Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.cer
File: USYZ3gwdG7Pld5lO4MX_MNSRzQ4.cer (raw, json)
Hash identifier: 7FQnoy0y5/JTiklwXMRCOpJPEAID34K+4QTmtTCoxEI=
Subject key identifier: 51:26:19:DE:0C:1D:1B:B3:E5:77:99:4E:E0:C5:FF:30:D4:91:CD:0E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01C612
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 25 Oct 2023 18:30:58 +0000
Certificate not after: Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources: AS: 134747
IP: 103.197.88.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Apr 2024 17:32:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116242 (0x1c612)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 25 18:30:58 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=A91B9AF0/serialNumber=512619DE0C1D1BB3E577994EE0C5FF30D491CD0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b4:e7:06:b9:3e:06:28:66:9c:97:0a:bb:0a:
a1:ac:8c:52:97:6f:54:ea:fb:00:04:21:56:c2:bc:
8c:8a:3c:d6:a6:2c:29:53:5a:59:b1:6a:d6:87:90:
15:79:1a:c9:59:92:83:3f:2c:e9:61:27:0c:6e:37:
07:cb:a2:5e:ac:46:d4:6b:5c:90:fc:1d:5f:ae:52:
de:4b:a8:fb:81:20:ff:ea:63:d5:74:d7:6f:9d:ac:
2e:44:2c:b9:86:52:9d:bd:9b:a2:b9:8d:fb:3f:75:
19:5b:47:ff:fc:6b:3a:e3:b4:29:7d:96:f7:9a:d3:
f6:11:50:cc:3f:ed:19:7d:fe:35:cb:e8:a6:9e:98:
34:fd:e2:ff:bc:12:f1:6e:fe:f3:96:01:64:5c:6e:
ac:f3:7c:6b:73:7f:85:57:7b:35:4f:f2:f7:91:00:
bc:90:39:c9:e4:fb:c8:5f:ef:05:64:c1:c6:93:e5:
ed:af:2c:75:a2:c7:79:0b:18:6f:cd:17:1b:68:ff:
89:62:c2:b1:0c:fc:58:35:fb:ca:6c:86:d9:5f:c7:
61:a8:4b:bf:dd:6f:e1:a7:e9:fa:f1:89:09:a1:f3:
d3:53:94:81:65:5f:00:c2:dc:d0:17:2f:63:80:e8:
d1:0e:d6:17:ae:dd:f0:19:fc:87:41:04:00:2e:5f:
08:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:26:19:DE:0C:1D:1B:B3:E5:77:99:4E:E0:C5:FF:30:D4:91:CD:0E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
134747
sbgp-ipAddrBlock: critical
IPv4:
103.197.88.0/24
Signature Algorithm: sha256WithRSAEncryption
01:9d:f4:50:2d:29:08:cb:7d:ab:70:20:48:d7:53:00:83:a0:
48:9f:dd:2d:cb:88:2f:12:b2:28:8e:e4:2b:df:42:21:bd:21:
22:19:03:5e:47:01:12:49:65:d9:b5:bd:69:4e:28:f5:12:3a:
56:4f:17:c2:a6:78:6a:23:4b:72:65:4c:99:89:02:89:60:3e:
34:35:da:22:91:d6:3d:52:6c:47:e7:95:55:ec:f6:52:ad:ef:
d6:54:0b:8e:d4:44:86:ab:e5:30:03:46:5c:d6:8d:6a:89:10:
58:67:ff:f6:87:60:56:27:ae:73:7c:22:2e:2a:67:fc:01:dd:
cf:2b:6e:f6:87:8c:c3:ba:79:b4:87:23:b9:88:bf:7a:03:77:
ad:f3:72:d4:e5:db:51:f6:ae:5e:4f:47:20:15:4f:19:d5:4e:
c9:0b:ca:44:3a:d0:b2:20:5c:3f:af:94:22:3a:89:4c:23:bd:
e1:d7:5e:b9:d7:8e:14:1e:9f:ab:b1:2a:bb:7c:53:f0:6d:a4:
ad:ae:d2:2e:bc:3c:35:fb:f3:ba:e6:e5:df:57:e2:08:1e:1b:
06:55:69:af:50:b0:ff:17:89:61:f7:29:1a:8b:02:b7:11:5e:
6c:4c:0d:b5:60:8b:97:0e:9c:01:ce:a8:35:cf:79:7d:66:de:
a0:6e:b4:3f
-----BEGIN CERTIFICATE-----
MIIGGjCCBQKgAwIBAgIDAcYSMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMTAyNTE4MzA1OFoXDTI0MTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQjlBRjAxMTAvBgNVBAUTKDUxMjYxOURFMEMxRDFCQjNFNTc3OTk0
RUUwQzVGRjMwRDQ5MUNEMEUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCstOcGuT4GKGaclwq7CqGsjFKXb1Tq+wAEIVbCvIyKPNamLClTWlmxataHkBV5
GslZkoM/LOlhJwxuNwfLol6sRtRrXJD8HV+uUt5LqPuBIP/qY9V012+drC5ELLmG
Up29m6K5jfs/dRlbR//8azrjtCl9lvea0/YRUMw/7Rl9/jXL6KaemDT94v+8EvFu
/vOWAWRcbqzzfGtzf4VXezVP8veRALyQOcnk+8hf7wVkwcaT5e2vLHWix3kLGG/N
Fxto/4liwrEM/Fg1+8pshtlfx2GoS7/db+Gn6frxiQmh89NTlIFlXwDC3NAXL2OA
6NEO1heu3fAZ/IdBBAAuXwiJAgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUUSYZ3gwd
G7Pld5lO4MX/MNSRzQ4wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUI5QUYwL0YxNjJEQTRFOUY5NzExRTU5NDg4ODYwRkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFCOUFGMC9GMTYyREE0RTlGOTcxMUU1OTQ4ODg2MEZDNEY5QUUwMi9VU1laM2d3
ZEc3UGxkNWxPNE1YX01OU1J6UTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAg5bMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ8VYMA0GCSqG
SIb3DQEBCwUAA4IBAQABnfRQLSkIy32rcCBI11MAg6BIn90ty4gvErIojuQr30Ih
vSEiGQNeRwESSWXZtb1pTij1EjpWTxfCpnhqI0tyZUyZiQKJYD40NdoikdY9UmxH
55VV7PZSre/WVAuO1ESGq+UwA0Zc1o1qiRBYZ//2h2BWJ65zfCIuKmf8Ad3PK272
h4zDunm0hyO5iL96A3et83LU5dtR9q5eT0cgFU8Z1U7JC8pEOtCyIFw/r5QiOolM
I73h1165144UHp+rsSq7fFPwbaStrtIuvDw1+/O65uXfV+IIHhsGVWmvULD/F4lh
9ykaiwK3EV5sTA21YIuXDpwBzqg1z3l9Zt6gbrQ/
-----END CERTIFICATE-----
Generated at Fri Apr 19 19:17:12 2024 by rpki-client on console-ams.rpki-client.org