Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYNZvKD2c7eBYAP7uJtlN6lIB1s.cer
File: gYNZvKD2c7eBYAP7uJtlN6lIB1s.cer (raw, json)
Hash identifier: MUYaAeAxvWaSDZ/I+1qHZ6/XsKtmDUHWfCaXvOLc8ps=
Subject key identifier: 81:83:59:BC:A0:F6:73:B7:81:60:03:FB:B8:9B:65:37:A9:48:07:5B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01D36D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 21 Dec 2023 05:17:57 +0000
Certificate not after: Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 140106
IP: 103.178.97.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Apr 2024 21:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119661 (0x1d36d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Dec 21 05:17:57 2023 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=A9160602/serialNumber=818359BCA0F673B7816003FBB89B6537A948075B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a9:c9:5c:08:6d:b2:08:40:b4:0f:92:68:fd:
cb:12:43:45:2e:b7:fe:b8:00:5a:24:63:49:0f:a0:
69:bc:22:2e:1a:56:f8:d5:f8:0a:11:14:4a:bc:c7:
22:58:f6:74:ab:e4:d6:52:6f:da:6a:46:f3:19:8c:
53:dd:ec:24:cb:eb:e3:2b:3a:2b:f8:33:32:5e:eb:
ce:4b:89:9c:b3:f4:6c:a9:3f:88:b3:6d:90:fe:64:
fc:62:35:9c:f6:5b:b2:7e:3d:18:d6:7c:fc:f9:99:
82:0c:52:3e:3d:39:9a:d6:02:eb:7b:1a:c4:c0:4f:
6b:1a:7a:9d:96:f2:7c:29:6e:11:90:c6:1f:84:34:
1e:29:78:24:ac:c4:67:f1:63:2b:45:e8:2b:a8:0a:
16:2b:0c:1b:98:ab:b9:fb:2c:b8:29:fb:72:3b:af:
54:52:bf:c0:b0:0c:99:ec:c5:70:11:b8:49:1c:95:
6c:e4:88:56:cb:65:10:b7:79:49:e5:68:dd:a5:f8:
24:78:2a:83:a9:24:ec:e7:fd:46:5b:0a:c4:9d:ab:
18:35:72:c6:f7:a4:b5:7b:73:49:07:fc:6f:c0:23:
33:28:87:9d:82:89:29:ef:31:55:ab:54:cf:87:41:
fd:53:de:bf:b6:00:0a:9a:f7:a5:2e:c7:a4:f7:d1:
ab:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:83:59:BC:A0:F6:73:B7:81:60:03:FB:B8:9B:65:37:A9:48:07:5B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
140106
sbgp-ipAddrBlock: critical
IPv4:
103.178.97.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:72:da:bf:be:44:3c:84:6b:d0:61:76:86:a0:37:29:78:e7:
87:6e:be:44:f9:2f:f4:49:dd:89:65:e3:20:05:90:3a:a6:e0:
4c:9f:7f:8c:54:13:f5:91:49:49:92:c2:cd:dd:5f:59:1d:77:
24:12:ba:92:10:d5:d7:2d:8d:51:7f:f3:8c:76:e7:f2:ab:ed:
07:f3:7f:dd:25:8c:d7:ab:48:c6:23:ed:ff:04:bf:4b:cb:c4:
a2:6f:e5:64:8d:50:86:46:94:d9:20:8e:f7:1b:cf:f3:af:20:
62:3b:88:74:ff:75:80:7f:63:60:44:64:9c:a0:8e:30:a8:cd:
24:42:00:58:ec:70:f6:ef:19:60:29:0e:9f:9a:15:e5:a0:12:
58:40:f5:13:79:25:5a:b8:36:ec:c4:e9:3a:46:9e:36:19:df:
ea:52:c3:c5:02:fe:ce:71:b7:67:3c:f7:1c:34:c5:ee:b2:79:
ad:3b:6e:e7:38:4a:7d:03:72:91:11:a0:44:2e:69:16:5c:62:
1e:27:a3:6c:2d:ef:01:68:e9:58:2b:bf:66:1f:2e:55:e3:ab:
bb:67:0c:04:7b:bc:34:4a:04:a0:56:3a:03:56:44:94:05:ee:
77:4c:11:dd:4a:60:17:40:a4:13:b3:4b:1d:39:27:20:41:e4:
64:1d:65:b9
-----BEGIN CERTIFICATE-----
MIIGGjCCBQKgAwIBAgIDAdNtMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMTIyMTA1MTc1N1oXDTI1MDMwMjAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNjA2MDIxMTAvBgNVBAUTKDgxODM1OUJDQTBGNjczQjc4MTYwMDNG
QkI4OUI2NTM3QTk0ODA3NUIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC9qclcCG2yCEC0D5Jo/csSQ0Uut/64AFokY0kPoGm8Ii4aVvjV+AoRFEq8xyJY
9nSr5NZSb9pqRvMZjFPd7CTL6+MrOiv4MzJe685LiZyz9GypP4izbZD+ZPxiNZz2
W7J+PRjWfPz5mYIMUj49OZrWAut7GsTAT2saep2W8nwpbhGQxh+ENB4peCSsxGfx
YytF6CuoChYrDBuYq7n7LLgp+3I7r1RSv8CwDJnsxXARuEkclWzkiFbLZRC3eUnl
aN2l+CR4KoOpJOzn/UZbCsSdqxg1csb3pLV7c0kH/G/AIzMoh52CiSnvMVWrVM+H
Qf1T3r+2AAqa96Uux6T30avrAgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUgYNZvKD2
c7eBYAP7uJtlN6lIB1swHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTYwNjAyL0ZCQ0M4OTdDQUZCMDExRURCMkYyMDQxQkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE2MDYwMi9GQkNDODk3Q0FGQjAxMUVEQjJGMjA0MUJDNEY5QUUwMi9nWU5adktE
MmM3ZUJZQVA3dUp0bE42bElCMXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAiNKMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7JhMA0GCSqG
SIb3DQEBCwUAA4IBAQAvctq/vkQ8hGvQYXaGoDcpeOeHbr5E+S/0Sd2JZeMgBZA6
puBMn3+MVBP1kUlJksLN3V9ZHXckErqSENXXLY1Rf/OMdufyq+0H83/dJYzXq0jG
I+3/BL9Ly8Sib+VkjVCGRpTZII73G8/zryBiO4h0/3WAf2NgRGScoI4wqM0kQgBY
7HD27xlgKQ6fmhXloBJYQPUTeSVauDbsxOk6Rp42Gd/qUsPFAv7OcbdnPPccNMXu
snmtO27nOEp9A3KREaBELmkWXGIeJ6NsLe8BaOlYK79mHy5V46u7ZwwEe7w0SgSg
VjoDVkSUBe53TBHdSmAXQKQTs0sdOScgQeRkHWW5
-----END CERTIFICATE-----
Generated at Fri Apr 19 22:18:50 2024 by rpki-client on console-ams.rpki-client.org