Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer
File: PPkWCCJoGcPp2oTRGVtTJvkkn70.cer (raw, json)
Hash identifier: m2fHhL4T5WLUAX+be7CigyRpjM1CxitHK/Afmnv9HK4=
Subject key identifier: 3C:F9:16:08:22:68:19:C3:E9:DA:84:D1:19:5B:53:26:F9:24:9F:BD
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E5F5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 22 Mar 2024 15:22:02 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: AS: 9716
AS: 24017
AS: 133414
IP: 202.10.128.0/17
IP: 202.80.64.0/19
IP: 203.17.26.0/23
IP: 203.18.236.0/22
IP: 203.21.224.0 -- 203.22.17.255
IP: 203.201.0.0/19
IP: 2001:df0:24e::/48
IP: 2405:7f00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 21:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124405 (0x1e5f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 22 15:22:02 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A9155AE4/serialNumber=3CF91608226819C3E9DA84D1195B5326F9249FBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e2:37:94:89:af:ee:5f:87:e3:fa:44:d8:7d:
1e:41:35:a2:e5:dc:5f:30:d7:91:6c:73:d0:7c:12:
ff:30:33:42:02:3e:dc:20:78:85:5b:8a:1d:3c:1d:
ee:f1:75:da:0d:82:eb:39:86:31:9d:31:01:a7:5e:
5a:c1:53:33:85:8b:b3:8b:ee:4c:fa:a7:fc:8b:7c:
08:11:ac:e5:00:25:76:8d:26:51:25:76:1a:30:71:
49:ad:0b:df:8b:47:3a:5d:7e:0e:97:3e:f7:35:29:
72:ae:92:ef:7c:30:f6:8d:01:2e:c6:a8:23:29:b7:
b6:e8:ef:f2:25:a1:dd:40:0c:31:cb:cc:47:7e:c5:
f4:b6:33:38:b1:d8:d5:4b:46:1f:23:1a:e0:0d:a3:
79:aa:5a:27:49:13:d8:f4:71:1b:cd:08:9d:03:55:
fd:af:55:78:bd:bd:b4:71:f1:2b:9a:7a:50:38:b2:
ed:66:0f:bf:68:c4:44:56:69:21:d5:09:da:f2:d4:
d6:7c:b3:99:9e:dc:ae:24:42:b2:b5:af:6a:6a:85:
cc:f2:ab:d6:37:71:85:38:07:50:45:9b:14:1e:0c:
e9:a4:88:25:7a:86:96:af:fb:85:5b:52:7e:85:df:
1f:14:52:6b:8f:fb:25:8f:7d:73:bc:6b:c9:32:b3:
a8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F9:16:08:22:68:19:C3:E9:DA:84:D1:19:5B:53:26:F9:24:9F:BD
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9716
24017
133414
sbgp-ipAddrBlock: critical
IPv4:
202.10.128.0/17
202.80.64.0/19
203.17.26.0/23
203.18.236.0/22
203.21.224.0-203.22.17.255
203.201.0.0/19
IPv6:
2001:df0:24e::/48
2405:7f00::/32
Signature Algorithm: sha256WithRSAEncryption
24:9b:4c:48:30:14:62:a8:6a:88:2c:9d:8c:cb:cc:2a:24:a9:
02:93:06:9f:7d:20:41:e8:81:89:87:ca:96:73:92:db:95:83:
