b4:f8:78:cd:3c:b4:65:75:56:cd:ca:d0:6c:
ec:1c:82:a1:d8:14:d1:73:bb:c8:60:6a:a2:6a:a0:9e:56:c1:
e8:86:e2:4e:61:b0:80:3b:5c:34:7f:71:ee:dc:51:2f:4c:6f:
97:20:ca:9d:ec:3b:3b:7c:c2:bb:6d:99:d4:73:fd:8b:55:32:
2a:8b:6a:2d:a5:ce:f6:55:bf:29:cf:f4:6e:13:77:a5:c6:cf:
96:5f:fe:ba:90:72:c4:f8:40:1f:f7:a0:6e:01:ca:d9:8f:24:
f8:99:0c:0e:d8:ff:ed:c0:34:2e:96:48:16:03:4b:19:d4:14:
a8:34:29:61
-----BEGIN CERTIFICATE-----
MIIGGjCCBQKgAwIBAgIDAci6MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMTEwMzAxMDUwOFoXDTI1MDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRTI0MTIxMTAvBgNVBAUTKDI2Qzg3RDE5NjZFMkY4MzVGN0NDOEU5
NjFEMDJGRjMwOUNFN0JEMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC0vO6/gkSJWIOongQVwrw/8Pz4GwA6vI0bZ0sB7cSIC9j41j2FpCWXsHMWB8+5
Z8u21obhBd/ic6a7Te2b0jitMvN8Tl4NKrVMoVdLpIzDodNef4AbvD/7Tbgf/yww
WLweXIpgc59jJ7fUG0chU/qM54q79y0bSxIxzWkd5rV9GVjNIuif+/cV7VJaKhIu
KIjAwlVBPPW4I1HIh/yrfSGAoIODyKjXUpAh8xRcVxraYPh+/dkQ3WVnbQqXT1Y7
dCdDgJRLSHvetBBiHjp0DtuKkZcPklW0WCkm7xY0e8LylZUtIOPD26HmAKChoq2o
Y4BF6hi9RXOn1e+/8qbf3PB7AgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUJsh9GWbi
+DX3zI6WHQL/MJznvSAwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUUyNDEyL0I2NzZFQkUwMjhDNzExRUM4NjEwN0EwQUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFFMjQxMi9CNjc2RUJFMDI4QzcxMUVDODYxMDdBMEFDNEY5QUUwMi9Kc2g5R1di
aS1EWDN6STZXSFFMX01Kem52U0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAj71MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ65SMA0GCSqG
SIb3DQEBCwUAA4IBAQAHAZzEqZGSBF3i1xvnOaIsf8BlE6sRPmvxC5IG1VVp6q2u
vTjP2HVA1PT5uSrnMrZETT+J7oshXg73eU3aFoDl+KnRGtAuGBvEP00JI0/qNWJW
gqIqXbNygRqEA6gh212ZpQUmiYdETWYNHfKrspv3Kh+kpWAGBsxT8dMIu+DWE+ci
wrT4eM08tGV1Vs3K0GzsHIKh2BTRc7vIYGqiaqCeVsHohuJOYbCAO1w0f3Hu3FEv
TG+XIMqd7Ds7fMK7bZnUc/2LVTIqi2otpc72Vb8pz/RuE3elxs+WX/66kHLE+EAf
96BuAcrZjyT4mQwO2P/twDQulkgWA0sZ1BSoNClh
-----END CERTIFICATE-----
Generated at Thu Apr 25 03:53:25 2024 by rpki-client on console-fra.rpki-client.org