Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KN1yVzxbraKIuDKzmB_0yYsvjFE.cer
File: KN1yVzxbraKIuDKzmB_0yYsvjFE.cer (raw, json)
Hash identifier: eipE4G1dCPF5l+jE96EIYSPcdy7hHL1Zd+IvL40zZkg=
Subject key identifier: 28:DD:72:57:3C:5B:AD:A2:88:B8:32:B3:98:1F:F4:C9:8B:2F:8C:51
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0221E0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/KN1yVzxbraKIuDKzmB_0yYsvjFE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 10 Dec 2024 17:40:17 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 133434
AS: 134731
IP: 103.172.108.0/24
IP: 103.198.106.0/24
IP: 2407:d0c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139744 (0x221e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 10 17:40:17 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A9180174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:49:cd:23:71:de:00:05:5d:8e:02:d8:f6:63:
46:73:22:fd:c8:8f:30:d8:f4:50:a1:f6:f8:57:b9:
f0:11:1d:38:41:1b:54:8a:ec:07:d3:62:d4:64:90:
0c:68:1f:43:fa:ed:8f:e1:de:4f:10:56:d2:d2:c7:
c2:c3:48:06:50:61:af:f7:70:f3:ed:84:52:d5:a5:
58:6a:d0:32:c0:db:cb:1b:f5:1a:59:2a:9f:8f:76:
b3:c9:f5:31:da:ce:f0:8d:ee:5f:f4:40:78:b8:d9:
41:4c:51:7a:fc:c9:0d:c5:96:c5:97:15:af:95:a4:
83:eb:e1:75:c5:a0:d8:ae:9d:14:b1:1d:2e:73:43:
ba:0f:88:cd:df:21:29:96:20:ae:04:0d:a3:fa:a1:
28:3f:de:c7:eb:3e:a5:46:78:ad:50:99:53:2c:22:
e9:a4:46:4b:ae:2c:33:e1:f9:75:da:17:3a:6d:ad:
39:c8:73:06:ed:4e:8c:15:6b:0e:29:78:f1:47:11:
1f:15:cf:e3:c9:e8:78:d4:6f:56:8d:c1:f7:9f:cd:
50:b2:e8:34:17:8a:84:f0:5d:15:ea:56:38:01:d0:
89:ca:74:1d:0e:4d:13:61:6f:5a:78:c0:77:c2:aa:
80:74:e8:cd:6b:5b:dd:93:e7:bc:82:69:02:85:c0:
3f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:DD:72:57:3C:5B:AD:A2:88:B8:32:B3:98:1F:F4:C9:8B:2F:8C:51
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/KN1yVzxbraKIuDKzmB_0yYsvjFE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133434
134731
sbgp-ipAddrBlock: critical
IPv4:
103.172.108.0/24
103.198.106.0/24
IPv6:
2407:d0c0::/32
Signature Algorithm: sha256WithRSAEncryption
50:73:9a:c4:8e:b8:0f:27:6f:fc:64:0c:0c:6f:99:26:c3:76:
af:e8:f8:dc:3d:c7:dc:e7:3e:d2:01:75:ac:f5:44:1f:f8:f4:
d9:75:fa:c1:d2:e1:04:f9:29:a4:a5:de:2c:0d:3b:c4:24:09:
03:95:a6:ca:9b:ae:5b:ab:df:0e:93:3e:8d:09:d7:e0:c1:32:
ee:cf:e1:09:8b:02:a3:d4:6d:cd:b1:fe:dc:59:fd:ab:1a:5c:
e1:84:d0:76:27:54:c3:2e:a7:87:a9:2c:b9:7a:9f:07:b6:82:
1d:8c:8f:d3:36:ed:96:93:43:fd:0e:33:a9:c9:28:c3:d5:f5:
1b:9c:e1:d1:c3:eb:25:ea:4f:9b:e1:ca:c9:bb:8c:88:ce:86:
b9:d0:d6:a7:fc:a3:8d:51:68:f9:83:7e:fd:f6:1d:ef:5a:33:
b4:2a:e5:15:6c:4e:d0:1b:02:59:c3:7c:48:78:90:5d:26:39:
9e:4b:24:cb:10:c0:2c:42:38:5c:64:2f:93:87:ba:94:f8:09:
41:90:71:95:1b:d2:ca:bd:48:9f:9c:20:1a:53:ea:fd:33:1a:
d0:30:55:25:63:36:de:15:06:ce:0d:0e:2d:94:19:43:2e:71:
42:c1:8a:8e:38:47:ca:34:c0:61:f7:b0:e7:e6:8b:73:02:f9:
f4:98:62:72
-----BEGIN CERTIFICATE-----
MIIGNDCCBRygAwIBAgIDAiHgMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MTIxMDE3NDAxN1oXDTI2MDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxODAxNzQxMTAvBgNVBAUTKDI4REQ3MjU3M0M1QkFEQTI4OEI4MzJC
Mzk4MUZGNEM5OEIyRjhDNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC/Sc0jcd4ABV2OAtj2Y0ZzIv3IjzDY9FCh9vhXufARHThBG1SK7AfTYtRkkAxo
H0P67Y/h3k8QVtLSx8LDSAZQYa/3cPPthFLVpVhq0DLA28sb9RpZKp+PdrPJ9THa
zvCN7l/0QHi42UFMUXr8yQ3FlsWXFa+VpIPr4XXFoNiunRSxHS5zQ7oPiM3fISmW
IK4EDaP6oSg/3sfrPqVGeK1QmVMsIumkRkuuLDPh+XXaFzptrTnIcwbtTowVaw4p
ePFHER8Vz+PJ6HjUb1aNwfefzVCy6DQXioTwXRXqVjgB0InKdB0OTRNhb1p4wHfC
qoB06M1rW92T57yCaQKFwD9nAgMBAAGjggMpMIIDJTAdBgNVHQ4EFgQUKN1yVzxb
raKIuDKzmB/0yYsvjFEwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTgwMTc0Lzc5RDY2NjJBMTY4OTExRUM4MTYyNTgwQ0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE4MDE3NC83OUQ2NjYyQTE2ODkxMUVDODE2MjU4MENDNEY5QUUwMi9LTjF5Vnp4
YnJhS0l1REt6bUJfMHlZc3ZqRkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO
oAwwCgIDAgk6AgMCDkswNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBABnrGwD
BABnxmowDQQCAAIwBwMFACQH0MAwDQYJKoZIhvcNAQELBQADggEBAFBzmsSOuA8n
b/xkDAxvmSbDdq/o+Nw9x9znPtIBdaz1RB/49Nl1+sHS4QT5KaSl3iwNO8QkCQOV
psqbrlur3w6TPo0J1+DBMu7P4QmLAqPUbc2x/txZ/asaXOGE0HYnVMMup4epLLl6
nwe2gh2Mj9M27ZaTQ/0OM6nJKMPV9Ruc4dHD6yXqT5vhysm7jIjOhrnQ1qf8o41R
aPmDfv32He9aM7Qq5RVsTtAbAlnDfEh4kF0mOZ5LJMsQwCxCOFxkL5OHupT4CUGQ
cZUb0sq9SJ+cIBpT6v0zGtAwVSVjNt4VBs4NDi2UGUMucULBio44R8o0wGH3sOfm
i3MC+fSYYnI=
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:07 2025 by rpki-client