Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nb-dxVNaaDq2lad4JnhtPfnixbQ.cer
File: Nb-dxVNaaDq2lad4JnhtPfnixbQ.cer (raw, json)
Hash identifier: cR5/z640VVgNa/AKYXQhuwEnyNxWLkyMccW2w4W8ODA=
Subject key identifier: 35:BF:9D:C5:53:5A:68:3A:B6:95:A7:78:26:78:6D:3D:F9:E2:C5:B4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E567
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B9385/73CF676A8A0B11EAA2964C0BC4F9AE02/Nb-dxVNaaDq2lad4JnhtPfnixbQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B9385/73CF676A8A0B11EAA2964C0BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 19 Mar 2024 20:53:24 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: IP: 103.108.92.0/22
IP: 2402:63c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Apr 2024 06:50:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124263 (0x1e567)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 19 20:53:24 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A91B9385/serialNumber=35BF9DC5535A683AB695A77826786D3DF9E2C5B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0c:b5:d3:ca:6a:38:6d:6d:84:e3:e6:35:1c:
37:c7:8e:53:16:a5:86:cb:f6:8b:32:b4:b7:bf:35:
57:99:09:aa:75:e5:c8:69:70:5e:e4:f8:36:cb:ef:
82:4a:f3:51:da:96:7f:b5:2e:55:0b:b9:07:84:70:
3d:25:d3:fe:55:de:af:21:6b:20:df:ce:58:57:e4:
bd:90:f4:d9:ab:d8:be:c1:f4:23:ff:77:f3:78:ef:
4e:f6:d3:72:d2:55:c6:bf:7a:b8:16:3c:b7:24:e8:
b3:3f:e6:fe:98:d1:df:c2:f7:dc:96:91:5e:a1:33:
27:af:de:da:e6:af:22:c0:c5:c3:4c:b9:64:c4:be:
34:5e:e4:2a:c7:0c:94:1e:e0:2c:93:1d:d2:1c:35:
3d:65:62:17:5c:da:60:68:54:c3:34:fe:5d:4f:29:
47:8f:1e:04:45:68:a1:60:85:52:7c:72:04:7e:cc:
91:09:df:54:cd:02:ac:66:ad:df:f0:2c:1e:e3:69:
7c:83:c5:27:46:1b:14:3b:06:2d:68:0c:e6:4c:63:
de:db:6d:fe:25:7b:0d:a9:2f:8d:5d:0a:9f:11:79:
01:e3:c8:34:f4:16:90:bd:e1:1c:bb:65:c9:c9:4b:
a2:34:21:dd:de:ed:ab:1d:bd:7d:47:4e:a0:32:03:
d4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:BF:9D:C5:53:5A:68:3A:B6:95:A7:78:26:78:6D:3D:F9:E2:C5:B4
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B9385/73CF676A8A0B11EAA2964C0BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B9385/73CF676A8A0B11EAA2964C0BC4F9AE02/Nb-dxVNaaDq2lad4JnhtPfnixbQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.108.92.0/22
IPv6:
2402:63c0::/32
Signature Algorithm: sha256WithRSAEncryption
71:07:b4:df:06:4e:be:c3:7f:a2:80:35:a1:4c:50:c5:0e:66:
7e:fb:9d:56:b8:47:15:33:3f:0d:ea:69:02:86:16:70:ed:21:
1d:ea:f9:90:ce:88:db:d8:c8:30:e1:1e:b0:d4:9f:50:db:62:
81:bc:15:00:b6:1b:fc:68:1c:79:7d:8b:a8:04:dc:ff:68:7f:
ac:dc:a6:f7:8f:19:d6:d9:0a:3c:63:ae:4d:af:cd:bf:32:07:
ed:45:5f:b0:df:45:dd:ee:83:44:19:9c:cf:b6:e6:ed:af:2b:
e5:55:7a:13:48:bf:9b:08:73:c1:07:e1:be:05:46:d2:17:4e:
b8:b3:dd:97:37:95:bd:3d:8a:aa:16:ce:23:39:25:4b:de:f0:
b0:f5:78:cb:1a:49:b9:9d:93:2e:c3:d7:82:f7:4e:ed:92:f7:
24:b4:dc:ec:bb:6d:fb:a6:8d:80:e7:40:24:94:d0:fc:1d:92:
7e:8e:ac:6f:03:85:5d:71:91:84:a6:85:a4:67:50:33:ed:d9:
07:b5:f4:bd:37:fc:48:dc:10:12:38:a1:dd:35:0f:6b:2e:93:
14:9b:20:1f:6c:bd:02:f9:09:b2:6e:a8:c0:63:f5:82:70:31:
13:29:1b:36:86:07:bd:0c:da:2a:2c:6a:71:99:b0:a1:cc:a5:
e5:85:48:45
-----BEGIN CERTIFICATE-----
MIIGDTCCBPWgAwIBAgIDAeVnMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDMxOTIwNTMyNFoXDTI1MDUwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQjkzODUxMTAvBgNVBAUTKDM1QkY5REM1NTM1QTY4M0FCNjk1QTc3
ODI2Nzg2RDNERjlFMkM1QjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCjDLXTymo4bW2E4+Y1HDfHjlMWpYbL9osytLe/NVeZCap15chpcF7k+DbL74JK
81Haln+1LlULuQeEcD0l0/5V3q8hayDfzlhX5L2Q9Nmr2L7B9CP/d/N4707203LS
Vca/ergWPLck6LM/5v6Y0d/C99yWkV6hMyev3trmryLAxcNMuWTEvjRe5CrHDJQe
4CyTHdIcNT1lYhdc2mBoVMM0/l1PKUePHgRFaKFghVJ8cgR+zJEJ31TNAqxmrd/w
LB7jaXyDxSdGGxQ7Bi1oDOZMY97bbf4lew2pL41dCp8ReQHjyDT0FpC94Ry7ZcnJ
S6I0Id3e7asdvX1HTqAyA9QzAgMBAAGjggMCMIIC/jAdBgNVHQ4EFgQUNb+dxVNa
aDq2lad4JnhtPfnixbQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUI5Mzg1LzczQ0Y2NzZBOEEwQjExRUFBMjk2NEMwQkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFCOTM4NS83M0NGNjc2QThBMEIxMUVBQTI5NjRDMEJDNEY5QUUwMi9OYi1keFZO
YWFEcTJsYWQ0Sm5odFBmbml4YlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8EHzAd
MAwEAgABMAYDBAJnbFwwDQQCAAIwBwMFACQCY8AwDQYJKoZIhvcNAQELBQADggEB
AHEHtN8GTr7Df6KANaFMUMUOZn77nVa4RxUzPw3qaQKGFnDtIR3q+ZDOiNvYyDDh
HrDUn1DbYoG8FQC2G/xoHHl9i6gE3P9of6zcpvePGdbZCjxjrk2vzb8yB+1FX7Df
Rd3ug0QZnM+25u2vK+VVehNIv5sIc8EH4b4FRtIXTriz3Zc3lb09iqoWziM5JUve
8LD1eMsaSbmdky7D14L3Tu2S9yS03Oy7bfumjYDnQCSU0Pwdkn6OrG8DhV1xkYSm
haRnUDPt2Qe19L03/EjcEBI4od01D2sukxSbIB9svQL5CbJuqMBj9YJwMRMpGzaG
B70M2iosanGZsKHMpeWFSEU=
-----END CERTIFICATE-----
Generated at Fri Apr 19 07:43:21 2024 by rpki-client on console-fra.rpki-client.org