Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOLX0NlZgNdDytSEhphI26Elwps.cer
File: bOLX0NlZgNdDytSEhphI26Elwps.cer (raw, json)
Hash identifier: EFA+IZPiSL0ONFK+R5j1DdvU6RFwVV/EHMjrAxVbRTM=
Subject key identifier: 6C:E2:D7:D0:D9:59:80:D7:43:CA:D4:84:86:98:48:DB:A1:25:C2:9B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021919
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 05 Nov 2024 13:13:23 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 151969
IP: 103.67.64.0/23
IP: 2001:df3:d40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137497 (0x21919)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Nov 5 13:13:23 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A9120E98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7f:2f:cb:0f:48:c5:3d:9e:dd:27:ff:23:8b:
f6:5c:ee:a2:90:f9:3b:ad:cd:b0:92:09:63:e6:ee:
6c:13:5e:d8:7e:f5:12:1d:29:af:5e:14:ac:ad:af:
fa:54:2c:0f:b5:ac:07:65:64:ba:43:e9:94:d1:62:
ad:e5:14:5d:b0:cc:0a:4e:59:c8:23:23:15:5b:57:
a5:9f:54:2a:0e:6d:b1:30:8e:d4:d2:57:c6:87:e9:
80:77:c8:98:8d:e5:95:7d:02:66:b6:e5:c0:df:52:
87:e3:81:0c:e1:d9:45:22:62:95:72:e3:a8:d7:d0:
8b:e0:82:47:c3:51:0e:11:7d:26:c4:01:6e:ac:2f:
35:97:e8:6f:e5:37:51:e1:94:ac:e5:f4:d8:e0:80:
8f:9c:86:b6:7e:25:60:ef:eb:f9:1e:1b:02:f2:8e:
9d:19:77:7b:fd:2b:d7:f4:24:f2:47:01:54:9e:54:
f1:61:1a:d9:8a:ba:d1:5e:ff:c3:8f:8d:14:51:d2:
a9:0f:cc:23:30:00:da:76:e8:a8:17:91:6d:39:23:
1d:dc:2a:e9:d8:cb:74:0d:cb:f7:79:9d:c3:b6:83:
79:47:88:e6:0a:ed:b6:ae:d0:3b:81:e3:1e:e6:af:
27:93:e4:fa:e9:58:04:49:d7:fe:14:c1:e8:bf:5d:
6d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E2:D7:D0:D9:59:80:D7:43:CA:D4:84:86:98:48:DB:A1:25:C2:9B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151969
sbgp-ipAddrBlock: critical
IPv4:
103.67.64.0/23
IPv6:
2001:df3:d40::/48
Signature Algorithm: sha256WithRSAEncryption
6c:39:05:3b:d8:7d:89:28:df:63:01:2d:bb:0c:97:c3:73:31:
5d:36:b0:5d:df:7d:88:d1:87:60:13:10:a4:ee:bb:bc:d3:0e:
14:2e:46:d1:f5:61:53:4d:d1:00:49:d4:e6:29:5f:91:b3:85:
6e:6e:0d:be:d3:8e:10:9b:b4:6a:36:3b:2d:96:90:4a:fe:d7:
0c:bb:2b:49:88:a3:2c:f1:a0:0f:18:86:c3:45:5d:88:d9:db:
94:71:83:9b:dc:03:d6:b0:51:d6:5e:e9:a2:06:dd:17:ef:1b:
ee:2e:55:da:0d:36:70:5a:42:c0:57:b5:37:8d:9a:28:a1:7a:
93:73:95:cd:52:21:98:bf:d0:c4:9a:72:10:bc:39:d7:f0:04:
cf:18:af:26:08:f8:59:77:b4:d6:ea:37:2d:c2:01:4c:c6:a3:
2a:fd:24:9b:4f:1f:a1:63:1b:e1:f2:35:13:1f:ac:d2:e3:65:
35:14:49:ef:87:40:62:01:52:10:7f:58:2f:f4:da:9b:f5:e8:
ed:f2:d3:b5:38:d7:27:8e:a4:ce:e7:1d:61:be:72:3a:a5:30:
7b:48:77:5a:ba:7e:8b:85:30:50:55:5f:7e:0a:3b:d1:59:fa:
1c:f4:11:ba:51:30:55:14:c2:b1:c6:cd:ad:68:56:3b:85:0e:
7b:c6:2e:9b
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAhkZMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MTEwNTEzMTMyM1oXDTI2MDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMjBFOTgxMTAvBgNVBAUTKDZDRTJEN0QwRDk1OTgwRDc0M0NBRDQ4
NDg2OTg0OERCQTEyNUMyOUIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCufy/LD0jFPZ7dJ/8ji/Zc7qKQ+TutzbCSCWPm7mwTXth+9RIdKa9eFKytr/pU
LA+1rAdlZLpD6ZTRYq3lFF2wzApOWcgjIxVbV6WfVCoObbEwjtTSV8aH6YB3yJiN
5ZV9Ama25cDfUofjgQzh2UUiYpVy46jX0IvggkfDUQ4RfSbEAW6sLzWX6G/lN1Hh
lKzl9NjggI+chrZ+JWDv6/keGwLyjp0Zd3v9K9f0JPJHAVSeVPFhGtmKutFe/8OP
jRRR0qkPzCMwANp26KgXkW05Ix3cKunYy3QNy/d5ncO2g3lHiOYK7bau0DuB4x7m
ryeT5PrpWARJ1/4Uwei/XW0VAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUbOLX0NlZ
gNdDytSEhphI26ElwpswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTIwRTk4Lzc0RkQ1RTgyNkU1MzExRUU5QjkxN0U3OUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEyMEU5OC83NEZENUU4MjZFNTMxMUVFOUI5MTdFNzlDNEY5QUUwMi9iT0xYME5s
WmdOZER5dFNFaHBoSTI2RWx3cHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlGhMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ0NAMA8EAgAC
MAkDBwAgAQ3zDUAwDQYJKoZIhvcNAQELBQADggEBAGw5BTvYfYko32MBLbsMl8Nz
MV02sF3ffYjRh2ATEKTuu7zTDhQuRtH1YVNN0QBJ1OYpX5GzhW5uDb7TjhCbtGo2
Oy2WkEr+1wy7K0mIoyzxoA8YhsNFXYjZ25Rxg5vcA9awUdZe6aIG3RfvG+4uVdoN
NnBaQsBXtTeNmiihepNzlc1SIZi/0MSachC8OdfwBM8YryYI+Fl3tNbqNy3CAUzG
oyr9JJtPH6FjG+HyNRMfrNLjZTUUSe+HQGIBUhB/WC/02pv16O3y07U41yeOpM7n
HWG+cjqlMHtId1q6fouFMFBVX34KO9FZ+hz0EbpRMFUUwrHGza1oVjuFDnvGLps=
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:14:20 2025 by rpki-client