Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9FF7OQq5P2CrWfP0aQFmp6rOm0.cer
File: a9FF7OQq5P2CrWfP0aQFmp6rOm0.cer (raw, json)
Hash identifier: 12jJTMHUVtWSGmJ0+aMpdQXR/MP0a8iwXvPHnBwNQ5Y=
Subject key identifier: 6B:D1:45:EC:E4:2A:E4:FD:82:AD:67:CF:D1:A4:05:9A:9E:AB:3A:6D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01B47B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 02 Aug 2023 16:13:58 +0000
Certificate not after: Thu 31 Oct 2024 00:00:00 +0000
Subordinate resources: AS: 133079
IP: 202.36.175.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Apr 2024 02:50:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111739 (0x1b47b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 2 16:13:58 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=A9164655/serialNumber=6BD145ECE42AE4FD82AD67CFD1A4059A9EAB3A6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d3:67:04:db:89:29:e0:c5:25:b7:19:99:40:
fe:e8:12:88:3d:f3:21:11:7e:3e:5a:42:15:46:d8:
77:56:7e:38:58:d7:70:f8:18:88:c5:6b:1a:fd:43:
2d:ec:f4:2b:c7:39:28:38:04:51:c3:87:b5:59:67:
d5:aa:90:52:21:b8:8b:67:9b:5b:6c:43:c8:f7:ff:
9d:6c:19:be:83:c0:24:2d:f9:3b:03:ed:a6:87:86:
84:42:5d:31:ba:6f:ea:a7:fd:a2:36:c0:7b:1d:ea:
1a:68:08:ce:fc:e4:1b:37:1b:fa:be:e8:91:09:6c:
77:88:6d:c8:44:65:2d:02:e1:dd:b5:c4:87:ba:89:
14:00:ae:9e:6e:cf:bc:93:f7:c0:c1:42:d0:47:4f:
e6:84:f9:3e:d3:47:21:bf:fb:fb:2d:7f:83:9c:78:
27:2c:5a:07:8f:e6:65:55:03:78:ba:37:e9:fd:5d:
99:31:bd:fd:d6:83:a5:ce:17:ad:9b:77:15:6e:f9:
78:78:ea:ad:ad:38:73:34:56:44:78:64:a6:b4:6d:
c0:5a:e9:c9:de:73:b9:b6:ea:7c:70:95:40:43:18:
c0:22:17:bd:99:7b:59:ca:e9:18:a7:86:0a:10:99:
e1:fa:88:1d:07:61:f0:b9:3d:ac:7e:37:09:86:7e:
72:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D1:45:EC:E4:2A:E4:FD:82:AD:67:CF:D1:A4:05:9A:9E:AB:3A:6D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133079
sbgp-ipAddrBlock: critical
IPv4:
202.36.175.0/24
Signature Algorithm: sha256WithRSAEncryption
82:75:53:d3:9a:d8:17:c0:a0:a0:cd:4b:45:4b:02:07:0c:6f:
c3:98:90:d1:51:b9:ba:0b:86:57:03:e7:bf:32:36:20:cb:f5:
f7:dd:da:6c:6c:20:52:75:ee:c2:cc:e1:5f:17:8d:be:4c:e7:
b7:ff:58:79:12:ab:39:ea:58:ac:d9:67:be:0f:ed:7e:99:c1:
26:90:62:d1:c1:fd:96:93:1e:0e:52:0e:4a:a5:67:4f:c4:3b:
5a:fe:a0:04:2f:31:93:23:51:b4:80:a7:44:87:11:9a:02:2d:
32:4d:7d:20:12:88:17:e0:14:05:5e:0f:f9:e7:3f:aa:71:e2:
05:c5:db:19:76:5d:72:36:79:15:a0:d5:f3:06:82:23:44:6d:
46:8b:0c:4c:46:96:f2:de:73:e2:26:5f:18:1e:5a:12:2a:26:
9e:a7:4b:f2:57:db:9b:5b:94:f5:4d:da:fd:90:93:fa:95:a9:
03:2f:91:da:5f:f1:d2:f1:79:b9:7d:13:43:f3:d4:0b:cb:97:
00:94:b8:4f:2c:53:90:cb:26:04:e8:f7:d0:69:75:fc:10:2f:
17:7f:35:4c:19:61:6f:42:3a:fb:57:d2:2a:a5:40:34:1a:23:
52:36:f2:ba:52:8e:d5:47:fd:41:23:c2:61:7f:fb:d1:0b:4c:
80:3c:4b:24
-----BEGIN CERTIFICATE-----
MIIGGjCCBQKgAwIBAgIDAbR7MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMDgwMjE2MTM1OFoXDTI0MTAzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNjQ2NTUxMTAvBgNVBAUTKDZCRDE0NUVDRTQyQUU0RkQ4MkFENjdD
RkQxQTQwNTlBOUVBQjNBNkQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDm02cE24kp4MUltxmZQP7oEog98yERfj5aQhVG2HdWfjhY13D4GIjFaxr9Qy3s
9CvHOSg4BFHDh7VZZ9WqkFIhuItnm1tsQ8j3/51sGb6DwCQt+TsD7aaHhoRCXTG6
b+qn/aI2wHsd6hpoCM785Bs3G/q+6JEJbHeIbchEZS0C4d21xIe6iRQArp5uz7yT
98DBQtBHT+aE+T7TRyG/+/stf4OceCcsWgeP5mVVA3i6N+n9XZkxvf3Wg6XOF62b
dxVu+Xh46q2tOHM0VkR4ZKa0bcBa6cnec7m26nxwlUBDGMAiF72Ze1nK6RinhgoQ
meH6iB0HYfC5Pax+NwmGfnIpAgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUa9FF7OQq
5P2CrWfP0aQFmp6rOm0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTY0NjU1L0Q4QkI4NDlBRjNERTExRUI5RTVFQzA2RUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE2NDY1NS9EOEJCODQ5QUYzREUxMUVCOUU1RUMwNkVDNEY5QUUwMi9hOUZGN09R
cTVQMkNyV2ZQMGFRRm1wNnJPbTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAgfXMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyiSvMA0GCSqG
SIb3DQEBCwUAA4IBAQCCdVPTmtgXwKCgzUtFSwIHDG/DmJDRUbm6C4ZXA+e/MjYg
y/X33dpsbCBSde7CzOFfF42+TOe3/1h5Eqs56lis2We+D+1+mcEmkGLRwf2Wkx4O
Ug5KpWdPxDta/qAELzGTI1G0gKdEhxGaAi0yTX0gEogX4BQFXg/55z+qceIFxdsZ
dl1yNnkVoNXzBoIjRG1GiwxMRpby3nPiJl8YHloSKiaep0vyV9ubW5T1Tdr9kJP6
lakDL5HaX/HS8Xm5fRND89QLy5cAlLhPLFOQyyYE6PfQaXX8EC8XfzVMGWFvQjr7
V9IqpUA0GiNSNvK6Uo7VR/1BI8Jhf/vRC0yAPEsk
-----END CERTIFICATE-----
Generated at Sat Apr 20 03:57:57 2024 by rpki-client on console-fra.rpki-client.org