Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4I4DlgkXscVMN6F0qxrnyCUdvM.cer
File: j4I4DlgkXscVMN6F0qxrnyCUdvM.cer (raw, json)
Hash identifier: lYEaE3fWoHMDlgB5eRCh4/ZX4PIuI2LjhjyPHp+048g=
Subject key identifier: 8F:82:38:0E:58:24:5E:C7:15:30:DE:85:D2:AC:6B:9F:20:94:76:F3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01C3BF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916A1E1/9FBEA4A6EC3511ECB07E987CC4F9AE02/j4I4DlgkXscVMN6F0qxrnyCUdvM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916A1E1/9FBEA4A6EC3511ECB07E987CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 12 Oct 2023 16:11:47 +0000
Certificate not after: Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources: AS: 133047
IP: 103.251.12.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 21:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115647 (0x1c3bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 12 16:11:47 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=A916A1E1/serialNumber=8F82380E58245EC71530DE85D2AC6B9F209476F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c1:9a:30:48:53:80:8f:70:4b:d0:26:be:01:
8d:6c:69:00:9b:73:66:de:ab:44:ab:98:1a:4b:e6:
4f:04:d5:4c:50:e1:8f:a2:4e:b2:51:b4:96:c8:62:
a7:89:1f:56:31:01:f1:4f:40:9c:70:2b:13:15:ff:
c4:b7:f9:4b:3b:3c:cf:bc:22:b9:a2:6c:8f:f2:5b:
fe:5a:dd:4e:04:81:23:84:fc:f8:c1:e7:4b:c1:de:
fd:0f:1b:28:95:e3:2c:c3:6e:1e:46:6a:00:02:05:
ce:bc:7b:f0:da:18:35:64:31:e2:6e:b2:0d:86:07:
eb:1e:f5:76:f9:7c:9a:30:d4:22:d2:ce:11:0c:06:
32:8d:5c:df:a8:a2:73:db:2e:6e:94:ec:85:0e:e9:
b0:ec:76:0c:8f:c6:40:e9:fd:8b:7a:52:b3:f8:4f:
1b:01:9e:75:94:70:56:65:44:e3:0c:66:89:9f:11:
9c:52:65:e7:9b:de:05:62:1c:e4:4a:34:69:13:da:
4e:a4:1a:6b:8d:ef:46:1d:61:26:c9:3e:60:8a:cb:
68:3a:75:99:6e:bf:59:27:8b:40:c2:74:35:17:9c:
51:40:09:bf:2c:db:2d:c3:6e:24:37:6b:76:c6:ce:
e6:70:74:c1:e5:72:4a:9e:94:f5:13:a4:06:d0:71:
44:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:82:38:0E:58:24:5E:C7:15:30:DE:85:D2:AC:6B:9F:20:94:76:F3
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916A1E1/9FBEA4A6EC3511ECB07E987CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916A1E1/9FBEA4A6EC3511ECB07E987CC4F9AE02/j4I4DlgkXscVMN6F0qxrnyCUdvM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133047
sbgp-ipAddrBlock: critical
IPv4:
103.251.12.0/23
Signature Algorithm: sha256WithRSAEncryption
af:e1:9a:fb:b1:e3:36:5c:cf:2e:ab:da:30:05:62:b8:a1:9d:
db:00:d4:4c:61:6a:bc:27:04:d6:85:9f:4c:7c:b9:70:eb:c4:
09:e8:b8:08:3d:0d:69:eb:4c:b1:0d:0d:e7:8e:e4:83:38:d8:
2a:a1:cc:d2:b1:06:b7:9d:91:25:97:f3:30:6e:c8:a2:00:a6:
0f:63:45:6d:f7:bc:36:41:d4:24:71:00:51:cf:4f:0d:fc:34:
67:f2:fd:01:65:77:cf:be:76:a1:c2:2f:19:6e:d9:3e:02:b2:
8f:4f:f9:af:04:37:e6:3e:ef:ac:1f:af:b5:47:98:1c:c5:8f:
da:54:5c:34:da:f0:2e:80:a4:d7:3c:b9:59:fa:94:3c:d7:36:
fc:41:77:67:aa:c0:b5:c6:77:62:1d:78:53:8e:86:a1:47:99:
a0:61:07:14:0d:27:3d:47:27:29:cc:9b:eb:54:f7:0d:26:22:
0b:b4:cf:93:83:75:76:3b:c8:9f:f2:f0:98:38:f0:38:6e:d0:
1c:f8:64:9f:6c:be:07:19:72:0c:21:f7:8c:64:39:e7:69:0c:
53:c1:17:b4:f7:ed:8c:da:39:05:25:0e:7f:8f:fb:86:54:17:
2f:eb:d4:ef:c0:9f:db:c5:5f:a2:13:54:13:f2:c1:f9:ce:b4:
9b:a5:3c:af
-----BEGIN CERTIFICATE-----
MIIGGjCCBQKgAwIBAgIDAcO/MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMTAxMjE2MTE0N1oXDTI0MTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNkExRTExMTAvBgNVBAUTKDhGODIzODBFNTgyNDVFQzcxNTMwREU4
NUQyQUM2QjlGMjA5NDc2RjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDCwZowSFOAj3BL0Ca+AY1saQCbc2beq0SrmBpL5k8E1UxQ4Y+iTrJRtJbIYqeJ
H1YxAfFPQJxwKxMV/8S3+Us7PM+8IrmibI/yW/5a3U4EgSOE/PjB50vB3v0PGyiV
4yzDbh5GagACBc68e/DaGDVkMeJusg2GB+se9Xb5fJow1CLSzhEMBjKNXN+oonPb
Lm6U7IUO6bDsdgyPxkDp/Yt6UrP4TxsBnnWUcFZlROMMZomfEZxSZeeb3gViHORK
NGkT2k6kGmuN70YdYSbJPmCKy2g6dZluv1kni0DCdDUXnFFACb8s2y3DbiQ3a3bG
zuZwdMHlckqelPUTpAbQcURPAgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUj4I4Dlgk
XscVMN6F0qxrnyCUdvMwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTZBMUUxLzlGQkVBNEE2RUMzNTExRUNCMDdFOTg3Q0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE2QTFFMS85RkJFQTRBNkVDMzUxMUVDQjA3RTk4N0NDNEY5QUUwMi9qNEk0RGxn
a1hzY1ZNTjZGMHF4cm55Q1Vkdk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAge3MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ/sMMA0GCSqG
SIb3DQEBCwUAA4IBAQCv4Zr7seM2XM8uq9owBWK4oZ3bANRMYWq8JwTWhZ9MfLlw
68QJ6LgIPQ1p60yxDQ3njuSDONgqoczSsQa3nZEll/MwbsiiAKYPY0Vt97w2QdQk
cQBRz08N/DRn8v0BZXfPvnahwi8Zbtk+ArKPT/mvBDfmPu+sH6+1R5gcxY/aVFw0
2vAugKTXPLlZ+pQ81zb8QXdnqsC1xndiHXhTjoahR5mgYQcUDSc9RycpzJvrVPcN
JiILtM+Tg3V2O8if8vCYOPA4btAc+GSfbL4HGXIMIfeMZDnnaQxTwRe09+2M2jkF
JQ5/j/uGVBcv69TvwJ/bxV+iE1QT8sH5zrSbpTyv
-----END CERTIFICATE-----
Generated at Thu Apr 25 22:34:32 2024 by rpki-client on console-fra.rpki-client.org