Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer
File: dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer (raw, json)
Hash identifier: zsuhWMhilJofE1NPatGb650xUazGBEt9gakzV6z9wLI=
Subject key identifier: 76:1A:8E:8F:EB:76:01:49:8C:9E:A6:78:87:FD:C1:05:41:76:D9:FC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022523
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Dec 2024 17:30:36 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 139903
IP: 103.146.250.0/23
IP: 2001:df2:7580::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140579 (0x22523)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 27 17:30:36 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A918C10A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:37:34:bc:36:7e:99:9f:dd:19:44:83:9f:03:
97:26:dd:07:cd:04:6c:7c:91:60:53:eb:d1:74:5a:
f8:46:26:8e:ff:3c:95:d2:52:c3:d8:1d:a0:12:89:
d9:c4:c3:9c:d0:04:a5:8b:3d:e7:f9:9a:18:6d:19:
b2:98:54:66:0c:5b:06:66:57:5f:71:14:9b:3d:19:
5b:5b:19:55:04:8d:d0:e6:b9:5e:87:0b:0d:d9:ce:
db:d6:14:9c:4a:43:a0:e5:88:cb:e2:b4:ca:59:89:
79:d6:15:f8:05:18:9b:f9:c7:ed:53:cc:c1:7c:c2:
11:76:b9:c7:2a:ec:bd:ea:99:9c:e0:69:b5:54:f6:
7e:18:f6:75:d9:13:ed:2e:53:58:81:76:44:a4:65:
7d:0f:5f:aa:36:2e:9d:2d:aa:e7:b8:83:97:7e:49:
39:72:8a:e0:aa:5c:f9:a4:66:ec:ca:b7:42:8c:2b:
d9:56:5c:08:19:65:bf:12:0a:e9:55:22:75:66:34:
70:70:8f:27:89:90:0c:38:e8:3d:e4:74:55:92:74:
f5:35:75:e2:ea:38:4b:d3:d7:57:34:21:1f:a5:b8:
90:55:0a:e4:c1:c6:a3:a6:79:b5:37:9d:56:a8:19:
77:0d:f0:49:e5:ba:8c:21:bd:70:d4:12:63:cc:b7:
3e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:1A:8E:8F:EB:76:01:49:8C:9E:A6:78:87:FD:C1:05:41:76:D9:FC
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139903
sbgp-ipAddrBlock: critical
IPv4:
103.146.250.0/23
IPv6:
2001:df2:7580::/48
Signature Algorithm: sha256WithRSAEncryption
d3:16:98:ab:84:1d:4a:3f:43:89:b5:ca:e2:f8:d7:cd:c8:4c:
2d:b6:11:f0:74:18:12:fe:02:0d:60:83:f1:c1:c1:f7:4f:7c:
69:1b:b3:94:cf:59:7b:99:cd:9f:fe:e0:65:1f:78:03:53:14:
2a:bb:14:72:bd:d4:9b:85:57:0e:74:e1:46:1b:88:58:a2:55:
df:6d:86:a6:ee:ba:5d:d7:e6:3f:d2:c8:a5:f6:d4:5c:db:5b:
c1:0c:57:68:ab:67:08:f5:b9:3f:3d:83:54:a3:2c:29:8e:f3:
bf:04:6e:31:a1:d6:f5:3b:0b:da:d5:58:ab:24:b9:8c:07:22:
78:6d:92:ee:64:4a:20:91:a7:7d:fe:58:d8:b7:55:c0:bc:cd:
4d:28:2e:da:1e:be:10:9d:c9:9d:91:48:75:67:37:66:61:87:
3e:2f:29:7b:a7:64:e4:bd:74:44:22:61:2a:8e:88:64:61:c1:
cf:81:87:e5:a6:08:6c:51:e0:56:8d:85:14:97:47:ba:91:9f:
40:df:15:a8:8b:87:eb:1f:d2:79:52:af:78:13:07:4d:52:2e:
74:64:eb:64:35:c3:46:59:dd:f6:f3:b2:fb:7b:a2:ff:4d:4a:
27:cf:9f:c3:f9:48:72:18:43:8f:ba:f0:93:eb:7c:67:d1:f3:
fd:dd:43:f2
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAiUjMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MTIyNzE3MzAzNloXDTI2MDMwMjAwMDAwMFowRjERMA8G
A1UEAxMIQTkxOEMxMEExMTAvBgNVBAUTKDc2MUE4RThGRUI3NjAxNDk4QzlFQTY3
ODg3RkRDMTA1NDE3NkQ5RkMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC2NzS8Nn6Zn90ZRIOfA5cm3QfNBGx8kWBT69F0WvhGJo7/PJXSUsPYHaASidnE
w5zQBKWLPef5mhhtGbKYVGYMWwZmV19xFJs9GVtbGVUEjdDmuV6HCw3ZztvWFJxK
Q6DliMvitMpZiXnWFfgFGJv5x+1TzMF8whF2uccq7L3qmZzgabVU9n4Y9nXZE+0u
U1iBdkSkZX0PX6o2Lp0tque4g5d+STlyiuCqXPmkZuzKt0KMK9lWXAgZZb8SCulV
InVmNHBwjyeJkAw46D3kdFWSdPU1deLqOEvT11c0IR+luJBVCuTBxqOmebU3nVao
GXcN8EnluowhvXDUEmPMtz4JAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUdhqOj+t2
AUmMnqZ4h/3BBUF22fwwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThDMTBBLzk5MTY5ODRBRkRBQjExRUE5NTBCNkYzQUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE4QzEwQS85OTE2OTg0QUZEQUIxMUVBOTUwQjZGM0FDNEY5QUUwMi9kaHFPai10
MkFVbU1ucVo0aF8zQkJVRjIyZncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAiJ/MDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ5L6MA8EAgAC
MAkDBwAgAQ3ydYAwDQYJKoZIhvcNAQELBQADggEBANMWmKuEHUo/Q4m1yuL4183I
TC22EfB0GBL+Ag1gg/HBwfdPfGkbs5TPWXuZzZ/+4GUfeANTFCq7FHK91JuFVw50
4UYbiFiiVd9thqbuul3X5j/SyKX21FzbW8EMV2irZwj1uT89g1SjLCmO878EbjGh
1vU7C9rVWKskuYwHInhtku5kSiCRp33+WNi3VcC8zU0oLtoevhCdyZ2RSHVnN2Zh
hz4vKXunZOS9dEQiYSqOiGRhwc+Bh+WmCGxR4FaNhRSXR7qRn0DfFaiLh+sf0nlS
r3gTB01SLnRk62Q1w0ZZ3fbzsvt7ov9NSifPn8P5SHIYQ4+68JPrfGfR8/3dQ/I=
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:03 2025 by rpki-client