Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.cer
File: gCGxa5JCH3e3Jg6X5q2MHSS9KZo.cer (raw, json)
Hash identifier: +nj+r260UV+/7KFQuydBr3WcnCkp8TlruxCY+7ZiDcM=
Subject key identifier: 80:21:B1:6B:92:42:1F:77:B7:26:0E:97:E6:AD:8C:1D:24:BD:29:9A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021968
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 05 Nov 2024 23:11:53 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 23958
AS: 23960
AS: 24183
IP: 45.125.168.0/22
IP: 103.226.32.0/22
IP: 202.20.0.0/21
IP: 202.68.80.0/20
IP: 202.174.176.0/20
IP: 2402:9e00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137576 (0x21968)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 5 23:11:53 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A91936BE/serialNumber=8021B16B92421F77B7260E97E6AD8C1D24BD299A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e6:ce:a8:df:fe:99:c3:09:cd:0d:58:53:ac:
06:54:a7:b7:2b:46:4d:d8:11:32:ff:d5:77:c1:28:
2d:1d:71:47:b7:48:38:06:05:a7:86:ff:b3:8e:54:
b1:ba:ad:a4:e4:09:00:dd:14:3b:d2:63:78:a3:80:
6a:e3:12:95:33:07:31:83:5d:7c:d2:86:90:db:7c:
a3:d6:17:d1:29:64:ca:58:ae:da:22:65:fc:fe:a7:
ef:f7:20:dd:04:6a:3d:31:84:f0:e6:7a:91:42:23:
f5:27:b7:dc:f1:46:bc:09:ca:22:08:19:39:f8:9e:
60:ff:4e:31:b4:e0:36:33:a1:5d:eb:54:74:a3:65:
57:33:7f:23:5e:ae:a0:be:d8:48:ff:71:98:03:fe:
8a:b0:9d:71:e3:5d:d8:62:f9:6a:9f:af:43:78:dd:
71:61:54:1a:a8:c7:0e:73:ec:5c:ca:8e:79:f2:9d:
13:b8:27:f6:cd:ce:5a:73:85:21:e4:93:c4:db:2b:
95:05:2c:8e:bc:9c:3d:2a:20:5c:61:04:9f:40:4b:
c2:f3:cd:23:6d:21:b4:7b:51:8b:a7:42:33:89:4c:
5f:86:c1:45:20:ef:53:e7:74:bc:3b:62:d1:c8:bc:
a8:15:60:ad:7c:35:4f:53:1a:7c:ff:49:68:e6:28:
49:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:21:B1:6B:92:42:1F:77:B7:26:0E:97:E6:AD:8C:1D:24:BD:29:9A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
23958
23960
24183
sbgp-ipAddrBlock: critical
IPv4:
45.125.168.0/22
103.226.32.0/22
202.20.0.0/21
202.68.80.0/20
202.174.176.0/20
IPv6:
2402:9e00::/32
Signature Algorithm: sha256WithRSAEncryption
d1:c0:88:2f:f6:98:2f:ed:37:50:dd:81:03:d8:e3:83:4a:99:
1d:f6:ec:e3:e8:67:ed:c1:bb:5f:db:14:a7:a5:82:a6:7a:69:
78:9d:7d:ca:05:bb:11:5c:64:22:e7:f8:59:71:6e:c1:17:fb:
f1:fc:6c:43:d8:d4:e1:b0:c0:9a:b0:c2:28:47:1c:4f:1b:57:
82:22:a0:90:42:0d:6e:21:4e:eb:6c:c8:86:a1:13:a1:cf:e2:
cc:d9:9a:45:da:74:31:ec:42:80:3e:55:c4:0d:9a:4d:56:44:
dc:25:80:b9:e4:e8:e7:3f:88:af:e0:0a:26:06:ab:a2:0c:82:
39:98:37:e3:5b:25:ea:44:81:c2:cd:8f:96:7b:50:55:2d:49:
f2:16:fb:77:7f:c1:60:47:4f:61:67:ee:5e:48:ae:11:4a:01:
80:32:0a:68:35:a4:eb:f5:65:a0:ea:83:89:23:48:a7:db:b5:
d9:25:aa:a8:21:b7:fb:db:45:fe:a7:56:f2:89:87:ab:0c:ae:
b5:44:cf:09:1a:c3:c6:70:6f:aa:3c:24:ec:5e:c1:f4:35:6c:
d4:35:cd:c0:36:bf:46:d2:27:6f:c7:81:24:07:54:8e:cb:4e:
c0:17:cd:a5:a7:4b:b1:08:28:72:92:a3:b9:ce:fd:82:25:ad:
be:ca:57:d7
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIDAhloMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MTEwNTIzMTE1M1oXDTI1MTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxOTM2QkUxMTAvBgNVBAUTKDgwMjFCMTZCOTI0MjFGNzdCNzI2MEU5
N0U2QUQ4QzFEMjRCRDI5OUEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC85s6o3/6ZwwnNDVhTrAZUp7crRk3YETL/1XfBKC0dcUe3SDgGBaeG/7OOVLG6
raTkCQDdFDvSY3ijgGrjEpUzBzGDXXzShpDbfKPWF9EpZMpYrtoiZfz+p+/3IN0E
aj0xhPDmepFCI/Unt9zxRrwJyiIIGTn4nmD/TjG04DYzoV3rVHSjZVczfyNerqC+
2Ej/cZgD/oqwnXHjXdhi+Wqfr0N43XFhVBqoxw5z7FzKjnnynRO4J/bNzlpzhSHk
k8TbK5UFLI68nD0qIFxhBJ9AS8LzzSNtIbR7UYunQjOJTF+GwUUg71PndLw7YtHI
vKgVYK18NU9TGnz/SWjmKEkvAgMBAAGjggM9MIIDOTAdBgNVHQ4EFgQUgCGxa5JC
H3e3Jg6X5q2MHSS9KZowHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTkzNkJFL0NBMDY2NjhDRTQ0ODExRUE4MTBCMDM4MEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE5MzZCRS9DQTA2NjY4Q0U0NDgxMUVBODEwQjAzODBDNEY5QUUwMi9nQ0d4YTVK
Q0gzZTNKZzZYNXEyTUhTUzlLWm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQgBAf8EEjAQ
oA4wDAICXZYCAl2YAgJedzBGBggrBgEFBQcBBwEB/wQ3MDUwJAQCAAEwHgMEAi19
qAMEAmfiIAMEA8oUAAMEBMpEUAMEBMqusDANBAIAAjAHAwUAJAKeADANBgkqhkiG
9w0BAQsFAAOCAQEA0cCIL/aYL+03UN2BA9jjg0qZHfbs4+hn7cG7X9sUp6WCpnpp
eJ19ygW7EVxkIuf4WXFuwRf78fxsQ9jU4bDAmrDCKEccTxtXgiKgkEINbiFO62zI
hqEToc/izNmaRdp0MexCgD5VxA2aTVZE3CWAueTo5z+Ir+AKJgarogyCOZg341sl
6kSBws2PlntQVS1J8hb7d3/BYEdPYWfuXkiuEUoBgDIKaDWk6/VloOqDiSNIp9u1
2SWqqCG3+9tF/qdW8omHqwyutUTPCRrDxnBvqjwk7F7B9DVs1DXNwDa/RtInb8eB
JAdUjstOwBfNpadLsQgocpKjuc79giWtvspX1w==
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:03:42 2024 by rpki-client on console-fra.rpki-client.org