Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JxcwkTdorwE4ujkDJNqUMcQJukQ.cer
File: JxcwkTdorwE4ujkDJNqUMcQJukQ.cer (raw, json)
Hash identifier: s7T7u+vprs9GQuY5zsPlLyIO1xIb6QmJ5NwBzlJKVGg=
Subject key identifier: 27:17:30:91:37:68:AF:01:38:BA:39:03:24:DA:94:31:C4:09:BA:44
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022436
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 23 Dec 2024 01:51:45 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 150429
IP: 103.14.144.0/23
IP: 2001:df1:8b40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140342 (0x22436)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 23 01:51:45 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A916091A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:02:81:fb:45:8f:07:dc:6a:da:3e:4e:d7:8d:
34:45:4e:a6:58:e2:fb:1e:63:e2:4e:da:7e:bd:5d:
40:20:c5:f3:86:7f:01:4b:ad:5c:d3:ba:86:14:86:
b6:c7:78:c1:b2:01:de:bd:de:85:bc:d5:ed:45:92:
66:41:81:95:e9:53:22:25:7c:7c:77:8b:5f:03:50:
2d:85:ad:fc:aa:c5:0e:59:20:ce:56:61:b7:75:8f:
76:58:ad:86:ab:40:92:bc:e5:45:18:9f:cc:2a:9e:
8d:dd:9f:63:04:33:7f:77:f5:96:52:1a:53:e7:0e:
88:1d:fc:49:ae:f5:cd:cc:1f:92:1d:d4:10:fd:0c:
10:58:8f:0c:5d:d2:93:73:4c:02:c6:61:dd:b3:3d:
c1:4d:0a:ce:8f:09:c6:af:7f:cb:16:ac:23:51:c7:
9e:3d:0c:82:69:d6:98:47:1c:14:10:6b:ea:a3:a3:
d3:3d:60:fe:66:43:97:00:5c:4e:df:b3:54:f8:e9:
4c:67:03:55:4d:c2:4e:88:1d:89:b8:35:ea:fb:d4:
61:02:4d:48:d0:0c:d3:e9:0b:98:4d:40:9a:43:24:
97:6b:e9:20:5b:84:ca:c6:01:f5:39:ad:94:60:b0:
94:87:3f:89:13:d5:a0:e3:59:a1:87:69:60:18:c1:
d4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:17:30:91:37:68:AF:01:38:BA:39:03:24:DA:94:31:C4:09:BA:44
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
150429
sbgp-ipAddrBlock: critical
IPv4:
103.14.144.0/23
IPv6:
2001:df1:8b40::/48
Signature Algorithm: sha256WithRSAEncryption
c7:63:58:f5:89:32:22:87:7d:26:87:43:90:bd:6e:09:16:8e:
f7:a4:40:38:4e:be:87:8b:04:98:77:8b:9a:08:ce:b6:67:1f:
98:87:f8:c0:6e:4b:70:cb:1a:d3:4d:4b:85:cd:c3:b4:01:c0:
e9:63:4c:51:88:e8:1b:6e:3b:70:3a:5c:bf:dd:3c:4a:dd:d0:
9c:77:6b:c0:f2:c1:59:a8:e6:96:b4:ed:fc:bf:48:74:2e:3e:
88:0d:e0:d7:06:27:c9:08:cb:5b:ba:cf:ee:29:7a:5a:a4:f3:
2c:b1:fa:bf:37:e7:e4:43:e2:bf:95:46:61:b3:e9:9f:da:01:
53:f2:88:4e:b5:73:9a:22:8e:66:84:47:2e:a0:2f:79:a8:31:
15:9c:c0:ce:75:57:bb:09:e3:75:ea:6b:0e:31:6b:80:c6:0c:
30:95:36:bf:bd:5c:fc:2a:ea:5b:67:1e:a0:8d:33:1f:43:01:
c2:ee:64:00:5e:d1:6a:61:9a:71:02:6b:78:41:00:8b:d7:cd:
ae:32:19:86:0d:5e:a2:d7:47:30:9e:a6:de:d5:cf:a8:0c:18:
fa:68:77:8c:e6:26:3f:44:c7:ba:99:af:f8:63:c3:c9:6f:32:
03:fd:0f:45:f5:db:bc:b2:97:3c:ba:0c:0e:c2:05:1f:fc:92:
45:ef:f2:67
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAiQ2MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MTIyMzAxNTE0NVoXDTI2MDMwMjAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNjA5MUExMTAvBgNVBAUTKDI3MTczMDkxMzc2OEFGMDEzOEJBMzkw
MzI0REE5NDMxQzQwOUJBNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC9AoH7RY8H3GraPk7XjTRFTqZY4vseY+JO2n69XUAgxfOGfwFLrVzTuoYUhrbH
eMGyAd693oW81e1FkmZBgZXpUyIlfHx3i18DUC2FrfyqxQ5ZIM5WYbd1j3ZYrYar
QJK85UUYn8wqno3dn2MEM3939ZZSGlPnDogd/Emu9c3MH5Id1BD9DBBYjwxd0pNz
TALGYd2zPcFNCs6PCcavf8sWrCNRx549DIJp1phHHBQQa+qjo9M9YP5mQ5cAXE7f
s1T46UxnA1VNwk6IHYm4Ner71GECTUjQDNPpC5hNQJpDJJdr6SBbhMrGAfU5rZRg
sJSHP4kT1aDjWaGHaWAYwdQNAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUJxcwkTdo
rwE4ujkDJNqUMcQJukQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTYwOTFBLzQyMDQwNTdFNjY2RDExRURCNTU2NTc3N0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE2MDkxQS80MjA0MDU3RTY2NkQxMUVEQjU1NjU3NzdDNEY5QUUwMi9KeGN3a1Rk
b3J3RTR1amtESk5xVU1jUUp1a1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAkudMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZw6QMA8EAgAC
MAkDBwAgAQ3xi0AwDQYJKoZIhvcNAQELBQADggEBAMdjWPWJMiKHfSaHQ5C9bgkW
jvekQDhOvoeLBJh3i5oIzrZnH5iH+MBuS3DLGtNNS4XNw7QBwOljTFGI6BtuO3A6
XL/dPErd0Jx3a8DywVmo5pa07fy/SHQuPogN4NcGJ8kIy1u6z+4pelqk8yyx+r83
5+RD4r+VRmGz6Z/aAVPyiE61c5oijmaERy6gL3moMRWcwM51V7sJ43Xqaw4xa4DG
DDCVNr+9XPwq6ltnHqCNMx9DAcLuZABe0WphmnECa3hBAIvXza4yGYYNXqLXRzCe
pt7Vz6gMGPpod4zmJj9Ex7qZr/hjw8lvMgP9D0X127yylzy6DA7CBR/8kkXv8mc=
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:52 2025 by rpki-client