Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggCxpefBdgW1czx0_sHvEnOz6iU.cer
File: ggCxpefBdgW1czx0_sHvEnOz6iU.cer (raw, json)
Hash identifier: G4zIS71lW6j0IVWNcJBOoME3ZjiAskWbV6eARa+Fxk4=
Subject key identifier: 82:00:B1:A5:E7:C1:76:05:B5:73:3C:74:FE:C1:EF:12:73:B3:EA:25
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01B1FC
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 25 Jul 2023 12:38:19 +0000
Certificate not after: Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources: IP: 202.86.224.0/20
IP: 202.87.64.0/20
IP: 210.88.16.0 -- 210.88.55.255
IP: 210.88.64.0 -- 210.88.143.255
IP: 210.88.192.0 -- 210.88.215.255
IP: 210.88.223.0 -- 210.88.233.255
IP: 210.89.96.0/22
IP: 2405:4e00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Apr 2024 21:25:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111100 (0x1b1fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 25 12:38:19 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=A911AD0C/serialNumber=8200B1A5E7C17605B5733C74FEC1EF1273B3EA25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cb:2b:9c:77:7f:ea:63:aa:1f:12:54:e9:cb:
e1:d5:7e:2c:0e:95:92:ea:dc:c9:fb:36:1d:b9:0d:
eb:0e:b6:d3:51:d5:a3:e7:e0:70:15:d0:2b:78:43:
6d:85:5f:36:74:8d:4d:86:7b:52:32:08:22:a1:a9:
76:b6:37:bf:b5:c6:41:cc:ae:1c:61:14:a0:10:09:
69:c6:b6:a3:b7:07:15:a9:b3:ed:34:ee:e0:43:b5:
cd:b9:0f:12:ab:11:02:f1:25:9c:75:63:ff:87:4d:
0a:c1:3a:15:9a:eb:8f:e0:ba:f0:ed:b0:69:85:6d:
ad:ec:1c:48:98:1e:1e:e7:ac:9d:00:df:d4:3d:2d:
17:e8:d4:60:52:c2:a8:4b:b5:7f:c8:aa:dd:39:11:
70:73:cd:aa:73:ea:85:10:1b:2d:60:c2:cf:b9:7d:
c0:84:b3:93:6d:c7:14:16:19:90:1c:2e:b0:e2:70:
60:07:56:7c:06:ae:3b:06:9e:62:91:b1:d7:ca:2e:
ba:f9:24:b6:d9:dd:f7:75:8e:6a:be:e5:94:d9:8a:
84:51:17:61:4b:88:12:ac:48:09:12:90:19:2a:fa:
1c:a9:a9:b8:8f:6b:c9:a5:4c:d3:a1:c5:33:d0:1f:
91:7d:d7:79:4f:71:38:68:76:d1:12:55:af:9d:0a:
f1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:00:B1:A5:E7:C1:76:05:B5:73:3C:74:FE:C1:EF:12:73:B3:EA:25
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.86.224.0/20
202.87.64.0/20
210.88.16.0-210.88.55.255
210.88.64.0-210.88.143.255
210.88.192.0-210.88.215.255
210.88.223.0-210.88.233.255
210.89.96.0/22
IPv6:
2405:4e00::/32
Signature Algorithm: sha256WithRSAEncryption
64:47:3b:36:82:1d:63:fc:42:93:00:f3:a2:7d:42:7e:60:41:
49:99:93:02:75:1d:09:46:7c:a2:10:36:56:c5:df:bb:7b:e1:
