Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer
File: OoXUR-GGdf7VrgXJKTee761by8A.cer (raw, json)
Hash identifier: 7YFnIa8y0fhfUoYtOKRB3UPL8rmqX/HVnvU/cMPxpV8=
Subject key identifier: 3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0218A9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 02 Nov 2024 15:24:38 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 141191
IP: 103.156.22.0/23
IP: 2001:df4:f780::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 06:14:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137385 (0x218a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 2 15:24:38 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A91E838F/serialNumber=3A85D447E18675FED5AE05C929379EEFAD5BCBC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:3e:c2:f4:b7:58:18:5f:ed:88:00:86:68:a1:
8f:80:d5:af:88:5a:a5:1c:dd:58:72:1b:cb:06:a9:
cf:5d:b6:a1:ca:66:4d:e5:eb:77:11:a9:c7:12:1e:
9e:40:c8:41:4b:e6:38:43:dc:5a:8d:09:8d:a1:80:
7c:6f:a9:bb:23:3a:79:8e:f6:e8:d7:4c:97:82:f7:
dc:15:12:8b:12:ca:73:3d:16:9d:84:ca:5c:c6:f6:
b5:a1:78:46:e9:e0:49:41:a5:4e:f7:29:b1:76:bb:
83:9e:c0:ef:80:26:19:3f:a2:fc:bd:79:2b:72:52:
2f:9d:f6:ce:a1:c5:73:60:b6:e9:9a:e5:f3:89:e1:
c8:ef:03:69:50:96:6d:48:c6:a6:17:26:a2:70:99:
3e:8c:65:a7:25:82:e1:15:66:84:1e:d3:56:2e:44:
ee:c3:5f:83:5c:a2:e2:e3:7b:aa:bf:f0:9c:0e:e2:
1a:2e:6a:b4:f4:ab:06:f3:45:ac:88:57:7f:f9:a1:
2f:b3:9f:84:a4:72:22:f8:39:04:e7:57:aa:09:44:
6f:30:ab:54:38:51:c4:78:6f:6f:b0:04:92:fc:37:
12:0b:86:44:9b:1b:91:c6:43:e3:ac:a9:73:50:e2:
cb:d8:cc:13:6f:cc:dd:bf:70:1a:ba:2d:b8:71:e3:
3f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
141191
sbgp-ipAddrBlock: critical
IPv4:
103.156.22.0/23
IPv6:
2001:df4:f780::/48
Signature Algorithm: sha256WithRSAEncryption
29:09:80:f8:5d:e3:cf:b6:61:fa:f7:e2:8e:51:63:40:16:16:
41:a8:5a:9f:4a:85:e3:44:68:ab:e2:f4:0e:9e:b1:11:e5:9b:
fb:e9:52:61:f0:84:0d:32:67:c1:7f:2c:bc:b2:00:0b:11:60:
d4:ea:72:89:e7:c8:ba:52:9e:dc:d0:65:bc:3c:02:d5:5a:bc:
55:14:79:c0:c7:48:c8:e5:45:0c:4f:28:5a:9d:6b:03:e9:cf:
f3:e9:39:90:29:d4:d7:ee:49:6d:95:f9:ed:03:bb:9b:3c:f8:
21:5b:01:ec:c6:e5:bd:79:83:2d:57:89:14:45:22:26:90:ce:
80:a9:08:aa:0e:71:92:4f:49:6e:52:bb:a2:b8:28:94:be:ed:
34:75:b7:de:4a:99:bf:7c:6f:9f:ef:50:14:16:44:27:3a:93:
e6:18:1c:47:62:c4:ef:e7:00:31:9e:34:32:ba:4a:a4:3d:5b:
2d:e6:e5:4f:83:17:74:06:6f:94:62:4b:77:8b:b9:27:ce:40:
f7:de:40:f2:60:e9:50:99:a8:4b:ff:e2:ca:8a:55:28:75:75:
a0:c6:8f:46:ed:84:84:3c:dd:b7:2b:27:43:f9:1e:f3:90:a2:
36:48:92:40:c7:6b:fd:d2:3e:b1:63:e0:39:2d:34:f0:a7:7b:
84:94:65:dc
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAhipMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MTEwMjE1MjQzOFoXDTI1MTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRTgzOEYxMTAvBgNVBAUTKDNBODVENDQ3RTE4Njc1RkVENUFFMDVD
OTI5Mzc5RUVGQUQ1QkNCQzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDpPsL0t1gYX+2IAIZooY+A1a+IWqUc3VhyG8sGqc9dtqHKZk3l63cRqccSHp5A
yEFL5jhD3FqNCY2hgHxvqbsjOnmO9ujXTJeC99wVEosSynM9Fp2EylzG9rWheEbp
4ElBpU73KbF2u4OewO+AJhk/ovy9eStyUi+d9s6hxXNgtuma5fOJ4cjvA2lQlm1I
xqYXJqJwmT6MZaclguEVZoQe01YuRO7DX4NcouLje6q/8JwO4houarT0qwbzRayI
V3/5oS+zn4SkciL4OQTnV6oJRG8wq1Q4UcR4b2+wBJL8NxILhkSbG5HGQ+OsqXNQ
4svYzBNvzN2/cBq6Lbhx4z9LAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUOoXUR+GG
df7VrgXJKTee761by8AwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUU4MzhGL0E5Rjc3Mzk4MDZFMTExRUI5QjMzNUM2REM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFFODM4Ri9BOUY3NzM5ODA2RTExMUVCOUIzMzVDNkRDNEY5QUUwMi9Pb1hVUi1H
R2RmN1ZyZ1hKS1RlZTc2MWJ5OEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAieHMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ5wWMA8EAgAC
MAkDBwAgAQ3094AwDQYJKoZIhvcNAQELBQADggEBACkJgPhd48+2Yfr34o5RY0AW
FkGoWp9KheNEaKvi9A6esRHlm/vpUmHwhA0yZ8F/LLyyAAsRYNTqconnyLpSntzQ
Zbw8AtVavFUUecDHSMjlRQxPKFqdawPpz/PpOZAp1NfuSW2V+e0Du5s8+CFbAezG
5b15gy1XiRRFIiaQzoCpCKoOcZJPSW5Su6K4KJS+7TR1t95Kmb98b5/vUBQWRCc6
k+YYHEdixO/nADGeNDK6SqQ9Wy3m5U+DF3QGb5RiS3eLuSfOQPfeQPJg6VCZqEv/
4sqKVSh1daDGj0bthIQ83bcrJ0P5HvOQojZIkkDHa/3SPrFj4DktNPCne4SUZdw=
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:58:43 2024 by rpki-client on console-fra.rpki-client.org