Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer
File: XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer (raw, json)
Hash identifier: UKlwdVMWbOWVC+ucmtPsHnJ+Mwv1F/tt0fao6nV0dT4=
Subject key identifier: 5C:9F:6C:1D:BC:4E:CF:09:19:62:F6:0E:BE:5A:BF:CB:6B:03:1A:2D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E959
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 03 Apr 2024 15:50:36 +0000
Certificate not after: Wed 28 May 2025 00:00:00 +0000
Subordinate resources: AS: 136434
IP: 103.87.244.0/22
IP: 2405:f2c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125273 (0x1e959)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Apr 3 15:50:36 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=A9150EF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:99:8f:d4:a2:01:29:1f:ed:1d:5f:7d:45:fa:
54:ba:bf:c3:b4:00:5a:3f:9d:63:a5:e5:b7:bd:6a:
9a:8a:9d:67:10:28:d6:de:af:56:16:0c:d8:9f:89:
79:2e:cf:d8:99:70:b1:03:8e:5a:5e:54:4e:cd:08:
9e:61:3d:1b:6c:ca:29:35:74:0d:78:ba:98:9b:61:
78:40:25:59:02:d1:6e:64:94:2a:b4:75:fb:aa:a3:
57:6d:44:67:06:2a:bf:8e:3d:64:51:f2:9a:a0:6b:
4f:c9:74:7f:70:03:dd:6e:67:f9:14:f8:50:16:b4:
07:cd:15:ed:ed:24:50:ce:01:39:61:1b:5c:bc:d3:
6c:0e:59:95:86:ad:00:d1:50:49:b1:dc:21:d3:eb:
a4:d2:7c:63:42:1c:e3:a4:84:5c:b8:9c:86:5d:48:
a8:7e:c7:42:0f:dc:85:c9:2c:18:43:9e:e1:ad:e6:
b6:f3:bc:18:70:9e:b7:93:50:f1:98:69:96:a1:7e:
31:b8:b9:cd:9a:07:0d:e4:97:f3:7a:74:8d:90:55:
99:2f:e5:9c:13:cd:f3:f5:88:d9:a4:fa:13:04:c1:
82:59:01:da:1e:c0:52:52:ad:40:0c:4d:ec:fd:e4:
2b:8f:d6:ab:aa:eb:95:38:47:91:80:d2:aa:fd:d0:
ae:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:9F:6C:1D:BC:4E:CF:09:19:62:F6:0E:BE:5A:BF:CB:6B:03:1A:2D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
136434
sbgp-ipAddrBlock: critical
IPv4:
103.87.244.0/22
IPv6:
2405:f2c0::/32
Signature Algorithm: sha256WithRSAEncryption
43:3c:ed:01:35:95:a2:ac:06:ab:32:a7:5d:5f:5b:77:c0:0b:
78:57:bd:03:93:ee:9a:52:cd:bf:16:cd:14:d6:5f:40:3d:2c:
6a:cf:ab:12:71:8c:6e:c1:a6:4b:98:8c:54:09:5b:1b:36:40:
fc:60:22:86:9d:34:51:a3:8d:24:8f:6f:99:fb:41:09:fe:c3:
ff:7a:46:ff:f0:7c:8b:6d:88:89:b2:dc:84:6f:91:01:7f:41:
e0:f3:db:88:8d:c0:7d:6c:33:f3:a1:62:34:ad:49:5f:74:e7:
c8:f5:14:60:bc:17:5d:31:f0:5b:37:eb:cc:c8:d6:c0:e1:53:
04:20:56:5f:e5:cf:52:5d:c5:09:79:6d:91:a2:87:2c:e0:52:
cb:8d:26:0e:24:84:5d:fe:9a:80:b4:7d:5e:0e:5f:a1:52:ab:
bc:2e:26:f4:e0:07:8a:42:e0:43:9f:36:0a:e6:6c:25:03:5e:
a8:98:34:f8:27:a0:57:6d:0e:23:c9:d7:7a:16:00:04:84:02:
f1:77:24:5e:88:ef:16:37:5f:fc:b1:63:d2:72:06:ad:98:d2:
df:82:32:15:cc:9e:45:a3:c8:21:06:44:28:15:bf:87:84:5d:
8a:22:56:e0:74:cd:e1:04:53:7a:23:d1:90:3c:3f:f5:fa:bb:
12:9c:64:ae
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAelZMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDQwMzE1NTAzNloXDTI1MDUyODAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNTBFRjcxMTAvBgNVBAUTKDVDOUY2QzFEQkM0RUNGMDkxOTYyRjYw
RUJFNUFCRkNCNkIwMzFBMkQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDHmY/UogEpH+0dX31F+lS6v8O0AFo/nWOl5be9apqKnWcQKNber1YWDNifiXku
z9iZcLEDjlpeVE7NCJ5hPRtsyik1dA14upibYXhAJVkC0W5klCq0dfuqo1dtRGcG
Kr+OPWRR8pqga0/JdH9wA91uZ/kU+FAWtAfNFe3tJFDOATlhG1y802wOWZWGrQDR
UEmx3CHT66TSfGNCHOOkhFy4nIZdSKh+x0IP3IXJLBhDnuGt5rbzvBhwnreTUPGY
aZahfjG4uc2aBw3kl/N6dI2QVZkv5ZwTzfP1iNmk+hMEwYJZAdoewFJSrUAMTez9
5CuP1quq65U4R5GA0qr90K6tAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUXJ9sHbxO
zwkZYvYOvlq/y2sDGi0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTUwRUY3L0IwNzEzOTdDMDVFNjExRUE4MEJDRDY3Q0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE1MEVGNy9CMDcxMzk3QzA1RTYxMUVBODBCQ0Q2N0NDNEY5QUUwMi9YSjlzSGJ4
T3p3a1pZdllPdmxxX3kyc0RHaTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhTyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZ1f0MA0EAgAC
MAcDBQAkBfLAMA0GCSqGSIb3DQEBCwUAA4IBAQBDPO0BNZWirAarMqddX1t3wAt4
V70Dk+6aUs2/Fs0U1l9APSxqz6sScYxuwaZLmIxUCVsbNkD8YCKGnTRRo40kj2+Z
+0EJ/sP/ekb/8HyLbYiJstyEb5EBf0Hg89uIjcB9bDPzoWI0rUlfdOfI9RRgvBdd
MfBbN+vMyNbA4VMEIFZf5c9SXcUJeW2Roocs4FLLjSYOJIRd/pqAtH1eDl+hUqu8
Lib04AeKQuBDnzYK5mwlA16omDT4J6BXbQ4jydd6FgAEhALxdyReiO8WN1/8sWPS
cgatmNLfgjIVzJ5Fo8ghBkQoFb+HhF2KIlbgdM3hBFN6I9GQPD/1+rsSnGSu
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:27 2025 by rpki-client