Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_9C9_G0db07W7Tg5A59B6e3Gb7o.cer
File: _9C9_G0db07W7Tg5A59B6e3Gb7o.cer (raw, json)
Hash identifier: zxDjWVdJVDiuJhN2aZmndWwU60t6y5z8FgBFUxRMNw4=
Subject key identifier: FF:D0:BD:FC:6D:1D:6F:4E:D6:ED:38:39:03:9F:41:E9:ED:C6:6F:BA
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01F7C6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 06 Jun 2024 21:13:36 +0000
Certificate not after: Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources: AS: 137886
IP: 103.116.134.0/24
IP: 2001:df5:5300::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128966 (0x1f7c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 6 21:13:36 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=A919697D/serialNumber=FFD0BDFC6D1D6F4ED6ED3839039F41E9EDC66FBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e9:8e:8e:33:3a:b4:20:c6:2b:09:8c:50:36:
bc:2d:83:71:24:dc:89:e5:0b:90:12:cf:b7:a6:4f:
8c:c5:2d:6a:26:16:dd:4a:a9:53:f5:a8:da:c2:b0:
fd:64:e8:40:bd:47:80:75:43:81:4f:db:81:b5:48:
24:0f:c9:72:12:30:84:70:9b:2b:73:89:41:fd:f8:
27:df:7d:de:1e:d2:a3:89:7d:cf:b2:92:89:f8:7b:
c3:f8:eb:5a:27:5a:73:97:de:f5:fd:16:26:4d:61:
fc:03:e3:50:ab:8a:a3:c0:5f:ec:3a:a1:44:6d:78:
c1:a8:8d:7b:8c:1e:42:b6:2f:de:56:3c:57:bf:da:
35:cb:e9:1f:76:2c:9a:83:31:ca:27:1e:d8:66:34:
b9:b2:a9:87:88:f7:70:9d:21:70:c1:b8:95:34:90:
96:c5:04:22:31:d3:ce:ac:d0:a7:cb:cf:f5:76:d5:
f8:d4:f4:01:28:c5:50:a0:08:ef:36:22:e1:37:c6:
1e:c9:2e:b1:1b:4a:3a:fa:57:3b:3b:bb:58:c1:f0:
5a:d8:0f:38:6a:7d:70:1d:1e:47:ac:c8:e5:84:fa:
db:4d:ea:8d:71:67:21:26:88:04:c4:75:87:4b:38:
4c:98:c1:bf:b7:ef:c9:73:64:29:21:df:a4:50:84:
71:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D0:BD:FC:6D:1D:6F:4E:D6:ED:38:39:03:9F:41:E9:ED:C6:6F:BA
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137886
sbgp-ipAddrBlock: critical
IPv4:
103.116.134.0/24
IPv6:
2001:df5:5300::/48
Signature Algorithm: sha256WithRSAEncryption
a8:e1:85:3d:a6:39:5b:a0:34:52:f6:5f:a4:01:7a:bb:f3:2a:
06:6b:04:1e:ef:56:58:d6:58:b3:b0:db:49:d1:9f:97:49:a6:
c4:2b:5b:f6:27:60:05:a8:6e:5d:e4:30:89:23:c9:62:57:18:
26:97:ec:d1:43:7b:da:e3:b8:7d:99:e3:e2:1c:40:84:71:e6:
09:a0:99:e6:69:a5:79:e0:3a:4c:e8:55:ae:58:12:d3:b1:7b:
27:fd:cb:f2:33:78:77:0f:c1:bc:dd:d6:13:5b:cd:90:bb:8e:
0f:7f:8d:28:5a:c3:4b:40:44:33:16:98:4a:4c:d8:5e:d1:c0:
20:3b:cb:36:1e:a7:ec:d4:55:cf:74:03:d7:6a:fd:8e:e5:ec:
8d:9e:df:38:b8:1c:19:83:c6:04:81:bd:bd:7a:5d:8b:c4:33:
af:e3:70:cc:d8:b6:49:ef:46:2a:f9:22:ce:19:4c:39:93:c8:
7e:ac:94:9b:18:d6:21:f3:19:f2:37:b4:aa:3b:95:12:9f:e2:
10:68:bf:6d:ea:8a:c7:17:26:1f:04:07:fe:e4:c6:1f:d7:e6:
38:c6:ac:ce:58:ec:ab:ed:52:ae:f1:a5:ab:ce:c7:36:85:90:
bb:0e:45:a7:3a:f8:ec:52:16:09:08:a6:a4:4c:b0:73:b7:d5:
18:4a:9e:b2
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAffGMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDYwNjIxMTMzNloXDTI1MDgzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxOTY5N0QxMTAvBgNVBAUTKEZGRDBCREZDNkQxRDZGNEVENkVEMzgz
OTAzOUY0MUU5RURDNjZGQkEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC/6Y6OMzq0IMYrCYxQNrwtg3Ek3InlC5ASz7emT4zFLWomFt1KqVP1qNrCsP1k
6EC9R4B1Q4FP24G1SCQPyXISMIRwmytziUH9+Cfffd4e0qOJfc+ykon4e8P461on
WnOX3vX9FiZNYfwD41CriqPAX+w6oURteMGojXuMHkK2L95WPFe/2jXL6R92LJqD
MconHthmNLmyqYeI93CdIXDBuJU0kJbFBCIx086s0KfLz/V21fjU9AEoxVCgCO82
IuE3xh7JLrEbSjr6Vzs7u1jB8FrYDzhqfXAdHkesyOWE+ttN6o1xZyEmiATEdYdL
OEyYwb+378lzZCkh36RQhHG5AgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQU/9C9/G0d
b07W7Tg5A59B6e3Gb7owHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTk2OTdELzlEMjhFQzBDQzdCRjExRUE5MDA4NEQxREM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE5Njk3RC85RDI4RUMwQ0M3QkYxMUVBOTAwODREMURDNEY5QUUwMi9fOUM5X0cw
ZGIwN1c3VGc1QTU5QjZlM0diN28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhqeMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAZ3SGMA8EAgAC
MAkDBwAgAQ31UwAwDQYJKoZIhvcNAQELBQADggEBAKjhhT2mOVugNFL2X6QBervz
KgZrBB7vVljWWLOw20nRn5dJpsQrW/YnYAWobl3kMIkjyWJXGCaX7NFDe9rjuH2Z
4+IcQIRx5gmgmeZppXngOkzoVa5YEtOxeyf9y/IzeHcPwbzd1hNbzZC7jg9/jSha
w0tARDMWmEpM2F7RwCA7yzYep+zUVc90A9dq/Y7l7I2e3zi4HBmDxgSBvb16XYvE
M6/jcMzYtknvRir5Is4ZTDmTyH6slJsY1iHzGfI3tKo7lRKf4hBov23qiscXJh8E
B/7kxh/X5jjGrM5Y7KvtUq7xpavOxzaFkLsORac6+OxSFgkIpqRMsHO31RhKnrI=
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:03:36 2024 by rpki-client on console-fra.rpki-client.org