2c:dc:6a:5d:74:6f:99:cf:ec:a3:f9:c9:c8:c3:56:10:bc:d6:
4e:48:7f:bb:98:26:73:a6:7c:d8:f4:d0:fd:ea:37:f8:80:47:
3b:c0:89:85:cd:cf:7b:63:6d:9c:db:40:b1:04:4a:c2:4c:dd:
7c:8f:7b:7c:d4:61:84:a3:13:cb:74:43:54:c9:3f:07:4f:e9:
cf:10:74:e6:d7:64:59:80:30:71:7e:83:27:3a:8e:e8:c5:9b:
e4:fc:99:41:75:96:21:57:d2:b7:eb:a1:4b:c3:49:f8:e8:aa:
e1:7e:dd:02:40:6f:9a:73:11:75:f7:e5:58:ef:c8:d3:49:2c:
b2:7a:de:79:2a:1d:99:4c:f5:64:2f:ee:35:87:09:2c:cd:d1:
aa:d3:7e:e5:d2:4f:d6:c2:68:5a:46:2f:bb:cf:7a:f9:e9:e7:
37:6a:ca:85:8d:5c:ab:55:6c:36:51:db:db:b8:d7:01:70:54:
3f:39:f7:29:0f:14:40:57:d9:04:75:99:17:54:47:bf:60:11:
6c:7d:0c:e6:71:d0:8e:89:9a:eb:34:60:74:c3:08:bf:fa:70:
bb:2f:b1:ba
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIDAbH8MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMDcyNTEyMzgxOVoXDTI0MDkzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMUFEMEMxMTAvBgNVBAUTKDgyMDBCMUE1RTdDMTc2MDVCNTczM0M3
NEZFQzFFRjEyNzNCM0VBMjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDXyyucd3/qY6ofElTpy+HVfiwOlZLq3Mn7Nh25DesOttNR1aPn4HAV0Ct4Q22F
XzZ0jU2Ge1IyCCKhqXa2N7+1xkHMrhxhFKAQCWnGtqO3BxWps+007uBDtc25DxKr
EQLxJZx1Y/+HTQrBOhWa64/guvDtsGmFba3sHEiYHh7nrJ0A39Q9LRfo1GBSwqhL
tX/Iqt05EXBzzapz6oUQGy1gws+5fcCEs5NtxxQWGZAcLrDicGAHVnwGrjsGnmKR
sdfKLrr5JLbZ3fd1jmq+5ZTZioRRF2FLiBKsSAkSkBkq+hypqbiPa8mlTNOhxTPQ
H5F913lPcThodtESVa+dCvELAgMBAAGjggNGMIIDQjAdBgNVHQ4EFgQUggCxpefB
dgW1czx0/sHvEnOz6iUwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTFBRDBDLzFCMEIzNThFMURBQjExRTI4QTdGMDBBODA4QjAyQ0QyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTExQUQwQy8xQjBCMzU4RTFEQUIxMUUyOEE3RjAwQTgwOEIwMkNEMi9nZ0N4cGVm
QmRnVzFjengwX3NIdkVuT3o2aVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwcgYIKwYBBQUHAQcBAf8EYzBh
MFAEAgABMEoDBATKVuADBATKV0AwDAMEBNJYEAMEA9JYMDAMAwQG0lhAAwQE0liA
MAwDBAbSWMADBAPSWNAwDAMEANJY3wMEAdJY6AMEAtJZYDANBAIAAjAHAwUAJAVO
ADANBgkqhkiG9w0BAQsFAAOCAQEAZEc7NoIdY/xCkwDzon1CfmBBSZmTAnUdCUZ8
ohA2VsXfu3vhLNxqXXRvmc/so/nJyMNWELzWTkh/u5gmc6Z82PTQ/eo3+IBHO8CJ
hc3Pe2NtnNtAsQRKwkzdfI97fNRhhKMTy3RDVMk/B0/pzxB05tdkWYAwcX6DJzqO
6MWb5PyZQXWWIVfSt+uhS8NJ+Oiq4X7dAkBvmnMRdfflWO/I00kssnreeSodmUz1
ZC/uNYcJLM3RqtN+5dJP1sJoWkYvu896+ennN2rKhY1cq1VsNlHb27jXAXBUPzn3
KQ8UQFfZBHWZF1RHv2ARbH0M5nHQjoma6zRgdMMIv/pwuy+xug==
-----END CERTIFICATE-----
Generated at Thu Apr 18 22:04:10 2024 by rpki-client on console-fra.rpki-client.org