Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JxcwkTdorwE4ujkDJNqUMcQJukQ.cer
File: JxcwkTdorwE4ujkDJNqUMcQJukQ.cer (raw, json)
Hash identifier: eHA8j+vK0I5TLlAoECObyAaudhwh/K2jBTY4deLOYlI=
Subject key identifier: 27:17:30:91:37:68:AF:01:38:BA:39:03:24:DA:94:31:C4:09:BA:44
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01CFC3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 05 Dec 2023 04:28:36 +0000
Certificate not after: Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 150429
IP: 103.14.144.0/23
IP: 2001:df1:8b40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Apr 2024 02:50:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118723 (0x1cfc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Dec 5 04:28:36 2023 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=A916091A/serialNumber=271730913768AF0138BA390324DA9431C409BA44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:02:81:fb:45:8f:07:dc:6a:da:3e:4e:d7:8d:
34:45:4e:a6:58:e2:fb:1e:63:e2:4e:da:7e:bd:5d:
40:20:c5:f3:86:7f:01:4b:ad:5c:d3:ba:86:14:86:
b6:c7:78:c1:b2:01:de:bd:de:85:bc:d5:ed:45:92:
66:41:81:95:e9:53:22:25:7c:7c:77:8b:5f:03:50:
2d:85:ad:fc:aa:c5:0e:59:20:ce:56:61:b7:75:8f:
76:58:ad:86:ab:40:92:bc:e5:45:18:9f:cc:2a:9e:
8d:dd:9f:63:04:33:7f:77:f5:96:52:1a:53:e7:0e:
88:1d:fc:49:ae:f5:cd:cc:1f:92:1d:d4:10:fd:0c:
10:58:8f:0c:5d:d2:93:73:4c:02:c6:61:dd:b3:3d:
c1:4d:0a:ce:8f:09:c6:af:7f:cb:16:ac:23:51:c7:
9e:3d:0c:82:69:d6:98:47:1c:14:10:6b:ea:a3:a3:
d3:3d:60:fe:66:43:97:00:5c:4e:df:b3:54:f8:e9:
4c:67:03:55:4d:c2:4e:88:1d:89:b8:35:ea:fb:d4:
61:02:4d:48:d0:0c:d3:e9:0b:98:4d:40:9a:43:24:
97:6b:e9:20:5b:84:ca:c6:01:f5:39:ad:94:60:b0:
94:87:3f:89:13:d5:a0:e3:59:a1:87:69:60:18:c1:
d4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:17:30:91:37:68:AF:01:38:BA:39:03:24:DA:94:31:C4:09:BA:44
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
150429
sbgp-ipAddrBlock: critical
IPv4:
103.14.144.0/23
IPv6:
2001:df1:8b40::/48
Signature Algorithm: sha256WithRSAEncryption
56:69:2f:b7:18:2c:4c:51:6a:b9:75:24:6a:e1:cb:f7:9e:89:
4a:91:7b:79:0b:02:3d:c6:3d:03:d0:e1:c2:56:10:64:3b:a6:
b1:c8:c3:92:89:ad:7d:4d:61:cc:3c:5f:16:40:0b:8e:33:69:
9d:62:ae:4f:d4:ce:98:d3:21:7c:39:91:19:27:8e:56:5d:0d:
cc:a8:12:99:80:6a:4e:14:01:af:8b:70:ab:73:60:56:8d:fe:
59:b2:67:20:a2:45:8e:22:2c:b9:32:55:f0:87:65:64:b7:89:
bb:d3:52:1f:f7:7c:44:e1:99:9d:0a:72:75:5c:20:c0:ee:cd:
24:00:b1:1a:75:f0:d6:61:ae:64:5b:15:7a:9c:9e:62:00:7b:
a6:75:b8:98:9f:5f:11:80:f4:58:f3:7c:c0:d4:63:fd:de:2a:
37:a0:6e:dc:29:dc:6f:7f:cb:3a:d5:68:0b:e9:3e:b7:2b:ad:
f9:ac:7c:8e:84:cd:de:df:8a:ae:8c:b3:61:e6:8c:22:6d:ad:
ca:b0:a3:b6:78:26:5b:da:26:e8:0f:69:2d:24:7b:e0:7b:15:
34:56:01:4b:89:f1:33:24:e3:21:35:75:f0:98:bf:16:aa:0d:
f3:2d:2e:f2:6c:1b:de:3b:d1:e5:53:6b:04:df:d5:b3:b3:21:
d9:22:4c:80
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAc/DMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMTIwNTA0MjgzNloXDTI1MDMwMjAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNjA5MUExMTAvBgNVBAUTKDI3MTczMDkxMzc2OEFGMDEzOEJBMzkw
MzI0REE5NDMxQzQwOUJBNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC9AoH7RY8H3GraPk7XjTRFTqZY4vseY+JO2n69XUAgxfOGfwFLrVzTuoYUhrbH
eMGyAd693oW81e1FkmZBgZXpUyIlfHx3i18DUC2FrfyqxQ5ZIM5WYbd1j3ZYrYar
QJK85UUYn8wqno3dn2MEM3939ZZSGlPnDogd/Emu9c3MH5Id1BD9DBBYjwxd0pNz
TALGYd2zPcFNCs6PCcavf8sWrCNRx549DIJp1phHHBQQa+qjo9M9YP5mQ5cAXE7f
s1T46UxnA1VNwk6IHYm4Ner71GECTUjQDNPpC5hNQJpDJJdr6SBbhMrGAfU5rZRg
sJSHP4kT1aDjWaGHaWAYwdQNAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUJxcwkTdo
rwE4ujkDJNqUMcQJukQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTYwOTFBLzQyMDQwNTdFNjY2RDExRURCNTU2NTc3N0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE2MDkxQS80MjA0MDU3RTY2NkQxMUVEQjU1NjU3NzdDNEY5QUUwMi9KeGN3a1Rk
b3J3RTR1amtESk5xVU1jUUp1a1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAkudMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZw6QMA8EAgAC
MAkDBwAgAQ3xi0AwDQYJKoZIhvcNAQELBQADggEBAFZpL7cYLExRarl1JGrhy/ee
iUqRe3kLAj3GPQPQ4cJWEGQ7prHIw5KJrX1NYcw8XxZAC44zaZ1irk/UzpjTIXw5
kRknjlZdDcyoEpmAak4UAa+LcKtzYFaN/lmyZyCiRY4iLLkyVfCHZWS3ibvTUh/3
fEThmZ0KcnVcIMDuzSQAsRp18NZhrmRbFXqcnmIAe6Z1uJifXxGA9FjzfMDUY/3e
Kjegbtwp3G9/yzrVaAvpPrcrrfmsfI6Ezd7fiq6Ms2HmjCJtrcqwo7Z4JlvaJugP
aS0ke+B7FTRWAUuJ8TMk4yE1dfCYvxaqDfMtLvJsG9470eVTawTf1bOzIdkiTIA=
-----END CERTIFICATE-----
Generated at Sat Apr 20 05:36:54 2024 by rpki-client on console-ams.rpki-client.org