ff:39:b8:38:69:be:9b:33:9b:df:bd:bf:f0:66:83:cd:43:66:
98:c4:c5:59:35:ed:fd:b3:96:4b:2e:4d:44:e8:0f:01:0e:1f:
04:b9:8d:65:c5:2c:21:be:95:97:77:c6:c0:b8:2f:fa:54:d2:
e5:4d:fc:86:88:05:f6:68:60:26:86:f1:f1:0c:89:28:da:e6:
b6:5b:6e:c4:b2:16:3a:9e:c5:db:ad:f8:77:98:ac:39:23:72:
b4:53:8b:0f:a8:84:d0:89:82:e2:9e:5c:0f:95:53:cd:10:95:
87:62:66:65:6e:59:17:88:1d:0f:12:58:4b:a1:a9:23:48:d5:
19:f4:de:4e:09:bc:f8:bc:a2:9f:c2:00:08:c5:06:e3:3f:cf:
23:5c:d9:04:02:c7:12:13:4e:21:cc:eb:5a:74:72:d2:ba:92:
c6:a5:bc:11:23:d9:3d:1d:52:cc:e4:7c:53:44:71:7b:22:86:
3f:02:ae:1a:a2:ff:13:9b:1a:44:8c:a7:24:8f:1e:44:90:d4:
46:65:ee:fa:8c:89:b2:6b:3c:bf:0e:9b:76:a3:31:46:eb:ba:
96:90:ef:86
-----BEGIN CERTIFICATE-----
MIIGYDCCBUigAwIBAgIDAeX1MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDMyMjE1MjIwMloXDTI1MDUwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNTVBRTQxMTAvBgNVBAUTKDNDRjkxNjA4MjI2ODE5QzNFOURBODRE
MTE5NUI1MzI2RjkyNDlGQkQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDL4jeUia/uX4fj+kTYfR5BNaLl3F8w15Fsc9B8Ev8wM0ICPtwgeIVbih08He7x
ddoNgus5hjGdMQGnXlrBUzOFi7OL7kz6p/yLfAgRrOUAJXaNJlEldhowcUmtC9+L
Rzpdfg6XPvc1KXKuku98MPaNAS7GqCMpt7bo7/Ilod1ADDHLzEd+xfS2Mzix2NVL
Rh8jGuANo3mqWidJE9j0cRvNCJ0DVf2vVXi9vbRx8SuaelA4su1mD79oxERWaSHV
Cdry1NZ8s5me3K4kQrK1r2pqhczyq9Y3cYU4B1BFmxQeDOmkiCV6hpav+4VbUn6F
3x8UUmuP+yWPfXO8a8kys6hxAgMBAAGjggNVMIIDUTAdBgNVHQ4EFgQUPPkWCCJo
GcPp2oTRGVtTJvkkn70wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTU1QUU0L0U1RDZEMEFDMDY1MzExRUQ4MjdCRUY1NEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE1NUFFNC9FNUQ2RDBBQzA2NTMxMUVEODI3QkVGNTRDNEY5QUUwMi9QUGtXQ0NK
b0djUHAyb1RSR1Z0VEp2a2tuNzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQgBAf8EEzAR
oA8wDQICJfQCAl3RAgMCCSYwXQYIKwYBBQUHAQcBAf8ETjBMMDIEAgABMCwDBAfK
CoADBAXKUEADBAHLERoDBALLEuwwDAMEBcsV4AMEAcsWEAMEBcvJADAWBAIAAjAQ
AwcAIAEN8AJOAwUAJAV/ADANBgkqhkiG9w0BAQsFAAOCAQEAJJtMSDAUYqhqiCyd
jMvMKiSpApMGn30gQeiBiYfKlnOS25WD/zm4OGm+mzOb372/8GaDzUNmmMTFWTXt
/bOWSy5NROgPAQ4fBLmNZcUsIb6Vl3fGwLgv+lTS5U38hogF9mhgJobx8QyJKNrm
tltuxLIWOp7F2634d5isOSNytFOLD6iE0ImC4p5cD5VTzRCVh2JmZW5ZF4gdDxJY
S6GpI0jVGfTeTgm8+Lyin8IACMUG4z/PI1zZBALHEhNOIczrWnRy0rqSxqW8ESPZ
PR1SzOR8U0RxeyKGPwKuGqL/E5saRIynJI8eRJDURmXu+oyJsms8vw6bdqMxRuu6
lpDvhg==
-----END CERTIFICATE-----
Generated at Thu Apr 25 22:34:22 2024 by rpki-client on console-fra.rpki-client.org