Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer
File: MOIGH3wgvYQ77lNywTIcNfux0-8.cer (raw, json)
Hash identifier: HTdIJTcbS2glxWUISXV3Whr3trUY9JlD8c/Gg7T8nXg=
Subject key identifier: 30:E2:06:1F:7C:20:BD:84:3B:EE:53:72:C1:32:1C:35:FB:B1:D3:EF
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01C898
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 02 Nov 2023 21:50:09 +0000
Certificate not after: Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources: AS: 55850
AS: 55926
AS: 132333
AS: 136984
IP: 14.137.0.0/19
IP: 101.53.192.0/19
IP: 103.26.202.0/24
IP: 103.173.250.0/23
IP: 103.241.56.0/22
IP: 115.69.160.0/19
IP: 116.251.128.0 -- 116.251.203.255
IP: 124.155.224.0/20
IP: 150.107.172.0/22
IP: 180.148.96.0/19
IP: 202.36.126.0/23
IP: 202.74.33.0/24
IP: 203.94.32.0/19
IP: 203.124.16.0/21
IP: 2001:df4:a000::/48
IP: 2406:5a00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 23 Apr 2024 17:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116888 (0x1c898)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 2 21:50:09 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=A91BC269/serialNumber=30E2061F7C20BD843BEE5372C1321C35FBB1D3EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:71:25:9f:d6:5a:8b:f7:1f:38:39:68:84:bc:
28:12:f8:16:84:92:38:58:2e:a3:4d:20:45:d2:6b:
51:23:47:0e:55:e6:ef:56:03:88:91:2c:84:f0:da:
04:bc:74:37:c9:90:16:52:cd:45:75:07:ee:47:87:
2e:51:d8:0b:d9:89:c2:e1:41:ef:07:13:3c:39:42:
19:0a:e8:d8:4f:98:2f:e9:16:46:89:88:d0:eb:1c:
92:a1:b2:de:0c:b5:53:28:a4:0d:bf:53:af:33:a1:
7f:8b:23:3d:34:9f:7a:50:2f:4e:4d:41:92:4c:8b:
3e:d8:c1:43:90:1a:a3:22:75:af:b7:c6:e3:e9:6a:
28:5b:b4:61:9a:40:f5:04:fa:15:47:66:9c:8b:5b:
2f:3d:5e:5b:3e:0d:f7:55:ee:9b:17:4b:45:bc:80:
66:aa:fb:77:e9:a0:47:aa:23:ae:6d:e0:0e:07:f1:
d5:6f:f8:96:c6:51:95:36:4c:ae:08:11:0c:b7:99:
bb:b1:f9:cc:07:8a:ac:0f:d8:7f:07:ac:da:36:91:
08:72:c7:00:14:1c:fd:07:ad:e6:ad:3a:28:8a:0d:
99:67:41:dd:93:53:cf:7d:03:f2:b0:83:be:16:a9:
47:60:22:d5:3b:48:7b:ea:e2:7b:06:33:1a:b0:16:
95:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E2:06:1F:7C:20:BD:84:3B:EE:53:72:C1:32:1C:35:FB:B1:D3:EF
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
55850
55926
132333
136984
sbgp-ipAddrBlock: critical
IPv4:
14.137.0.0/19
101.53.192.0/19
103.26.202.0/24
103.173.250.0/23
103.241.56.0/22
115.69.160.0/19
116.251.128.0-116.251.203.255
124.155.224.0/20
150.107.172.0/22
180.148.96.0/19
202.36.126.0/23
202.74.33.0/24
203.94.32.0/19
203.124.16.0/21
IPv6:
2001:df4:a000::/48
2406:5a00::/32
Signature Algorithm: sha256WithRSAEncryption
