Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer
File: l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer (raw, json)
Hash identifier: R8FA2TCafh4L4AzCSghDVUbgQHIJAQiOdbPeqbWMyOk=
Subject key identifier: 97:65:5E:1F:45:38:3F:95:38:AD:B1:51:8A:34:86:A4:60:2B:ED:44
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 020C69
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 06 Sep 2024 18:58:45 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 136911
IP: 103.98.135.0/24
IP: 2001:df2:3700::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134249 (0x20c69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 6 18:58:45 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A91FE40B/serialNumber=97655E1F45383F9538ADB1518A3486A4602BED44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:32:c9:bd:d8:0f:e8:f2:30:9f:7d:8f:43:31:
2b:c3:1f:f4:e4:35:71:62:2a:93:1d:e6:dc:19:4c:
a9:ec:d6:ce:2e:fd:a1:21:b9:4d:9c:ec:ec:26:68:
39:29:1e:7d:81:0b:0b:29:91:64:14:27:e8:3c:00:
62:f9:7a:1e:01:25:cf:78:1c:96:17:f5:d1:2b:53:
6a:80:ed:ed:48:f8:b0:af:d8:d0:26:d5:63:32:fb:
75:ca:68:d3:6d:27:e7:6f:56:e1:68:a5:48:16:9c:
ee:1d:12:c2:ca:b5:44:db:a2:ae:3d:c1:01:23:c3:
bf:eb:e4:7e:55:ee:30:cd:a4:3f:d7:17:82:31:3d:
1c:8f:46:ff:e7:85:ea:2e:aa:3c:ac:d3:46:80:ec:
12:44:23:6b:17:99:1e:12:43:b3:02:88:37:0d:c2:
18:60:81:a5:51:6a:fe:50:45:e9:bb:90:3f:f8:f4:
49:48:bc:19:66:30:97:03:83:7e:e3:4c:50:40:6f:
3a:12:ca:d1:b4:74:7d:06:ab:15:36:7c:a9:f7:17:
f5:47:59:78:1d:69:6c:ff:cc:ef:1c:d5:79:ed:cd:
77:a6:f9:1d:6b:9a:79:16:13:f6:21:28:05:30:a9:
99:17:b6:ea:c4:04:0f:1d:70:30:17:d8:5d:47:85:
f6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:65:5E:1F:45:38:3F:95:38:AD:B1:51:8A:34:86:A4:60:2B:ED:44
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
136911
sbgp-ipAddrBlock: critical
IPv4:
103.98.135.0/24
IPv6:
2001:df2:3700::/48
Signature Algorithm: sha256WithRSAEncryption
65:4b:bf:3c:54:a8:6b:c9:bb:bd:55:4e:f0:0b:1b:44:74:5b:
61:03:22:85:d1:fa:66:3a:d6:b8:b1:02:8f:e1:7c:88:0a:c0:
38:f7:1e:72:c4:64:2c:4c:34:a7:4c:79:f4:6e:64:5a:72:61:
99:a9:11:90:e1:d8:5e:f3:d5:f9:9a:b7:75:74:e5:87:a9:4f:
44:44:1f:37:b9:7a:73:1c:86:20:2e:37:f9:92:59:82:d5:ff:
91:ee:fd:a9:f6:37:31:a4:36:ef:2a:81:11:8f:58:55:fa:08:
ae:bd:37:83:63:bc:b1:17:ee:6d:57:ee:2e:09:c1:f6:ee:f1:
36:03:5a:ff:9c:30:3f:ee:39:10:cc:de:55:48:a8:93:32:d3:
03:90:7d:26:35:f1:0f:18:3e:7a:65:c6:82:0e:53:49:a5:7f:
55:0b:7d:ff:5c:f4:8c:d4:14:b2:5b:bb:fc:72:e6:70:fa:54:
ea:74:21:be:26:a5:42:1e:54:a0:08:00:ed:f9:da:41:68:c3:
3b:0a:06:b9:87:8d:51:c4:fa:eb:47:54:60:66:38:23:ec:41:
1e:cf:bd:80:60:02:2b:b7:d4:5f:87:8b:f7:a0:d5:6e:9c:d8:
36:f6:db:ce:e5:49:a2:61:f9:2a:3c:e1:e4:26:83:30:10:eb:
d9:c8:7c:55
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAgxpMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDkwNjE4NTg0NVoXDTI1MTIwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRkU0MEIxMTAvBgNVBAUTKDk3NjU1RTFGNDUzODNGOTUzOEFEQjE1
MThBMzQ4NkE0NjAyQkVENDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDTMsm92A/o8jCffY9DMSvDH/TkNXFiKpMd5twZTKns1s4u/aEhuU2c7OwmaDkp
Hn2BCwspkWQUJ+g8AGL5eh4BJc94HJYX9dErU2qA7e1I+LCv2NAm1WMy+3XKaNNt
J+dvVuFopUgWnO4dEsLKtUTboq49wQEjw7/r5H5V7jDNpD/XF4IxPRyPRv/nheou
qjys00aA7BJEI2sXmR4SQ7MCiDcNwhhggaVRav5QRem7kD/49ElIvBlmMJcDg37j
TFBAbzoSytG0dH0GqxU2fKn3F/VHWXgdaWz/zO8c1XntzXem+R1rmnkWE/YhKAUw
qZkXturEBA8dcDAX2F1HhfYnAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUl2VeH0U4
P5U4rbFRijSGpGAr7UQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUZFNDBCL0RDNUYxQUNBMDUzOTExRUFCMTc0MkM2QkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFGRTQwQi9EQzVGMUFDQTA1MzkxMUVBQjE3NDJDNkJDNEY5QUUwMi9sMlZlSDBV
NFA1VTRyYkZSaWpTR3BHQXI3VVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhbPMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAZ2KHMA8EAgAC
MAkDBwAgAQ3yNwAwDQYJKoZIhvcNAQELBQADggEBAGVLvzxUqGvJu71VTvALG0R0
W2EDIoXR+mY61rixAo/hfIgKwDj3HnLEZCxMNKdMefRuZFpyYZmpEZDh2F7z1fma
t3V05YepT0REHze5enMchiAuN/mSWYLV/5Hu/an2NzGkNu8qgRGPWFX6CK69N4Nj
vLEX7m1X7i4Jwfbu8TYDWv+cMD/uORDM3lVIqJMy0wOQfSY18Q8YPnplxoIOU0ml
f1ULff9c9IzUFLJbu/xy5nD6VOp0Ib4mpUIeVKAIAO352kFowzsKBrmHjVHE+utH
VGBmOCPsQR7PvYBgAiu31F+Hi/eg1W6c2Db2287lSaJh+So84eQmgzAQ69nIfFU=
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:03:46 2024 by rpki-client on console-fra.rpki-client.org