Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer
File: PWRH1yl0gylOzsuFOl5QCTXRuNc.cer (raw, json)
Hash identifier: XGM5OCHdBYsLCe/j8PB2tPcmBCBArpj5G+ZcAUR1Vvg=
Subject key identifier: 3D:64:47:D7:29:74:83:29:4E:CE:CB:85:3A:5E:50:09:35:D1:B8:D7
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01D7B4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 10 Jan 2024 16:47:51 +0000
Certificate not after: Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources: IP: 103.177.248.0/23
IP: 2400:3e20::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 08 May 2024 19:45:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120756 (0x1d7b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jan 10 16:47:51 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=A9170E11/serialNumber=3D6447D7297483294ECECB853A5E500935D1B8D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:df:0c:4b:d7:a9:4b:43:ef:82:40:0d:d3:7d:
94:ac:36:59:d8:ab:4e:44:1d:1d:18:30:90:6d:de:
95:f8:bf:8f:d3:45:8a:75:7d:b1:95:87:93:9f:da:
1a:2f:07:97:7e:0c:dc:ca:34:02:d3:c2:97:a7:67:
5f:1f:82:60:93:10:88:e1:10:1e:21:04:87:2d:85:
4e:da:17:a7:d5:34:31:d3:ad:32:49:c2:1f:3d:4d:
95:83:c8:f6:e4:6b:92:1b:f8:43:6e:dc:0a:e8:80:
fc:94:af:20:9d:60:62:8a:5b:3f:ce:f1:55:a6:bc:
25:bd:69:ad:27:2b:a7:e5:ad:82:3c:eb:1d:88:0a:
cf:59:83:26:84:46:df:5f:8a:7f:84:38:cb:11:74:
8d:6e:76:de:fa:02:4d:d7:4f:4a:4e:21:04:1c:be:
a3:9a:34:0a:fc:aa:31:c9:68:53:d2:9c:43:1a:2b:
aa:9e:d5:22:e9:aa:93:72:58:db:a7:d9:7b:f6:2f:
71:e8:9e:1e:4d:ac:ca:c7:68:95:ab:67:7a:e3:5d:
d4:41:c5:89:aa:9d:53:d1:35:c3:92:3a:23:59:36:
87:25:1c:7e:94:3d:79:d6:1f:c4:f5:0e:ca:f9:06:
ab:79:a8:37:4c:f9:23:16:b0:44:02:38:5e:2b:be:
5e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:64:47:D7:29:74:83:29:4E:CE:CB:85:3A:5E:50:09:35:D1:B8:D7
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.177.248.0/23
IPv6:
2400:3e20::/32
Signature Algorithm: sha256WithRSAEncryption
4b:8a:99:56:20:55:d2:5c:8f:4c:04:20:bc:e6:44:da:cc:00:
c1:7e:0c:31:2c:5e:46:a4:ff:4d:13:f7:ef:b1:fb:cf:d0:89:
1a:dc:fb:fb:cb:b7:33:1b:bf:be:ee:af:fa:4b:8a:9a:d5:2e:
3c:20:64:fc:a2:f5:f6:41:32:ce:f8:e7:99:81:bf:83:da:34:
9c:d3:60:f1:e6:30:e0:14:49:a9:81:11:6a:60:5c:3f:4c:93:
f1:74:46:03:ec:fb:15:8a:e5:2b:3e:90:cb:cb:81:58:7a:ff:
50:14:a7:e9:4e:d8:2d:ea:c1:a5:c7:dd:e4:21:0d:14:37:20:
35:eb:57:6b:d8:ac:07:4c:fc:9d:2d:a7:ad:8e:94:f2:a4:64:
15:03:58:c8:11:89:5c:9a:8e:9d:54:6a:fb:fb:51:43:c2:69:
39:a7:ee:e7:55:47:e1:0f:74:b4:5a:18:15:82:65:f9:28:89:
78:0b:cd:a7:10:8f:eb:5d:ef:8e:d3:b2:5a:ae:fa:26:73:7f:
da:af:8d:85:96:c3:dc:2e:db:ea:aa:1b:60:de:97:09:51:93:
70:24:4a:a6:ae:82:80:2c:5a:91:f6:a5:f8:65:61:e9:5f:4b:
57:8c:55:a3:c7:b9:43:2e:84:79:b7:70:48:eb:d0:d1:6c:00:
13:bf:59:4a
-----BEGIN CERTIFICATE-----
MIIGDTCCBPWgAwIBAgIDAde0MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDExMDE2NDc1MVoXDTI1MDMzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNzBFMTExMTAvBgNVBAUTKDNENjQ0N0Q3Mjk3NDgzMjk0RUNFQ0I4
NTNBNUU1MDA5MzVEMUI4RDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCv3wxL16lLQ++CQA3TfZSsNlnYq05EHR0YMJBt3pX4v4/TRYp1fbGVh5Of2hov
B5d+DNzKNALTwpenZ18fgmCTEIjhEB4hBIcthU7aF6fVNDHTrTJJwh89TZWDyPbk
a5Ib+ENu3ArogPyUryCdYGKKWz/O8VWmvCW9aa0nK6flrYI86x2ICs9ZgyaERt9f
in+EOMsRdI1udt76Ak3XT0pOIQQcvqOaNAr8qjHJaFPSnEMaK6qe1SLpqpNyWNun
2Xv2L3Honh5NrMrHaJWrZ3rjXdRBxYmqnVPRNcOSOiNZNoclHH6UPXnWH8T1Dsr5
Bqt5qDdM+SMWsEQCOF4rvl4NAgMBAAGjggMCMIIC/jAdBgNVHQ4EFgQUPWRH1yl0
gylOzsuFOl5QCTXRuNcwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTcwRTExL0QwNjBDOUIyNUJENjExRUNBRDgzMzY1MUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE3MEUxMS9EMDYwQzlCMjVCRDYxMUVDQUQ4MzM2NTFDNEY5QUUwMi9QV1JIMXls
MGd5bE96c3VGT2w1UUNUWFJ1TmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8EHzAd
MAwEAgABMAYDBAFnsfgwDQQCAAIwBwMFACQAPiAwDQYJKoZIhvcNAQELBQADggEB
AEuKmVYgVdJcj0wEILzmRNrMAMF+DDEsXkak/00T9++x+8/QiRrc+/vLtzMbv77u
r/pLiprVLjwgZPyi9fZBMs7455mBv4PaNJzTYPHmMOAUSamBEWpgXD9Mk/F0RgPs
+xWK5Ss+kMvLgVh6/1AUp+lO2C3qwaXH3eQhDRQ3IDXrV2vYrAdM/J0tp62OlPKk
ZBUDWMgRiVyajp1Uavv7UUPCaTmn7udVR+EPdLRaGBWCZfkoiXgLzacQj+td747T
slqu+iZzf9qvjYWWw9wu2+qqG2DelwlRk3AkSqaugoAsWpH2pfhlYelfS1eMVaPH
uUMuhHm3cEjr0NFsABO/WUo=
-----END CERTIFICATE-----
Generated at Wed May 1 20:49:49 2024 by rpki-client on console-ams.rpki-client.org