27:43:e3:88:9b:cd:51:5c:d3:95:b4:15:1c:ce:ff:3e:d7:e0:
d4:c8:55:ad:6a:8f:35:1e:e8:29:eb:85:a0:16:5e:f8:61:c2:
9a:c2:56:69:4d:2e:e7:1a:2b:9e:17:b5:30:36:fc:52:bc:a6:
7e:d2:61:e9:e4:e5:58:13:a1:6a:da:b6:50:36:4e:ac:1f:d9:
b5:81:e3:3d:ee:2d:72:d9:38:19:da:43:52:c1:44:52:15:fd:
92:1a:cf:91:53:e3:40:de:8c:9b:4f:fc:cd:b6:0a:24:2f:53:
ef:f3:d4:84:90:12:5a:a3:03:f0:9e:bb:3b:98:11:af:d5:f6:
d3:d3:fb:93:84:c1:67:ef:d3:d0:f0:d2:b3:45:39:74:e2:72:
ec:94:b6:ba:9d:0f:ce:7d:71:9e:72:a4:54:57:de:74:c2:9b:
1f:b5:b1:d5:6f:a7:e6:c4:9b:f3:85:17:85:c6:35:ba:fe:bb:
cb:b9:59:2d:4c:6e:fc:0a:dd:98:16:10:ea:c9:de:87:55:7f:
bb:be:09:cf:f2:1d:5f:3d:d5:ee:83:a5:bf:04:89:30:03:a8:
64:38:b8:73:15:cc:cc:6f:1e:cc:09:25:62:4c:ac:83:48:2b:
c8:18:27:c9:21:3c:08:b6:c4:0f:7a:ae:02:77:be:28:92:50:
f3:1f:19:43
-----BEGIN CERTIFICATE-----
MIIGmDCCBYCgAwIBAgIDAciYMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMTEwMjIxNTAwOVoXDTI0MTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQkMyNjkxMTAvBgNVBAUTKDMwRTIwNjFGN0MyMEJEODQzQkVFNTM3
MkMxMzIxQzM1RkJCMUQzRUYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDdcSWf1lqL9x84OWiEvCgS+BaEkjhYLqNNIEXSa1EjRw5V5u9WA4iRLITw2gS8
dDfJkBZSzUV1B+5Hhy5R2AvZicLhQe8HEzw5QhkK6NhPmC/pFkaJiNDrHJKhst4M
tVMopA2/U68zoX+LIz00n3pQL05NQZJMiz7YwUOQGqMida+3xuPpaihbtGGaQPUE
+hVHZpyLWy89Xls+DfdV7psXS0W8gGaq+3fpoEeqI65t4A4H8dVv+JbGUZU2TK4I
EQy3mbux+cwHiqwP2H8HrNo2kQhyxwAUHP0HreatOiiKDZlnQd2TU899A/Kwg74W
qUdgItU7SHvq4nsGMxqwFpX7AgMBAAGjggONMIIDiTAdBgNVHQ4EFgQUMOIGH3wg
vYQ77lNywTIcNfux0+8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUJDMjY5L0JBNjc2RTMwQ0ZFNTExRUM5NEJCQzc1QUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFCQzI2OS9CQTY3NkUzMENGRTUxMUVDOTRCQkM3NUFDNEY5QUUwMi9NT0lHSDN3
Z3ZZUTc3bE55d1RJY05mdXgwLTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKQYIKwYBBQUHAQgBAf8EGjAY
oBYwFAIDANoqAgMA2nYCAwIE7QIDAhcYMIGNBggrBgEFBQcBBwEB/wR+MHwwYgQC
AAEwXAMEBQ6JAAMEBWU1wAMEAGcaygMEAWet+gMEAmfxOAMEBXNFoDAMAwQHdPuA
AwQCdPvIAwQEfJvgAwQClmusAwQFtJRgAwQByiR+AwQAykohAwQFy14gAwQDy3wQ
MBYEAgACMBADBwAgAQ30oAADBQAkBloAMA0GCSqGSIb3DQEBCwUAA4IBAQAnQ+OI
m81RXNOVtBUczv8+1+DUyFWtao81Hugp64WgFl74YcKawlZpTS7nGiueF7UwNvxS
vKZ+0mHp5OVYE6Fq2rZQNk6sH9m1geM97i1y2TgZ2kNSwURSFf2SGs+RU+NA3oyb
T/zNtgokL1Pv89SEkBJaowPwnrs7mBGv1fbT0/uThMFn79PQ8NKzRTl04nLslLa6
nQ/OfXGecqRUV950wpsftbHVb6fmxJvzhReFxjW6/rvLuVktTG78Ct2YFhDqyd6H
VX+7vgnP8h1fPdXug6W/BIkwA6hkOLhzFczMbx7MCSViTKyDSCvIGCfJITwItsQP
eq4Cd74oklDzHxlD
-----END CERTIFICATE-----
Generated at Tue Apr 16 18:28:15 2024 by rpki-client on console-fra.rpki-client.org