Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer
File: k9FqxcizBHYOd0g_k-6vq8OjCxI.cer (raw, json)
Hash identifier: 9BlOqlQEI5ReFqIKkattkyWuLBfwGD0ZGpx5D1eyego=
Subject key identifier: 93:D1:6A:C5:C8:B3:04:76:0E:77:48:3F:93:EE:AF:AB:C3:A3:0B:12
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E063
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 23 Feb 2024 12:46:11 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 56192
IP: 103.255.128.0/22
IP: 202.0.110.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 23 Apr 2024 19:30:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122979 (0x1e063)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 23 12:46:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A911E64C/serialNumber=93D16AC5C8B304760E77483F93EEAFABC3A30B12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:46:a4:ea:b3:28:15:94:c7:57:f6:04:39:40:
4e:83:9c:8c:6a:ca:5a:8e:1a:cf:40:99:af:4b:e7:
03:e6:8a:c4:57:ff:c7:fd:86:b4:76:32:55:ed:9a:
8a:bd:b8:af:c0:f3:02:50:3c:da:31:6d:12:82:fc:
3c:15:93:f8:5e:4b:ea:6a:03:f0:fc:0b:8c:f4:12:
c2:31:aa:34:78:88:47:68:23:a0:7e:71:3a:db:34:
b6:f2:0f:dd:9f:69:75:1e:e7:3e:d0:4d:66:c1:fe:
31:a5:23:48:49:6a:6c:91:bc:12:08:18:03:2d:6c:
de:0e:04:4c:b2:70:dc:e3:31:19:34:ab:2c:86:32:
84:90:e9:0b:01:c2:b0:7e:c8:ec:7d:e8:31:bd:a8:
0c:b2:02:86:47:6a:0e:43:76:8e:36:c6:9f:33:c2:
cb:d1:78:42:bf:2b:65:d2:63:e4:37:a1:0d:4b:ac:
ae:ad:7e:d0:8e:cc:93:a6:1b:47:37:05:15:48:2a:
65:c5:28:07:0e:db:10:fa:b6:a4:28:39:c5:e5:eb:
ba:1c:9e:45:3c:d8:c7:2a:42:60:36:8e:46:f6:a6:
18:65:25:e3:3a:99:2b:e2:1d:5f:2a:32:c1:5c:13:
50:3b:cc:e2:06:91:9f:89:cd:99:74:7f:01:61:71:
3a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D1:6A:C5:C8:B3:04:76:0E:77:48:3F:93:EE:AF:AB:C3:A3:0B:12
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56192
sbgp-ipAddrBlock: critical
IPv4:
103.255.128.0/22
202.0.110.0/24
Signature Algorithm: sha256WithRSAEncryption
37:33:27:c1:58:da:87:51:dc:e0:65:84:9f:82:72:8d:cd:17:
fc:01:f9:52:b0:f2:ad:3b:7c:eb:4b:74:cc:a9:73:8a:3b:52:
5d:1d:91:e0:da:b1:5c:11:73:5e:71:cb:33:41:0a:8b:02:2d:
1b:07:b2:46:fb:41:60:94:9d:90:48:44:4c:da:c9:a3:c3:76:
20:36:1c:b4:19:9c:71:86:e0:69:39:8e:5d:e0:dd:0d:bc:02:
92:cd:f2:1d:13:57:e3:d8:0b:2f:fc:00:49:55:74:5e:f2:c8:
66:62:f4:da:d6:20:b4:88:18:e2:1a:2f:5e:e1:51:a1:90:aa:
93:54:29:8e:c9:a0:44:98:96:f5:bc:87:16:ab:de:fb:64:5c:
3b:a4:60:76:b4:a6:5a:45:da:78:bc:51:36:aa:76:29:1a:80:
73:f1:13:e8:48:c8:3b:f7:3b:a4:9f:ff:0a:1a:4f:8d:d9:0b:
ba:93:4c:83:cd:40:29:3e:87:75:56:d0:e9:3a:91:7c:57:42:
96:c9:2b:5a:7f:1e:3f:81:f7:71:9c:c0:04:cc:bc:7f:66:4f:
71:39:61:75:87:eb:8a:09:17:19:40:f9:f9:a2:dd:f7:15:4f:
98:11:7c:1d:9e:a3:92:1f:93:1c:8d:5d:a7:13:5a:d0:57:77:
e9:b3:60:0a
-----BEGIN CERTIFICATE-----
MIIGIDCCBQigAwIBAgIDAeBjMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDIyMzEyNDYxMVoXDTI1MDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMUU2NEMxMTAvBgNVBAUTKDkzRDE2QUM1QzhCMzA0NzYwRTc3NDgz
RjkzRUVBRkFCQzNBMzBCMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDQRqTqsygVlMdX9gQ5QE6DnIxqylqOGs9Ama9L5wPmisRX/8f9hrR2MlXtmoq9
uK/A8wJQPNoxbRKC/DwVk/heS+pqA/D8C4z0EsIxqjR4iEdoI6B+cTrbNLbyD92f
aXUe5z7QTWbB/jGlI0hJamyRvBIIGAMtbN4OBEyycNzjMRk0qyyGMoSQ6QsBwrB+
yOx96DG9qAyyAoZHag5Ddo42xp8zwsvReEK/K2XSY+Q3oQ1LrK6tftCOzJOmG0c3
BRVIKmXFKAcO2xD6tqQoOcXl67ocnkU82McqQmA2jkb2phhlJeM6mSviHV8qMsFc
E1A7zOIGkZ+JzZl0fwFhcTqXAgMBAAGjggMVMIIDETAdBgNVHQ4EFgQUk9Fqxciz
BHYOd0g/k+6vq8OjCxIwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTFFNjRDLzYzRDVBQzQwRDBDMjExRUE5QjMzQkY2MEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTExRTY0Qy82M0Q1QUM0MEQwQzIxMUVBOUIzM0JGNjBDNEY5QUUwMi9rOUZxeGNp
ekJIWU9kMGdfay02dnE4T2pDeEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDANuAMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCZ/+AAwQAygBu
MA0GCSqGSIb3DQEBCwUAA4IBAQA3MyfBWNqHUdzgZYSfgnKNzRf8AflSsPKtO3zr
S3TMqXOKO1JdHZHg2rFcEXNeccszQQqLAi0bB7JG+0FglJ2QSERM2smjw3YgNhy0
GZxxhuBpOY5d4N0NvAKSzfIdE1fj2Asv/ABJVXRe8shmYvTa1iC0iBjiGi9e4VGh
kKqTVCmOyaBEmJb1vIcWq977ZFw7pGB2tKZaRdp4vFE2qnYpGoBz8RPoSMg79zuk
n/8KGk+N2Qu6k0yDzUApPod1VtDpOpF8V0KWyStafx4/gfdxnMAEzLx/Zk9xOWF1
h+uKCRcZQPn5ot33FU+YEXwdnqOSH5McjV2nE1rQV3fps2AK
-----END CERTIFICATE-----
Generated at Tue Apr 16 20:24:12 2024 by rpki-client on console-fra.rpki-client.org