Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esbv-wTCtYD1pWtqdGzf4FOvap4.cer
File: esbv-wTCtYD1pWtqdGzf4FOvap4.cer (raw, json)
Hash identifier: etxs5SJIBybfqgo5pne/GYXdqeV0j/C4sWEpnjatozk=
Subject key identifier: 7A:C6:EF:FB:04:C2:B5:80:F5:A5:6B:6A:74:6C:DF:E0:53:AF:6A:9E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01CF68
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/esbv-wTCtYD1pWtqdGzf4FOvap4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 03 Dec 2023 15:40:38 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: AS: 138362
IP: 103.131.144.0/22
IP: 2403:cc40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 21:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118632 (0x1cf68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Dec 3 15:40:38 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A91747E1/serialNumber=7AC6EFFB04C2B580F5A56B6A746CDFE053AF6A9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:08:b7:bd:72:b9:d6:04:49:5c:26:e7:6e:2d:
45:5f:eb:8a:93:d4:32:89:84:90:14:a1:11:fe:d5:
94:b4:e9:fe:16:0b:d9:62:2b:30:18:de:1e:d9:f0:
62:9f:cb:2e:2a:2e:15:c6:b0:6f:10:97:3d:dd:2c:
99:95:24:31:f4:61:52:6e:32:3c:15:e1:85:df:8e:
39:9f:3a:6c:69:0b:04:e1:57:77:55:c6:1d:a0:a2:
09:7d:65:c6:8e:aa:6c:b7:d2:3c:0c:a3:fb:77:55:
b5:d5:60:05:8a:d4:a4:ce:60:f7:a9:7d:5e:d0:07:
0c:84:c8:ca:d9:c0:cf:82:8f:54:fe:26:30:44:5f:
0b:1a:16:c3:55:63:db:98:15:8a:94:1a:37:1a:ad:
f9:43:b1:41:aa:6f:ba:c2:8a:1b:72:c3:37:34:a3:
7d:68:1b:e3:ac:ca:2c:0d:fc:67:49:7c:20:0d:a8:
2e:a5:7f:53:92:67:aa:b4:99:80:58:2b:ec:ad:64:
a5:0a:da:da:53:59:e7:b0:5f:31:fb:3b:0b:78:11:
06:88:94:84:ff:d0:d5:1c:72:7a:35:4d:fb:c4:ae:
1c:11:2f:86:3c:7d:1d:8d:dd:b8:7d:9a:f7:ae:92:
5e:3d:0d:c7:9e:09:21:de:86:35:df:c7:f4:65:11:
93:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C6:EF:FB:04:C2:B5:80:F5:A5:6B:6A:74:6C:DF:E0:53:AF:6A:9E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/esbv-wTCtYD1pWtqdGzf4FOvap4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138362
sbgp-ipAddrBlock: critical
IPv4:
103.131.144.0/22
IPv6:
2403:cc40::/32
Signature Algorithm: sha256WithRSAEncryption
a2:e7:24:20:2f:4a:0e:58:55:6b:8d:36:4e:1f:62:b5:8b:d6:
79:70:2a:81:f6:df:90:1b:47:33:64:74:3b:a1:ef:7e:bb:0e:
b4:1f:a3:3b:b1:50:51:1e:15:ca:7e:07:6e:8f:a6:96:37:d7:
85:33:c5:dd:2e:1d:44:2a:c8:fe:5c:0f:a4:7c:1c:1c:03:62:
4f:a9:ba:1b:5f:87:f9:95:49:e0:6a:b2:26:ab:ba:cf:6c:8c:
69:db:d9:bf:56:db:5e:e0:7f:08:f4:94:ef:2d:35:e5:63:a3:
c6:66:cc:94:b8:f8:2c:cb:39:da:a2:81:3c:4a:7e:b9:eb:be:
9e:e0:f0:88:d5:11:35:13:d7:23:9c:50:e6:71:d8:9c:c3:5c:
7e:35:d7:2b:25:9a:f9:dc:04:13:6e:92:0c:3d:4f:e9:ab:73:
d7:c8:91:6a:cd:90:cf:f4:df:df:bd:ae:75:15:76:58:44:15:
b2:c4:ad:eb:ef:2f:a3:cd:07:28:b1:b3:fd:09:a6:a4:ad:83:
2e:07:86:10:de:bd:48:7c:11:89:de:8c:15:a4:cf:5f:c3:a7:
7c:3c:f6:9b:fa:d3:47:c0:b2:d4:16:e0:d8:10:f8:b0:87:01:
58:cc:72:f9:19:ac:59:1a:d5:3e:fe:95:a9:bc:b3:64:fe:6b:
3b:02:55:df
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAc9oMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMTIwMzE1NDAzOFoXDTI1MDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNzQ3RTExMTAvBgNVBAUTKDdBQzZFRkZCMDRDMkI1ODBGNUE1NkI2
QTc0NkNERkUwNTNBRjZBOUUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCiCLe9crnWBElcJuduLUVf64qT1DKJhJAUoRH+1ZS06f4WC9liKzAY3h7Z8GKf
yy4qLhXGsG8Qlz3dLJmVJDH0YVJuMjwV4YXfjjmfOmxpCwThV3dVxh2gogl9ZcaO
qmy30jwMo/t3VbXVYAWK1KTOYPepfV7QBwyEyMrZwM+Cj1T+JjBEXwsaFsNVY9uY
FYqUGjcarflDsUGqb7rCihtywzc0o31oG+OsyiwN/GdJfCANqC6lf1OSZ6q0mYBY
K+ytZKUK2tpTWeewXzH7Owt4EQaIlIT/0NUccno1TfvErhwRL4Y8fR2N3bh9mveu
kl49DceeCSHehjXfx/RlEZOLAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUesbv+wTC
tYD1pWtqdGzf4FOvap4wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTc0N0UxL0NFMzQ3MkRFNENDODExRUFBMDU4RUMxNEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE3NDdFMS9DRTM0NzJERTRDQzgxMUVBQTA1OEVDMTRDNEY5QUUwMi9lc2J2LXdU
Q3RZRDFwV3RxZEd6ZjRGT3ZhcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhx6MC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZ4OQMA0EAgAC
MAcDBQAkA8xAMA0GCSqGSIb3DQEBCwUAA4IBAQCi5yQgL0oOWFVrjTZOH2K1i9Z5
cCqB9t+QG0czZHQ7oe9+uw60H6M7sVBRHhXKfgduj6aWN9eFM8XdLh1EKsj+XA+k
fBwcA2JPqbobX4f5lUngarImq7rPbIxp29m/Vtte4H8I9JTvLTXlY6PGZsyUuPgs
yznaooE8Sn65676e4PCI1RE1E9cjnFDmcdicw1x+NdcrJZr53AQTbpIMPU/pq3PX
yJFqzZDP9N/fva51FXZYRBWyxK3r7y+jzQcosbP9CaakrYMuB4YQ3r1IfBGJ3owV
pM9fw6d8PPab+tNHwLLUFuDYEPiwhwFYzHL5GaxZGtU+/pWpvLNk/ms7AlXf
-----END CERTIFICATE-----
Generated at Thu Apr 25 22:34:30 2024 by rpki-client on console-fra.rpki-client.org