Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer
File: glI0BAdpP4vHwTIlP0BsBORndvY.cer (raw, json)
Hash identifier: PjKg0dPLM2FhvPqzTsYrmsC60FfXTwajzlss8bsGqMA=
Subject key identifier: 82:52:34:04:07:69:3F:8B:C7:C1:32:25:3F:40:6C:04:E4:67:76:F6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01C642
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 26 Oct 2023 18:38:02 +0000
Certificate not after: Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources: AS: 150352
IP: 103.17.176.0/23
IP: 2400:b5e0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 24 Apr 2024 23:54:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116290 (0x1c642)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 26 18:38:02 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=A91B0514/serialNumber=8252340407693F8BC7C132253F406C04E46776F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4b:e0:e2:e7:b8:0d:80:f7:a4:d2:cb:ab:1a:
d6:08:5a:33:96:b5:c5:8d:00:8b:55:20:75:1d:8e:
50:00:89:06:d7:c7:91:b1:cc:f8:00:9d:15:59:fe:
70:ec:10:98:f6:a9:a1:5b:4b:e8:44:8e:f3:f0:38:
27:79:81:d4:05:be:9b:c5:b0:4c:15:34:53:8f:a0:
54:3c:b4:1e:51:ee:64:43:b7:0b:e7:e2:10:e1:f6:
1d:a4:46:88:0e:ac:d1:3c:fd:16:f5:cf:44:22:e5:
3f:67:c5:70:85:3f:dc:22:c3:28:5f:da:6b:fb:62:
fa:da:f1:0c:d0:4e:a1:6a:b8:50:b5:9c:23:88:b4:
65:0c:a9:4c:f5:77:49:49:a3:59:5f:c7:07:9d:06:
59:91:25:17:29:80:37:ae:86:2d:55:ed:bd:29:75:
ed:e5:7c:8c:25:35:6f:b7:2f:ae:17:ec:a0:54:f2:
9d:d2:b4:26:de:45:0a:74:ec:7f:2c:61:f6:18:72:
4b:36:c4:38:45:f5:cf:66:a8:42:7e:fd:05:02:da:
29:d6:bc:d2:47:0b:21:98:19:e1:8b:b3:53:e1:f7:
69:ce:51:33:21:99:eb:bb:00:59:07:db:e7:af:1c:
d1:52:62:a1:76:0b:f2:18:e7:f6:3f:63:0f:16:25:
c0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:52:34:04:07:69:3F:8B:C7:C1:32:25:3F:40:6C:04:E4:67:76:F6
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
150352
sbgp-ipAddrBlock: critical
IPv4:
103.17.176.0/23
IPv6:
2400:b5e0::/32
Signature Algorithm: sha256WithRSAEncryption
86:63:40:6b:a9:74:f6:66:48:10:3b:3a:25:8d:4e:b6:a3:91:
3d:73:0d:c2:21:d4:30:3b:6e:b5:0a:72:39:3c:c8:54:c8:d9:
7b:a2:ca:88:48:13:53:3b:e0:de:16:cc:f6:86:3f:84:08:37:
58:0c:82:45:6e:e1:89:2e:3e:a8:62:e3:e1:82:56:3f:25:b4:
c1:06:0e:6a:af:85:38:44:20:70:42:27:4e:e7:36:d7:e2:4d:
40:72:f9:c3:cb:41:d8:6c:4d:58:67:6c:4c:ab:be:68:f5:90:
ac:1f:99:18:ec:42:8b:d7:9d:36:19:b4:96:54:71:b1:4e:a6:
56:31:f9:4e:29:15:de:0c:5a:2f:07:1b:14:45:76:a6:75:52:
66:dc:a0:a8:4a:ca:66:a5:9f:6d:7b:b8:df:a2:f3:d9:d2:5e:
7a:8c:e9:72:fd:0a:25:4d:cc:d1:ef:5b:b6:0b:c4:05:91:77:
c1:5d:01:b6:85:88:65:b4:07:69:42:98:8b:b6:53:af:7d:db:
7e:f5:01:c2:11:b6:48:8f:c6:0b:e9:31:f5:97:ec:42:40:1b:
2c:e5:8f:09:cb:9b:00:72:5a:38:d0:2b:0c:e5:0e:ae:2d:8a:
d2:43:d8:43:e0:3a:2d:e0:b9:0a:35:4f:48:69:77:eb:d6:9e:
95:23:e3:35
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAcZCMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMTAyNjE4MzgwMloXDTI0MTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQjA1MTQxMTAvBgNVBAUTKDgyNTIzNDA0MDc2OTNGOEJDN0MxMzIy
NTNGNDA2QzA0RTQ2Nzc2RjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC2S+Di57gNgPek0surGtYIWjOWtcWNAItVIHUdjlAAiQbXx5GxzPgAnRVZ/nDs
EJj2qaFbS+hEjvPwOCd5gdQFvpvFsEwVNFOPoFQ8tB5R7mRDtwvn4hDh9h2kRogO
rNE8/Rb1z0Qi5T9nxXCFP9wiwyhf2mv7Yvra8QzQTqFquFC1nCOItGUMqUz1d0lJ
o1lfxwedBlmRJRcpgDeuhi1V7b0pde3lfIwlNW+3L64X7KBU8p3StCbeRQp07H8s
YfYYcks2xDhF9c9mqEJ+/QUC2inWvNJHCyGYGeGLs1Ph92nOUTMhmeu7AFkH2+ev
HNFSYqF2C/IY5/Y/Yw8WJcBLAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUglI0BAdp
P4vHwTIlP0BsBORndvYwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUIwNTE0L0VGMEEzNTJFNEM1MzExRUQ4QUMwNTA3MEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFCMDUxNC9FRjBBMzUyRTRDNTMxMUVEOEFDMDUwNzBDNEY5QUUwMi9nbEkwQkFk
cFA0dkh3VElsUDBCc0JPUm5kdlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAktQMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZxGwMA0EAgAC
MAcDBQAkALXgMA0GCSqGSIb3DQEBCwUAA4IBAQCGY0BrqXT2ZkgQOzoljU62o5E9
cw3CIdQwO261CnI5PMhUyNl7osqISBNTO+DeFsz2hj+ECDdYDIJFbuGJLj6oYuPh
glY/JbTBBg5qr4U4RCBwQidO5zbX4k1AcvnDy0HYbE1YZ2xMq75o9ZCsH5kY7EKL
1502GbSWVHGxTqZWMflOKRXeDFovBxsURXamdVJm3KCoSspmpZ9te7jfovPZ0l56
jOly/QolTczR71u2C8QFkXfBXQG2hYhltAdpQpiLtlOvfdt+9QHCEbZIj8YL6TH1
l+xCQBss5Y8Jy5sAclo40CsM5Q6uLYrSQ9hD4Dot4LkKNU9IaXfr1p6VI+M1
-----END CERTIFICATE-----
Generated at Thu Apr 18 00:47:32 2024 by rpki-client on console-fra.rpki-client.org